Firewall Policiies Module FOS 5.2 draft

[mickstrick_FTNT]

Please find the draft version of the Firewall Policies module for FortiOS 5.2. https://www.brainshark.com/fortinet/FGT1_03_Firewall_Policies_5-2 Comments and feedback welcome. Mike

[dhnz]

The content is looking good, my biggest comment is about length. I already find myself breaking half way through the 201 firewall module (Usually just before NAT) to try and keep focus. I feel that 70 slides would just be a little much to absorb for many. Perhaps we can split VIP, Endpoint Control and some of the more advanced NAT concepts out into another module within the 301, perhaps including the Load Balancing and SSL Offloading capability. Next, in the labs one thing that we' re missing right now is a " Best Practice" type example showing: - Splitting out DNS / ICMP into their own policy with logging disabled to save resources - Creating a specific policy for BYOD with Web Access and E-Mail access with Certificate Inspection enabled. - Using a " Services" group instead of the All, disuading use of the All service at all. In the 301, it' d be nice to see a module incorporating Load Balancing, SSL Offloading and IPS in addition to a server / DMZ best practice example. Peraps included with the DoS policy. David

[mickstrick_FTNT]

Hi David, Sorry for the delay in responding. Many thanks for your feedback. While I agree the shorter modules help, the files are structured in a way that the content is indexed and when this module runs in a online training program your progress is tracked and you can rejoin where you left off. I will work your feedback into the module objectives. With regards to the second item for BYOD, can you conform this is SSL inspection you are referring too. Thanks! Mike

[mickstrick_FTNT]

Please note I have removed the URL resource. I will post the final version when its completed. Many thanks!

[MVIOX]

Any update on this module? Many thanks!