Phase 0 - Prerequisites and Core foundation
NSE 4 7.6 renewal, NSE 7 EFW 7.6 renewal, HA, routing, VPN, overlays, and early troubleshooting drills.
12-Month Plan
NSE 8 v4 Core plus Secure Networking.
The roadmap starts by renewing NSE 4 and NSE 7 on FortiOS 7.6, then turns the same work into Core preparation before the Secure Networking specialization.
Phase 1 - Core deep dive
Authentication and certificates, NGFW/security profiles, Security Fabric, automation, APIs, and SASE concepts.
Phase 2 - Integration and full topology
FortiAnalyzer, VDOMs, advanced networking, full enterprise build, timed break/fix sessions, and weak-area remediation.
Phase 3 - Core attempt
Mock practicals, edge-case review, CLI speed drills, session/routing interpretation, and final Core module attempt.
Phase 4 - Secure Networking specialization
SD-WAN orchestration, EMS/ZTNA, FortiSandbox, FortiSwitch, FortiNAC, advanced networking, and specialization attempt.
Exam Weighting
What gets the most reps.
| Module | Domain | Weight | Practice emphasis |
|---|---|---|---|
| Core | Networking | 40% | Routing, SD-WAN, NAT, VPN, overlays, advanced networking. |
| Core | Infrastructure | 27% | HA, platforms, system optimization, Fortinet management components. |
| Core | Security Fabric | 19% | Fabric topology, logging, automation, APIs, FortiManager workflows. |
| Core | Authentication | 14% | LDAP, RADIUS, SAML, FSSO, PKI, certificate operations. |
| Secure Networking | Threat Mitigation | 30% | FortiSandbox, IPS, DDoS, threat feeds, inspection, response. |
| Secure Networking | Secure SD-WAN | 25% | ADVPN, orchestration, BGP, SLAs, FEC, ZTP, FortiManager templates. |
| Secure Networking | Enterprise Networking | 25% | FortiSwitch, FortiNAC, VXLAN, VRF, route leaking, MCLAG. |
| Secure Networking | Endpoint Security | 20% | EMS, ZTNA tags, access proxy, endpoint protection, incident response. |