Fortinet NSE 6 - FortiManager 7.6 Administrator

For IT leaders: When firewall teams manage FortiGate devices one box at a time, configurations drift, policy changes go unreviewed, and firmware falls behind. This course shows your team how to centralize that work in FortiManager 7.6.

Role fit: Assign it to firewall administrators, network security engineers, and SOC analysts who already know FortiGate basics and manage multiple devices. Team Leads responsible for Fortinet change control will also benefit.

Risk and compliance: The training covers ADOMs with scoped admin permissions, FortiManager backups, policy checks for syntax and duplicate objects, and workflow mode. In workflow mode, one admin submits changes and a separate approver authorizes them. These controls support auditable change management. The course also covers FortiManager HA and centralized firmware updates to reduce single points of failure and patch gaps.

Time investment: About 8.6 hours across 9 skills, from deployment through switch, AP, and firmware management. Each skill runs under 75 minutes, so learners can finish one in a single focused block.

Change management: Moving to workflow mode changes daily habits. Admins must lock, start a session, and submit changes for approval. Plan for a short adjustment period.

Build a Playlist that pairs this course with Fortinet NSE 4 - FortiOS 7.6 Administrator for staff new to FortiGate. Use Team Reporting to track progress toward the NSE 6 in Secure Networking certification.

IT teams complete this training to run a multi-FortiGate environment from one console instead of logging into firewalls one at a time. The course works through the customer scenarios a Team Lead actually gets called about, so practitioners learn to diagnose problems as well as configure.

• Faster onboarding of new firewalls: When FortiGates won't register with a new FortiManager, your team knows the likely failure points. They can confirm config status shows synchronized, and they know that out-of-band local changes break that sync.
• One shared policy across mismatched sites: Firewalls with different internal subnets, zones, and interfaces can still run a single shared policy package. Normalized interfaces and SD-WAN zones, plus global header and footer policies from the Global ADOM, make this possible.
• Stronger change control: Workflow mode with a dedicated approver account creates a two-person process. One admin locks, edits, and submits; a second admin approves. Policy checks and duplicate-object detection catch errors before changes are pushed.
• Less downtime at the edge: Practitioners troubleshoot offline FortiSwitches, VLANs missing DHCP, and APs whose operational profiles don't list the right tunnel or bridge SSIDs. They also learn to use FortiManager as a FortiGuard distribution server, push centralized firmware updates, and configure FortiManager HA so the management plane survives a failure.

Knowledge

• How FortiManager is deployed as an on-prem VM, and why internet access matters for licensing and FortiGuard updates, with an air-gapped exception
• How administrative domains (ADOMs) and scoped admin accounts separate management responsibility, and why FortiManager configuration backups matter
• How policy packages, normalized interfaces, and shared objects let one policy serve firewalls with mismatched subnets, zones, and interfaces
• How the Global Database ADOM applies global objects and header/footer policies across ADOMs and specific policy packages
• How workspace and workflow modes support change control through locks, sessions, and a separate approver
• How FortiManager acts as a FortiGuard distribution server, supports its own high availability, and coordinates firmware updates

Ability

• Register FortiGates and integrate FortiAnalyzer with FortiManager, then confirm configuration status stays synchronized
• Onboard FortiGates to a new FortiManager and verify the integration, including device status and configuration synchronization
• Push device settings and firewall policy packages from FortiManager, using policy checks and duplicate-object discovery before deployment
• Manage FortiSwitch VLANs and FortiAP operational profiles centrally, validate client connectivity and DHCP behavior, and apply bridge versus tunnel SSID concepts correctly
• Set up a two-person approval workflow so admins submit changes for review before they reach production
• Plan and run centralized firmware updates across managed FortiGates while keeping FortiManager fault tolerant