Fortinet NSE 6 - Secure Wireless LAN

Wireless is often the least-governed edge of the network. Access points get added floor by floor, rogue APs go unnoticed, and remote or hard-to-cable locations end up with inconsistent setups. This Fortinet NSE 6 - Secure Wireless LAN course shows your team how to run Wi-Fi centrally from the FortiGate acting as the wireless controller.

Role fit: Built for security engineers and network engineers with three to five years of network security infrastructure experience. It fits teams that already run FortiGate and FortiSwitch and need to standardize wireless on the same platform.

Time investment: About 6.1 hours across seven skills. Most learners can finish it in one to two weeks alongside their normal workload.

Risk and change-management notes:

• Rogue AP suppression and wireless IDS (WIDS) profiles help your team enforce wireless security policy.
• AP profiles apply consistent settings across groups of access points, much like user groups. This reduces configuration drift.
• Remote APs are authorized and tested locally before they ship. The course also covers the trade-offs of split tunneling, which helps prevent failed rollouts.

The lab uses real FortiGate, FortiSwitch, and FortiAP hardware, so plan for equipment access if learners will follow along hands-on. Team Leads can preview the free Fortinet Wireless Design skill first. They can also pair this course with CBT Nuggets' FortiGate and FortiSwitch training to fill foundational gaps.

IT teams complete this training to run wireless as a managed extension of the FortiGate, not a collection of standalone access points. Instructor Keith Barker builds a working lab with FortiGate, FortiSwitch, and FortiAPs, then designs, deploys, and extends Wi-Fi on it step by step. Your team sees the same workflows it will use in production.

• Plan coverage before buying hardware. Your team learns to scope a WLAN by square footage, user count, and application sensitivity, such as voice over IP and other real-time traffic. Site surveys and testing then confirm the right gear is in place, which reduces rework on large floors and multi-floor buildings.
• Standardize configuration at scale. AP profiles work like user groups: configure once, then apply the profile across many access points. Your team also monitors wireless environments with FortiPresence and tunes SSID, radio, and profile settings to support consistent client connectivity.
• Support remote sites and home workers. Team members pre-stage an AP to discover the FortiGate controller and test it locally before it ships. They also set up NAT and firewall policy for the remote SSID and weigh split tunneling against full tunneling, which affects FortiGate overhead.
• Operate additional WLANs and bridge mode. Your team configures multiple SSIDs, applies centralized source NAT, and works with bridge-mode wireless designs. It then verifies client connectivity from the FortiGate, which speeds troubleshooting when users report slow Wi-Fi.

Knowledge

• How Wi-Fi fundamentals work, including radio frequency concepts such as frequency and amplitude, and how they shape choices about access points, frequencies, and bandwidth
• How to plan a wireless LAN by asking the right design questions: coverage area, user counts, and latency-sensitive applications such as voice over IP
• How AP profiles apply consistent settings across many access points, much like user groups
• How remote APs discover the FortiGate controller, and the trade-offs between split tunneling and sending all traffic through the tunnel
• How wireless mesh, leaf APs, and point-to-point mesh bridges extend coverage beyond wired connections
• How FortiPresence can aggregate wireless monitoring information across locations, and how Wi-Fi maps provide visibility into AP placement

Ability

• Bootstrap a FortiGate and connect it to a FortiSwitch stack over FortiLink to build the infrastructure that supports managed FortiAPs
• Create and verify SSIDs with interface addressing and DHCP services so wireless clients can join the network
• Build custom AP profiles, review full configurations from the CLI, and set frequency and AP handoff for load balancing
• Configure centralized source NAT and firewall policies, then authorize and test remote APs locally before shipping them to a remote site
• Deploy and validate mesh and bridged AP topologies, using diagnostics to confirm client association and bandwidth
• Apply incremental spot-check testing throughout a deployment to find faults before rollout