FortiSOAR Administrator Course Overview:

In this course, you will gain knowledge about the FortiSOAR architecture and how to effectively deploy, configure, manage, operate, and monitor FortiSOAR within a Security Operations Center (SOC) environment. The course will cover various system customization options, High Availability (HA) deployment, security management through role-based access control (RBAC), and the utilization of diverse system monitoring tools.

Intended Audience:

• This course is intended for cybersecurity professionals responsible for planning, deploying, configuring, and managing FortiSOAR deployments in a SOC environment.

Learning Objectives of FortiSOAR Administrator:

Upon completing this course, you will have the following capabilities:

• Identify challenges faced by security teams and apply best practices in Security Orchestration, Automation, and Response (SOAR) to assist them effectively.
• Understand the role of SOAR technology in supporting security teams.
• Describe the fundamental principles of SOAR technology.
• Manage licenses for FortiSOAR.
• Deploy and manage a FortiSOAR Virtual Machine (VM).
• Configure teams, roles, and user access within FortiSOAR.
• Set up authentication mechanisms for secure access.
• Schedule the purging of audit logs and executed playbook logs for data management.
• Configure playbook recovery for efficient incident response.
• Configure environment variables to tailor FortiSOAR to your specific needs.
• Customize company branding within FortiSOAR.
• Configure system fixtures to optimize performance.
• Implement and manage the recycle bin feature for data retention.
• Monitor and manage audit logs for compliance and auditing purposes.
• Utilize the configuration manager for efficient management of FortiSOAR settings.
• Monitor system resources to ensure optimal performance.
• Deploy, configure, manage, and troubleshoot a FortiSOAR high availability cluster for redundancy.
• Identify the types of logs used for troubleshooting FortiSOAR.
• Collect log files necessary for troubleshooting.
• Troubleshoot key services and processes on FortiSOAR for efficient issue resolution.