Fortinet Security Operations (FortiAnalyzer and FortiManager) Corporate Training
Run Fortinet security operations: FortiManager policy control, FortiAnalyzer analytics, and SOC workflows in guided labs.
Edstellar, a corporate training company, delivers corporate training that helps your team run Fortinet security operations with confidence. Employees manage policies centrally in FortiManager, build analytics in FortiAnalyzer, and triage incidents through guided labs led by practitioners. Each session is tuned to your Fortinet estate, versions, and workflows.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build a Fortinet-fluent operations team
EDSTELLAR CYBERSECURITY CAPABILITY MODEL
Assess operations maturity
Skill checks map your team's Fortinet and SOC workflow baseline.
Set shared operations standards
One shared standard for ADOMs, policies, and triage.
Practice in guided labs
Labs cover policy control, analytics, and incident triage.
Measure the lift
Lab reviews benchmark each analyst's operations capability.
Scale across teams
One standard rolls out across sites, shifts, and estates.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is Fortinet Security Operations (FortiAnalyzer and FortiManager)?
Fortinet Security Operations (FortiAnalyzer & FortiManager) is Edstellar's instructor-led program for SOC and network security teams that operate Fortinet estates. Participants master the Security Fabric management architecture, run centralized policy and device management in FortiManager, and build logging, analytics, and event management in FortiAnalyzer. The program closes with a capstone build of a managed security operations environment.
Training is hands-on across all six modules. Participants configure FortiManager policies, design FortiAnalyzer reports and event handlers, and triage incidents across device logs in guided labs. Instructors with Fortinet operations experience review every configuration, coaching teams on workflows that stay consistent and auditable at scale. The final module is the capstone: build a complete managed security operations setup and demonstrate it in review.
Fortinet estates drift without disciplined operations: inconsistent policies across devices, logs nobody analyzes, and incident response that depends on whoever is on shift. Most teams underuse FortiManager and FortiAnalyzer, leaving centralized control and analytics on the table. This program teaches your team to run the Fabric as one managed system, with automation and reporting that make operations repeatable.
The capstone is the Managed Security Operations Build. Each team provisions policy, logging, reporting, and automation across a simulated Fortinet estate, then walks reviewers through a live incident from alert to resolution. They return with an operations runbook and the configurations to back it up, ready to standardize how their real environment is managed.
Six modules and 24 hours: management architecture, FortiManager policy control, FortiAnalyzer analytics, security operations workflows, and automation and maintenance. Every module pairs concepts with a guided lab, so each technique is practiced. It closes with a capstone operations build the team runs and defends in review.
Delivery is hybrid across virtual and onsite sessions, scheduled around your calendar. Cohorts train as one group or split into batches, with session materials and lab guides included for every participant.
What's Included in this Workshop for Your Enterprise Teams
- 1
ADOM and policy labs
Design ADOMs and push controlled policy packages.
- 2
Analytics workshops
Build dashboards, reports, and tuned event handlers.
- 3
Triage simulations
Work intrusions across device logs with handoffs.
- 4
Automation and recovery labs
Script changes and rehearse backup and restore.
- Instructor-led delivery across virtual, onsite, and hybrid
- Guided labs in every module with instructor coaching
- Capstone operations build, reviewed with your team
- Flexible scheduling around your calendar
- Lab guides and reusable ADOM templates included
- Group size and batches set along with you
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
Fortinet Security Operations (FortiAnalyzer and FortiManager) Course Topics and Program Outline
A tailored 24-hour, six-module workshop: one learning journey from Fortinet management architecture to a capstone operations build. Sessions pair concepts with labs on real-world use cases. Materials include lab guides, ADOM templates, and runbook checklists for every participant.
Built by Edstellar with security operations practitioners
Built by practitioners who run Fortinet security operations in production, shaped around your stack and use cases.
Skill checks baseline your team's Fortinet, logging, and security operations familiarity before training begins.
Live instruction covers the Security Fabric, ADOMs, and centralized policy management across 6.5 focused hours.
Guided labs build analyzer reporting, incident triage, and automation skill across 12.5 hours of supervised practice.
Your team runs a managed security operations estate in a 5-hour capstone, reviewed against operational standards.
From Fortinet management architecture to a capstone operations build, every technique is practiced in guided labs.
Delivered as
Delivered as a hybrid program of live instruction and guided labs, scheduled around your team's calendar in flexible batches.
Explore the FortiManager and FortiAnalyzer consoles in the guided demo environment and map each management capability to your team's operations workflows.
learna)Security Fabric vision and components
b)FortiManager and FortiAnalyzer roles
c)ADOM concepts and organization
d)Lab access and topology orientation
Register lab FortiGates into an ADOM, build a policy package, and install it with revision control, then roll one change back.
learna)ADOM design and device registration
b)Policy packages and installation targets
c)Objects, dynamic mapping, and normalization
d)Revisions, rollback, and change control
Build an operations dashboard and a weekly executive report in FortiAnalyzer, then tune an event handler until it fires only on genuine incidents.
practicea)Log ingestion and storage planning
b)Data selectors, datasets, and charts
c)Scheduled reports for operations and audits
d)Event handlers and alert tuning
Work a simulated multi-stage intrusion: triage the incident in FortiAnalyzer, trace it across FortiGate logs, and write the handoff report.
practicea)Incident triage in FortiAnalyzer
b)Cross-device log forensics
c)Coordinated response actions
d)Handoff documentation and metrics
Automate a bulk policy change with a FortiManager script, rehearse a backup and restore, and document the rollback plan.
practicea)FortiManager scripts and automation
b)Firmware management and upgrade planning
c)Backup, restore, and disaster readiness
d)High-availability considerations
Run the managed security operations estate end to end, then present the operations model and defend every design decision in the instructor review.
applya)Full ADOM and policy deployment
b)Analyzer dashboards and scheduled reports
c)Live operations shift simulation
d)Design defense and peer review
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Seven job-ready outcomes your team will demonstrate by the end of the program. Each competency is practiced in guided labs and reviewed in the capstone build.
Explain the Fortinet management architecture
Describe how FortiManager, FortiAnalyzer, and FortiGates work together across the Security Fabric.
Design ADOM structures
Organize devices into ADOMs that match your sites, teams, and change control needs.
Manage policies centrally
Build policy packages, control installations, and roll changes back safely.
Operate FortiAnalyzer analytics
Build dashboards, schedule reports, and tune event handlers to real incidents.
Triage security incidents
Investigate multi-stage intrusions across device logs and document findings for handoff.
Automate routine operations
Use FortiManager scripts for bulk changes and rehearse backup, restore, and upgrades.
Run a reviewed operations estate
Operate the full managed estate in the capstone and defend every design decision in review.
Teams that Benefit from this Fortinet Security Operations (FortiAnalyzer and FortiManager) Group Training
This group training is built for teams that operate Fortinet estates and want centralized control without losing local agility. Content adapts to each cohort's roles, FortiOS versions, and experience, so every batch practices the workflows it owns, from policy pushes to incident triage.
Run Fortinet-backed detection and response.
Analysts learn to triage FortiAnalyzer incidents, trace attacks across device logs, and hand off with evidence.
Workflow friction
- Alert noise without context
- Siloed device logs
- Inconsistent triage quality
How the program helps
- Faster incident triage
- Cross-device attack timelines
- Evidence-rich handoffs
Practice use cases
- Triage simulations
- Log forensics
- Handoff writeups
Manage firewall estates centrally.
Firewall teams learn ADOM design, policy packages, and controlled installations across many FortiGates.
Workflow friction
- Drifting per-site policies
- Risky bulk changes
- No change audit trail
How the program helps
- Consistent multi-site policies
- Controlled change rollouts
- Reliable rollback points
Practice use cases
- ADOM design labs
- Policy package builds
- Rollback drills
Build analyzers and automation that scale.
Engineers practice log pipeline design, report automation, FortiManager scripting, and upgrade planning.
Workflow friction
- Manual repetitive changes
- Ad-hoc reporting
- Upgrade anxiety
How the program helps
- Automated reporting pipelines
- Scripted bulk changes
- Planned safe upgrades
Practice use cases
- Scripting labs
- Report automation
- Upgrade rehearsals
Keep the management estate reliable.
Operations staff learn backup and restore, firmware lifecycle, and high-availability practices for the management tier.
Workflow friction
- Untested backups
- Surprise upgrade outages
- Single management hosts
How the program helps
- Tested recovery procedures
- Predictable firmware cycles
- Resilient management tier
Practice use cases
- Backup drills
- Firmware planning
- HA reviews
Cohorts train as a cross-functional workforce, with each small group aligned on shared operations and triage standards.
Prerequisites: This program benefits SOC analysts, firewall administrators, and security engineers who operate Fortinet estates or plan to. Basic networking and logging concepts help but are not required: the opening module establishes the management architecture before any device is touched, and every lab adapts to each cohort's FortiOS versions and experience.
SOC analyst to security engineer
Move from Fortinet fundamentals to advanced security operations: each level adds hands-on depth, from describing the management architecture to owning automated, production-ready operations.
A program that grows with security careers, from first ADOM design to confident Fortinet estate ownership.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
Live instruction with guided labs in every module, available across hybrid, onsite, and virtual formats to fit your team's schedule.
Hybrid Training
Instructor-led sessions mix onsite and virtual delivery with guided labs throughout. Teams practice FortiManager policy control, FortiAnalyzer analytics, and incident triage while the instructor coaches and reviews work. Hybrid keeps scheduling flexible without losing live interaction.
- Live instruction across onsite and virtual sessions
- Guided labs with instructor coaching and reviews
- Real security operations workflows with hands-on practice
- Flexible scheduling without losing live interaction
Onsite Training
Instructor-led training at your offices, with lab scenarios adapted to mirror your Fortinet estate. The instructor works alongside the team in person, reviews operations together, and tunes exercises to your device models and workflows.
- Instructor-led training at your offices
- Lab scenarios mirroring your Fortinet estate
- In-person coaching and reviews
- Exercises tuned to your device models and workflows
Live Virtual Training
Live virtual sessions on Zoom or Teams with screen-shared console walkthroughs, breakout labs, and real-time reviews. Your team gets the same guided labs and instructor coaching as onsite, from anywhere.
- Live virtual sessions on Zoom or Teams
- Screen-shared walkthroughs and breakout labs
- Real-time review with the instructor
- Same guided labs as onsite, from anywhere
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size, timelines, and delivery preference, and we will send a detailed per-group quote with batch options.
Yes. Book a discovery call and we will map your Fortinet estate, operations maturity, and goals to a tailored training plan before you commit.
Yes. Live virtual sessions run on Zoom or Teams with the same guided FortiManager and FortiAnalyzer labs and instructor coaching as onsite delivery.
Yes. The instructor runs the full program at your offices, with lab scenarios adapted to mirror your Fortinet estate and workflows.
The program runs 24 hours of instructor-led training, usually across three to six days or weekly sessions on a flexible, mutually agreed schedule.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
Fortinet security operations sit after firewall basics and network segmentation, because FortiManager and FortiAnalyzer manage and monitor firewalls already in place. With central management and logging running, your team is ready to extend into SASE for remote and branch access.
Why Choose Edstellar as Your Fortinet Security Operations (FortiAnalyzer and FortiManager) Corporate Training Provider
When comparing providers, Edstellar is the training partner teams choose for security operations expertise and 5+ years of corporate training experience. Our methodology blends concise instruction with guided labs, and we share each trainer profile before booking. The result is measurable quality in the estates your team manages and the incidents it resolves.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Every cohort's labs, ADOM designs, and incident scenarios are tuned to your Fortinet estate and workflows.
Proven Methodology
A learn, practice, apply arc moves your team from Fortinet concepts to a live operations capstone.
Practice-Based Learning
Guided labs in every module build policy management, analytics, and triage skill on realistic estates.
Expert Trainers
Practitioners who run Fortinet security operations in production lead every session.
Global Scale
One consistent program rolls out across SOC teams, regions, and delivery formats.
Measurable Outcomes
Lab checkpoints and the capstone review show exactly what your team can now manage and investigate.
Connect Fortinet Policy Management With Analytics and Reviewed SOC Workflows
Edstellar develops coordinated operations across FortiManager and FortiAnalyzer through a connected security-estate case. Teams manage devices and policies, tune reporting and event handling, and investigate a simulated intrusion. Automation and recovery exercises lead into a final operations demonstration, reviewed for traceability, consistency, and the rationale behind configuration and response decisions.
- Step 01
Consult
We explore policy inconsistency, noisy events, and incident handoff gaps, checking participants' networking and logging familiarity and their responsibilities within Fortinet estates.
- Step 02
Plan
Management architecture precedes centralized device and policy configuration, analytics, incident workflows, and maintenance automation before the complete managed operations demonstration begins.
- Step 03
Align
We align Fortinet operations expertise with SOC and firewall roles, confirming relevant FortiOS versions, lab devices, and opportunities to practice rollback safely.
- Step 04
Customize
Sample policies, event patterns, and intrusion scenarios reflect familiar estate structures, allowing teams to rehearse changes and investigations without using sensitive production logs.
- Step 05
Execute
Participants install and roll back policy packages, tune event handlers, and trace incidents, receiving feedback on revision discipline, evidence correlation, and handoff quality.
- Step 06
Evaluate
We assess the managed estate through demonstrated policy control, useful analytics, documented incident handling, and recovery procedures supported by clear operational reasoning.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
Fortinet Security Operations (FortiAnalyzer & FortiManager) Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request Fortinet Security Operations (FortiAnalyzer and FortiManager) Training for Your Team
Share your team size, FortiOS versions and device models, and timelines to receive a tailored training plan and quote. Book a discovery call to discuss your goals; we confirm availability and respond with a proposal.