Цели
- Говорить “Fortinet-ready”, не притворяясь FCSS.
- Понимать policy order, NAT и logs.
- Подготовить 90-секундный Sophos → FortiGate answer.
Allowed tools
- Fortinet Academy notes
- FortiGate policy checklist
- session/log reading checklist
- docs/03-fortinet-academy-track.md
Scenario / symptom
Трафик не проходит через FortiGate: route missing, policy mismatch, NAT error, UTM/security profile block или session issue.
Hands-on task
- Проверить interface/zone и route.
- Проверить policy order, source/destination/service/schedule.
- Проверить NAT expectation.
- Проверить logs/session reason.
- Собрать interview answer: Sophos → FortiGate.
Mock questions
- What do you expect in a FortiGate firewall policy?
- What logs would you check on FortiGate?
- What is UTM/security profile?