TechLeague

    Fortinet

    Fortinet FCP / NSE: official blueprint and FortiGate roadmap for 2026

    TechLeague Editorial··10 min read

    In 2024 Fortinet rebranded NSE into the Fortinet Certified program (FCA, FCF, FCP, FCSS, FCX). For security engineers in 2026 the practical path is clear: get to FCP — Network Security on FortiGate fast.

    The new program on one page

    • FCA: cybersecurity fundamentals.
    • FCF: technical intro in network and security.
    • FCP: professional level per track (Network Security, Public Cloud, Security Operations).
    • FCSS: solution specialist (SD-WAN, OT, Enterprise Firewall).
    • FCX: expert level.

    FCP — Network Security: the core exam

    The core exam FCP_FGT_AD-7.4 (FortiGate 7.4 Administrator) covers the official blueprint:

    • System and Network Configuration — interfaces, NAT/transparent modes, static and dynamic routing (OSPF, BGP).
    • Firewall Policies and Authentication — policies, NAT64/NAT46, local, LDAP, RADIUS, FSSO.
    • Content Inspection — AV, web filter, app control, IPS, DNS filter, SSL/SSH inspection.
    • Routing and SD-WAN — SD-WAN rules, performance SLA, member health-check.
    • VPN — IPSec site-to-site, dial-up, SSL VPN.
    • High Availability — FGCP active/passive and active/active, sync.
    • Security Fabric integration — FortiAnalyzer and FortiManager.

    Topics where Fortinet differs from Cisco/Palo Alto

    • Policy-based vs profile-based NGFW mode.
    • SSL inspection deep vs certificate inspection.
    • SD-WAN native on FortiGate, no separate appliance.
    • Security Fabric telemetry across FortiGate, FortiAnalyzer, FortiClient.
    • VDOMs for multi-tenant on a single device.

    10-week plan

    1. 1 — Fast FCF to level vocabulary.
    2. 2 — Interfaces, NAT/transparent, static routes.
    3. 3 — Firewall policies + objects.
    4. 4 — Authentication (local, LDAP, FSSO).
    5. 5 — UTM: AV, IPS, web filter, app control.
    6. 6 — SSL deep inspection and troubleshooting.
    7. 7 — IPSec site-to-site and SSL VPN.
    8. 8 — Native SD-WAN and performance SLA.
    9. 9 — HA FGCP and Security Fabric.
    10. 10 — Blueprint review and internal mock exams.

    Official material

    • Fortinet Training Institute — free FCF and FCP video paths.
    • Official exam description for FCP_FGT_AD-7.4.
    • FortiGate Cookbook and Administration Guide (docs.fortinet.com).

    Where TechLeague fits

    No exam dumps. The league trains policy, segmentation, NAT, VPN, HA and multi-vendor reasoning — directly applicable to FortiGate in production.

    Next step

    Grab the official exam description, build a lab on FortiGate VM and train real pressure in a TechLeague tournament.