Fortinet

    Fortinet FCP / NSE: official blueprint and FortiGate roadmap for 2026

    TechLeague EditorialΒ·Β·10 min read
    Already an expert in Fortinet?Take the 15-min Diagnostic Assessment

    In 2024 Fortinet rebranded NSE into the Fortinet Certified program (FCA, FCF, FCP, FCSS, FCX). For security engineers in 2026 the practical path is clear: get to FCP β€” Network Security on FortiGate fast.

    The new program on one page

    • FCA: cybersecurity fundamentals.
    • FCF: technical intro in network and security.
    • FCP: professional level per track (Network Security, Public Cloud, Security Operations).
    • FCSS: solution specialist (SD-WAN, OT, Enterprise Firewall).
    • FCX: expert level.

    FCP β€” Network Security: the core exam

    The core exam FCP_FGT_AD-7.4 (FortiGate 7.4 Administrator) covers the official blueprint:

    • System and Network Configuration β€” interfaces, NAT/transparent modes, static and dynamic routing (OSPF, BGP).
    • Firewall Policies and Authentication β€” policies, NAT64/NAT46, local, LDAP, RADIUS, FSSO.
    • Content Inspection β€” AV, web filter, app control, IPS, DNS filter, SSL/SSH inspection.
    • Routing and SD-WAN β€” SD-WAN rules, performance SLA, member health-check.
    • VPN β€” IPSec site-to-site, dial-up, SSL VPN.
    • High Availability β€” FGCP active/passive and active/active, sync.
    • Security Fabric integration β€” FortiAnalyzer and FortiManager.

    Topics where Fortinet differs from Cisco/Palo Alto

    • Policy-based vs profile-based NGFW mode.
    • SSL inspection deep vs certificate inspection.
    • SD-WAN native on FortiGate, no separate appliance.
    • Security Fabric telemetry across FortiGate, FortiAnalyzer, FortiClient.
    • VDOMs for multi-tenant on a single device.

    10-week plan

    1. 1 β€” Fast FCF to level vocabulary.
    2. 2 β€” Interfaces, NAT/transparent, static routes.
    3. 3 β€” Firewall policies + objects.
    4. 4 β€” Authentication (local, LDAP, FSSO).
    5. 5 β€” UTM: AV, IPS, web filter, app control.
    6. 6 β€” SSL deep inspection and troubleshooting.
    7. 7 β€” IPSec site-to-site and SSL VPN.
    8. 8 β€” Native SD-WAN and performance SLA.
    9. 9 β€” HA FGCP and Security Fabric.
    10. 10 β€” Blueprint review and internal mock exams.

    Official material

    • Fortinet Training Institute β€” free FCF and FCP video paths.
    • Official exam description for FCP_FGT_AD-7.4.
    • FortiGate Cookbook and Administration Guide (docs.fortinet.com).

    Where TechLeague fits

    No exam dumps. The league trains policy, segmentation, NAT, VPN, HA and multi-vendor reasoning β€” directly applicable to FortiGate in production.

    Next step

    Grab the official exam description, build a lab on FortiGate VM and train real pressure in a TechLeague tournament.

    Related reading