Fortinet FortiAnalyzer Lab Guide for FortiAnalyzer 7.0

Description

Change Log Network Topology Lab 1: Initial Configuration Exercise 1: Examining the Network Settings Lab 2: Administration and Management Exercise 1: Configuring ADOMs View ADOM Information Create Custom ADOMs Exercise 2: Configuring an External Server to Validate Administrators Configure an LDAP Server on FortiAnalyzer Create a Wildcard LDAP Administrator Test External Administrator Access View the Event Logs Lab 3: Device Registration and Communication Exercise 1: Registering Devices on FortiAnalyzer Register a Device Using the Add Device Wizard Accept a Device Registration Request Exercise 2: Troubleshooting Device Communication Verify Device Registration Verify Device Communication Troubleshoot Device Communication Resolve a Connection That Is Down Lab 4: Logs Exercise 1: Gathering Benchmark Diagnostics View System Resource Information Gather Data Policy and Disk Utilization Information Exercise 2: Generating Traffic Generate Traffic Using FIT Generate Traffic Using Nikto Exercise 3: Examining Logs View Logs in Log View Use Log Filters View Logs in FortiView Exercise 4: Viewing Log Statistics and Used Storage Space View the Raw Log Receiving Rate View the Insert Rate Versus the Receive Rate View Used Storage Statistics Exercise 5: Modifying Disk Quotas Compare Storage Space Between ADOMs Modify the Disk Quota Exercise 6: Moving Devices With Logs Between ADOMs Gather Log and ADOM Information Move a Device to a Different ADOM Rebuild the ADOM Database to Migrate the Device Logs Lab 5: Events and Incidents Management Exercise 1: Examining and Managing Events Examine Existing Events Exercise 2: Cloning and Customizing Event Handlers Find the Event Handler and the Log That Generated an Event Clone and Customize an Event Handler Generate Traffic to Create Events Verify the New Event Handler Works Exercise 3: Creating a Custom Event Handler Create an Event and Find the Log That Generated It Create a Custom Event Handler Test the Custom Event Handler Expert Challenge Exercise 4: Managing Incidents Create New Incidents Manually Exercise 5: Exploring Threat Hunting Explore the Threat Hunting Tools Example of a Threat Hunting Scenario Lab 6: Playbook Management Exercise 1: Creating a Playbook With an On-Demand Trigger Create a New Playbook With an On-Demand Trigger Verify the Current Number of Incidents Run and Troubleshoot a Playbook Exercise 2: Creating a Playbook With an Incident Trigger Create a Playbook With an Incident Trigger Verify the Playbook Runs Successfully Exercise 3: Importing and Customizing a Playbook Import and Customize a Playbook Generate Traffic to Trigger the Playbook Verify the Successful Execution of the Playbook Exercise 4: Using FortiOS Connectors Examine Existing FortiOS Connectors Add a Playbook Task That Disables a Firewall Policy Verify the FortiGate Configuration Before Running the Playbook Generate Traffic to Trigger the Playbook Verify the Effect of Running the Playbook Create a Playbook to Enable a Firewall Policy Exercise 5: Exporting and Importing Playbooks Add a Connector in Fabric View Create a Playbook With the FortiClient EMS Connector Export a Playbook Import a Playbook Lab 7: Reports Exercise 1: Running a Default Report Generate a Default Report Run Diagnostics on a Report Exercise 2: Cloning and Customizing a Default Report Exercise 3: Building a Custom Dataset From Scratch Create a Dataset Exercise 4: Building a Custom Chart From Log View Create a Custom Chart Create and Run a Report Using a Custom Chart Exercise 5: Scheduling a Report Create and Configure an Output Profile Schedule Reports