The exam
| Exam | Fortinet NSE 4 – FortiOS 7.6 Administrator |
| Length | 100 minutes, 50–55 questions |
| Product version | FortiOS 7.6.0 |
| Languages | English and Japanese |
| Official page | Fortinet Training Institute: FortiOS Administrator exam |
These details were checked against the official exam page on 12 October 2026. Check it again before you book: Fortinet updates exams, their objectives and their delivery, and the page and the certification announcements are the reference.
Fortinet has published the objectives (100 minutes, 50–60 questions, deployment and system configuration weighted 25–35%); the exam page is marked Coming Soon, and the certification announcement lists its release for early October 2026. This path is written for FortiOS 7.6 and will add 8.0 material once that exam is available.
Objective map
The domains, weights and tasks are Fortinet's, from the exam page. Which lessons teach each task, and how completely, is RouteLearn's own assessment against the details Fortinet lists under each task. Gaps are shown openly and filled as lessons are written.
Deployment and system configuration (20–25%)
| Official task | Lessons | Coverage |
|---|---|---|
| Perform initial configuration | First login and basic setup, Interfaces, VLANs and zones, Administrators, backups and firmware, FortiOS architecture and FortiGuard services | Partly coveredFactory default settings and FortiGate as a DHCP server are only touched on. |
| Configure log settings and diagnose problems using the logs | Logging and monitoring | Partly coveredRegistering the FortiGate on FortiAnalyzer step by step is not yet shown. |
| Configure FortiGate Clustering Protocol (FGCP) high-availability (HA) cluster | High availability (FGCP), FortiGate interfaces, management, console and HA ports | Partly coveredPlanned: HA operations (cluster firmware upgrade, session synchronisation and the HA management interface in depth). |
| Diagnose resource and connectivity problems | Understanding FortiGate firewall packet flow, Which policy did it hit?, Troubleshooting tickets, Sizing a FortiGate: throughput, inspection and sessions | Partly coveredPlanned: resource problems (high CPU, memory and conserve mode) as a full lesson. |
| Describe FortiGate Cloud-Native Firewall (CNF) and FortiGate VMs in the public cloud | None yet | PlannedPlanned: FortiGate VMs in the public cloud and FortiGate CNF. |
| Explain FortiSASE administration and user onboarding methods | The Fortinet product family and the Security Fabric | PlannedPlanned: FortiSASE administration and user onboarding. |
Firewall policies and authentication (20–25%)
| Official task | Lessons | Coverage |
|---|---|---|
| Configure firewall policies | How firewall policies work, Addresses, services and schedules, Configuring firewall policies, Which policy did it hit?, Flow-based and proxy-based inspection in the packet path | Covered |
| Configure SNAT and DNAT options in firewall policies | Source NAT and IP pools, Virtual IPs: publishing servers, Central NAT, Lab: outbound pools and a published web server | Covered |
| Configure different methods of firewall authentication | Users and firewall authentication | Partly coveredConfiguring remote LDAP and RADIUS servers is covered briefly; a fuller lesson is planned. |
| Explain how to deploy and configure Fortinet Single Sign-On (FSSO) | Users and firewall authentication | Partly coveredPlanned: FSSO in DC agent and collector agent modes, and FSSO login problems. |
Content inspection (25–30%)
| Official task | Lessons | Coverage |
|---|---|---|
| Explain and inspect encrypted traffic using certificates | SSL/TLS inspection | Covered |
| Identify FortiGate inspection modes and configure web filtering | Security profiles and inspection modes, Flow-based and proxy-based inspection in the packet path, Web filtering and DNS filtering | Covered |
| Configure application control to monitor and control network applications | Application control | Covered |
| Configure antivirus scanning modes to neutralize malware threats | Antivirus and IPS, Flow-based and proxy-based inspection in the packet path | Partly coveredProtocol options are explained only in outline. |
| Configure an intrusion prevention system (IPS) to protect a network from threats and vulnerabilities | Antivirus and IPS, Flow-based and proxy-based inspection in the packet path | Covered |
Routing (10–15%)
| Official task | Lessons | Coverage |
|---|---|---|
| Configure and route packets using static routes | Routing on a FortiGate, Policy routes | Covered |
| Configure SD-WAN to load balance traffic between multiple WAN links effectively | SD-WAN basics, Lab: two ISPs with SD-WAN | Covered |
VPNs (10–15%)
| Official task | Lessons | Coverage |
|---|---|---|
| Implement a meshed or partially redundant IPsec VPN | IPsec VPN concepts, Site-to-site IPsec VPN, Lab: HQ to branch IPsec | Partly coveredPlanned: redundant and meshed IPsec VPNs, and the IPsec wizard. |
How to use this path
- If firewalls or Fortinet are new to you, start with Fortinet Fundamentals.
- Work through the units below in order. Do every lab on a FortiGate VM; the exam expects you to know what the configuration and the diagnostic output look like.
- After each unit, answer the practice questions for its domain. Each wrong answer links to the lesson to revisit.
- When every domain scores well, take the practice exam (50 questions, weighted like the real one), then go back to your weakest domain.
Some lessons in the outline are still planned. They are shown greyed out and become links when they are published.
Study units
11 units · 39 lessons · 0 opened on this device
RouteLearn is an independent educational resource and is not affiliated with or endorsed by Fortinet. Fortinet, FortiGate, FortiOS, FortiManager and FortiGuard are trademarks of Fortinet, Inc. FortiOS 7.6 and FortiManager 7.6 are the baseline; each lesson states the release it was written for and whether FortiOS 7.4 has been reviewed. Example output is illustrative, based on Fortinet documentation.