FortinetProfessional
FortiAnalyzer 7.6 Administrator (FCP)
FCP-FAZ · 1 day
View course →
FortinetProfessional1 dayUpdated: July 2026
FAZ-AN Training for Your Team — FortiAnalyzer 7.6 Analyst
Most FortiAnalyzer deployments are used at a fraction of their depth: logs arrive, default reports rotate, and when an incident hits, analysts click through views hoping to stumble on the answer. The FortiAnalyzer 7.6 Analyst course is the antidote — a focused day on investigation technique: targeted searches and filters, event handlers that turn log volume into real incidents, end-to-end alert investigation across the fabric, and custom reports for the questions your organization actually asks.
It is the natural companion to the FortiAnalyzer Administrator course: Administrator makes the platform run, Analyst makes it earn its license. For Fortinet-centric estates, the pair delivers much of what teams expect from a SIEM project — at two training days instead of a platform migration.
We organize delivery through authorized partners and vetted instructors, frequently as an Administrator-plus-Analyst package — live online in your time zone, on site, or as a private group using scenarios shaped to your estate.
Who this course is for
- Security analysts whose primary telemetry is the Fortinet estate
- Firewall administrators moving from running FortiAnalyzer to investigating with it
- SOC teams standardizing triage on Fortinet fabric logs
- Engineers extending their FCP Security Operations skill set
What your team will learn
Topic areas below are grouped in our own words. The full official agenda is available on request — it comes from the authorized partner as part of your quote.
- Working FortiAnalyzer as an investigator, not a caretaker — searches that answer questions
- Log views and filters that cut minutes off every incident lookup
- Event handlers and correlation: shaping raw log volume into incidents worth a human's time
- Investigating an alert end to end across the Fortinet security fabric
- Custom reports and datasets for the questions your built-ins do not ask
- Playbook-style automation inside FortiAnalyzer for repeatable triage steps
Key facts
| Duration | 1 day |
|---|---|
| Level | Professional |
| Prerequisites | FortiAnalyzer administration basics and familiarity with FortiGate logging |
| Certification | Counts toward the FCP Security Operations certification track |
| Formats | Live online (VILT), On-site at your location, Private group, Seats in scheduled groups |
| Languages | English + local-language instructors on request |
Formats and how we organize it
- Live online (VILT)
- On-site at your location
- Private group
- Seats in scheduled groups
One request → three options
Fill in the form below — it takes a couple of minutes. Within 5 business days you compare 2–3 concrete offers — provider, instructor, dates, price below the public list. We contract and administer the delivery end to end. Details:how we work and vendor training.
FAZ-AN vs alternatives: which to choose
Factual criteria only — level, duration, audience and certification. The right choice depends on your team's starting point and stack.
FCP FortiAnalyzer 7.6 Administrator
The platform-operations counterpart: deployment, log collection, retention and reporting infrastructure. Take Administrator first — the Analyst course assumes the platform runs properly and spends its day on investigation and event handling instead.
FortiSIEM Analyst
The analyst course for a full multi-vendor SIEM. Choose FortiSIEM training when investigations span servers, cloud and identity sources; FortiAnalyzer Analyst when the Fortinet fabric is your main telemetry and you want depth there at one-day cost.
A custom intensive
Want the pair — Administrator plus Analyst — compressed into one delivery with your own log data patterns as the lab material? A custom two-day format does exactly that, and is a popular option for small SOC teams.
Need only part of FAZ-AN?
If your team needs a subset of this program — or a mix of topics from several courses — we build a custom 2–4 day intensive on our own materials, shaped by your infrastructure. One custom program typically replaces 2–3 catalog courses.
Explore custom coursesFAZ-AN: frequently asked questions
How does the Analyst course differ from the Administrator course?
Administrator covers running the platform — deployment, log collection, retention, reporting infrastructure. Analyst covers using it under investigation pressure: searching, filtering, event handlers, incident workflow and custom reporting. They are complementary single days, usually taken in that order.
Do we need the Administrator course first?
Recommended, or equivalent working knowledge. The Analyst day assumes logs already flow reliably and jumps straight into investigation technique; students who have never touched FortiAnalyzer spend the morning catching up on navigation instead of analysis.
Does this course count toward Fortinet certification?
FortiAnalyzer analyst-level content sits within the Security Operations family of Fortinet's current FCP/FCSS certification structure. If certification is the goal, tell us in the request — we align course version and exam planning with the current requirements.
Can one day really improve our triage speed?
For teams already living in FortiAnalyzer daily, yes — the gap between clicking through default views and using targeted searches, event handlers and saved datasets is measured in minutes per incident, many times per shift. The course is that gap, condensed.
How do we organize FAZ-AN training?
Fill in the request form on this page — team size, format, timing. Within 5 business days you receive 2–3 options from authorized partners with vetted instructors, dates and prices below public lists.
Request 2–3 FAZ-AN training options — quotes within 5 business days
No commitment — describe the task and we come back with concrete options, dates and prices.
Fortinet, FAZ-AN and course names are trademarks of their respective owners. Uptime Skills is an independent training operator and is not affiliated with or endorsed byFortinet. Official courses are delivered by authorized training partners.