FortinetProfessional
FortiGate 7.6 Administrator (FCP)
FCP-FGT · 5 days
View course →
FortinetProfessional3 daysUpdated: July 2026
FWB-ADM Training for Your Team — FortiWeb Administrator
A web application firewall is the one security box that sits directly in the revenue path: tune it too loose and the OWASP Top 10 walks in; tune it too tight and it blocks paying customers on launch day. The FortiWeb Administrator course trains engineers to hold that balance deliberately — deployment modes, protection profiles, machine-learning detection, bot mitigation and API security, plus the unglamorous skill that decides WAF projects: tuning out false positives with evidence instead of exceptions.
The course is hands-on and product-focused, built around lab work on FortiWeb itself. It suits teams putting a WAF in front of applications for the first time as much as those inheriting an existing deployment that “someone configured once” — the second group usually discovers how much protection was never switched on.
As a training operator, we arrange delivery through authorized partners and instructors who run application security in production — live online in your time zone, at your site, or as a private group tuned to the applications you actually protect.
Who this course is for
- Security engineers taking ownership of a WAF in front of business applications
- Network/firewall administrators extending a Fortinet estate to the application layer
- DevOps and platform teams who publish APIs and web apps and inherit their protection
- MSSP engineers operating FortiWeb for multiple customers
What your team will learn
Topic areas below are grouped in our own words. The full official agenda is available on request — it comes from the authorized partner as part of your quote.
- Deploying FortiWeb in the right mode — reverse proxy, transparent or offline — for your architecture
- Web protection profiles that block attacks without blocking the Friday release
- Machine-learning anomaly detection: letting the WAF learn the application instead of hand-writing rules
- Defending APIs and mobile backends, not just browser traffic
- Bot mitigation — separating customers, crawlers and credential stuffers
- TLS handling, load balancing and the operational side of sitting in front of production
- Reading attack logs and tuning out false positives before the app team escalates
Key facts
| Duration | 3 days |
|---|---|
| Level | Professional |
| Prerequisites | Working knowledge of HTTP, TLS and general firewall concepts; FortiGate experience helps but is not required |
| Formats | Live online (VILT), On-site at your location, Private group, Seats in scheduled groups |
| Languages | English + local-language instructors on request |
Formats and how we organize it
- Live online (VILT)
- On-site at your location
- Private group
- Seats in scheduled groups
One request → three options
Fill in the form below — it takes a couple of minutes. Within 5 business days you compare 2–3 concrete offers — provider, instructor, dates, price below the public list. We contract and administer the delivery end to end. Details:how we work and vendor training.
FWB-ADM vs alternatives: which to choose
Factual criteria only — level, duration, audience and certification. The right choice depends on your team's starting point and stack.
FCP FortiGate 7.6 Administrator
The network firewall course: policies, VPNs and security profiles at the network layer. Choose FortiGate training for the perimeter; choose FortiWeb when the asset to protect is a specific web application or API — the attacks and the tuning work are different disciplines.
FortiMail Administrator
The other specialized gateway course — email instead of web. Both are application-layer defenses that a network firewall only approximates; teams securing a full estate often plan them as separate short courses for the engineers who own each channel.
A custom intensive
Onboarding one critical application onto FortiWeb — an e-commerce front end, a public API? A custom 2–3 day workshop can walk through policy design, ML training and false-positive tuning against a staging copy of that exact application.
Need only part of FWB-ADM?
If your team needs a subset of this program — or a mix of topics from several courses — we build a custom 2–4 day intensive on our own materials, shaped by your infrastructure. One custom program typically replaces 2–3 catalog courses.
Explore custom coursesFWB-ADM: frequently asked questions
How is FortiWeb different from the web filtering on our FortiGate?
They solve opposite problems. FortiGate web filtering controls what your users browse outbound; FortiWeb is a web application firewall protecting your own applications from inbound attacks — injection, credential stuffing, API abuse. The course is entirely about the second problem.
Does the course cover the machine-learning features?
Yes — FortiWeb's anomaly-learning engine is a core topic: how it builds a model of normal application behavior, how long to let it learn, and when to combine it with signature-based protection. It is the main alternative to maintaining rule exceptions by hand.
Is this course relevant if we run FortiWeb Cloud?
Largely yes. Protection concepts — profiles, ML detection, bot mitigation, API security — carry across the appliance, VM and cloud editions. Deployment-mode and networking chapters apply mainly to self-hosted FortiWeb; tell us your form factor and we match the delivery emphasis.
Was this course part of the old NSE program?
FortiWeb training previously sat in the NSE 6 track. Fortinet has since moved its certification program to the FCP/FCSS structure, and current FortiWeb courses follow that model. Engineers who trained under NSE 6 will find the scope familiar, updated to current releases.
How do we organize FWB-ADM training?
Fill in the request form on this page — team size, format, timing. Within 5 business days you receive 2–3 options from authorized partners with vetted instructors, dates and prices below public lists.
Request 2–3 FWB-ADM training options — quotes within 5 business days
No commitment — describe the task and we come back with concrete options, dates and prices.
Fortinet, FWB-ADM and course names are trademarks of their respective owners. Uptime Skills is an independent training operator and is not affiliated with or endorsed byFortinet. Official courses are delivered by authorized training partners.