FortiAnalyzer 7.6 Administrator Training – NSE 6 Secure Networking Preparation
This intensive one-day course shows you how to deploy, configure and harden FortiAnalyzer 7.6, the central logging and reporting platform of the Fortinet Security Fabric. Short lectures alternate with hands-on labs on device registration, administrative domains (ADOMs), high availability, disk quotas, and log and report management. It is a practical choice for teams that need reliable, well-organized log data and it belongs to the NSE 6 Secure Networking level of Fortinet's new certification program.
Describe what FortiAnalyzer does, its operating modes and its logging architecture
Complete the initial setup and secure administrator access
Build and manage ADOMs to separate devices and data
Deploy a high-availability FortiAnalyzer cluster
Register and manage FortiGate and other Security Fabric devices
Control disk quotas, log retention and report generation
Confirm that logs are arriving and fix the most common collection issues
Program
Introduction and initial configuration
Use cases and operating modes
Basic network and system settings
How logs flow into FortiAnalyzer
Administration and management
Administrator accounts and profiles
External authentication
Backup and maintenance
ADOMs and HA
Creating and assigning ADOMs
Per-ADOM disk quotas
Deploying and monitoring an HA cluster
Managing devices
Registering FortiGate devices
Securing device communication
Checking that logs are received
Logs and reports management
Storage, archiving and retention
Viewing logs
Scheduling and customizing reports
Prerequisites
FortiGate Operator course completed, or equivalent experience
Solid grounding in TCP/IP networking and firewall administration
Target audience
Security engineers and administrators who deploy and maintain FortiAnalyzer
Network teams centralizing logs from a FortiGate estate
Integrators and managed service providers
The exam
Since 15 July 2026, Fortinet has organized its certifications into eight levels, and FortiAnalyzer Administrator sits at NSE 6 Secure Networking. Fortinet exams are administered by Pearson VUE. The specific FortiAnalyzer 7.6 Administrator exam details (question count, time, languages) had not been published when this page was written; we will share up-to-date information when you enroll. An NSE certification is valid for two years and must be renewed before it expires.
Preparation tips
Repeat the ADOM and HA labs until you can do them without notes
Sketch an architecture comparing Analyzer and Collector modes
Practice troubleshooting a FortiGate that has stopped sending logs
Frequently asked questions (FAQ)
How long is the FortiAnalyzer Administrator course?
Fortinet's program is 7 hours, delivered as one full day or two half days, with about 3 hours of hands-on labs.
Is FortiAnalyzer Administrator NSE 5 or NSE 6?
Under the program in force since July 2026, it belongs to NSE 6 Secure Networking. NSE 5 Security Operations maps to the FortiAnalyzer Analyst course.
How does it differ from FortiAnalyzer Analyst?
Administrator covers deploying and running the platform. Analyst targets SOC analysts: events, incidents, playbooks and threat hunting. Fortinet lists Administrator as a prerequisite for Analyst.
Which product version is covered?
The content is based on FortiAnalyzer 7.6. The ADOM, high-availability and logging concepts largely carry over to nearby versions, and the instructor will point out the differences that matter if your estate runs another release.
How is the course delivered?
You can join live online, in person in Casablanca, or as a private session on-site at your organization, in French or English. Each participant gets a lab environment to repeat every configuration step shown in class.