Forcepoint NGFW System Engineer Training – Certification Preparation
This five-day course is aimed at engineers who deploy and look after Forcepoint NGFW in demanding environments. You move from a single firewall to distributed designs: clusters, virtual contexts, multiple Internet links, site-to-site and mobile VPNs, deep inspection and TLS decryption. The course follows Forcepoint's published System Engineer outline and prepares you for the Certified Forcepoint NGFW System Engineer credential. Each day ends with lab work that builds on the previous one, so by Friday you have assembled a complete, multi-site architecture yourself.
The essentials
Publisher : Forcepoint
Certification : Certified Forcepoint NGFW System Engineer
Duration : 5 days (40 h)
Level : Advanced
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Online multiple-choice exam · 80% passing score · taken after the course
Exam voucher: included or optional depending on the package — contact us.
Plan an NGFW deployment and get the most out of the Security Management Center
Configure firewalls, clusters and virtual contexts for multi-tenant environments
Manage several outbound Internet connections (multi-link)
Build site-to-site and mobile VPNs with Active Directory integration
Inspect traffic, detect malware and decrypt TLS
Create custom applications and use layer 2 roles
Integrate NGFW with Forcepoint cloud services and troubleshoot issues
Program
Session 1 – Architecture and first firewall
System architecture
Single firewall deployment
Routing and anti-spoofing
NGFW policies
Session 2 – Distributed deployments
Distributed configurations
Clustering
MSSP and virtual contexts
Session 3 – Connectivity and access
Outbound multi-link
Site-to-site VPN
Active Directory integration
Mobile VPN clients
Session 4 – Inspection
Traffic inspection and inspection policies
Malware detection
File filtering
Session 5 – Advanced techniques
Inspection techniques and TLS inspection
Layer 2 roles
Integration with the Forcepoint ecosystem
Troubleshooting
Prerequisites
Completion of the Forcepoint NGFW Administrator course with its certification
Sound knowledge of routing and how firewalls work
Target audience
System administrators, network security specialists and engineers
Consultants, architects and integrators who design or roll out NGFW
IT teams running multi-site architectures
The exam
The Certified Forcepoint NGFW System Engineer credential is earned through an online multiple-choice exam that you take after the course rather than during it. The passing score is 80%. It draws on all five sessions: distributed designs, multi-link, VPNs, inspection and troubleshooting. Because it assumes genuine hands-on experience with the console, we set aside independent lab time every day and close the week with a targeted review of the trickiest topics. Our advice: book the exam within two or three weeks of the course, while the details are still fresh.
Preparation tips
Review the Administrator material: it is assumed from day one
Sketch each lab architecture (cluster, multi-link, VPN) before configuring it
Practice diagnosing a VPN tunnel or an inspection rule that does not behave
Frequently asked questions (FAQ)
How long is the NGFW System Engineer course?
Forcepoint publishes it as five eight-hour days, or 40 hours, with a little homework each evening.
Do I need the NGFW Administrator certification first?
Yes, Forcepoint lists it as a prerequisite. If you do not hold it yet, we can schedule both courses back to back, leaving time to pass the Administrator exam in between.
What score do I need to pass?
At least 80% on the online multiple-choice exam. Questions often revolve around design choices and failure scenarios, which is why the labs matter so much.
Does the course cover TLS decryption?
Yes. The final session covers TLS inspection, building on the traffic inspection and malware detection work of the previous day.
Which formats are available?
Live online, in person in Casablanca or on-site at your organization, in French or English. For on-site sessions we can shape the lab scenarios around your real topology.