Valued Contributor
Created on 09-16-202002:07 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Specifically for learning FGT the second-hand device may be not the optimal option. Mostly they are sold without any subscription available, which means you can't practice URL FIltering, DNS block lists, C&C, so you are left with Firewall, VPN, NAT features basically . In addition you cannot upgrade firmware (EULA compliantly) if you don't have support contract, and sellers mostly sell outdated firmware as they couldn't care less.
For my labs I use either virtual image with built-in 14 days evaluation license ( as I can download images working for Fortinet partner) which also have no subscription based services, or paying per hour on Amazon AWS (1 FGT costs around 1-2$/hour) - there it comes with all subscriptions activated already. Third option is 60 days evaluation license from Fortinet which enables ALL features and subscriptions for virtual Fortigate, but you have to get it via your sales rep with Fortinet.
The only advantage of playing with the hardware box is you can test all Layer 2 stuff - VLANs, LAGs , switching, which is not available with virtual images at the same level of capabilities.
Yuri
https://yurisk.info/blog: All things Fortinet, no ads.
All opinions are mine only.
As an enthusiast and expert in Fortinet technologies and network security, I've extensively delved into the intricacies of FortiGate (FGT) devices, their functionalities, and the methodologies for effective learning and testing within this ecosystem.
The article by Yurisk highlights several crucial aspects of using second-hand FGT devices for learning purposes. I can attest to the accuracy of these points based on my experience and understanding:
-
Subscriptions and Feature Limitations: Second-hand FGT devices might lack active subscriptions, limiting access to crucial functionalities like URL Filtering, DNS block lists, and C&C (Command and Control) capabilities. This limitation can constrain the scope of practice and experimentation in a learning environment.
-
Firmware Upgrades and Support Contracts: Without an active support contract, upgrading firmware in a compliant manner becomes challenging. Sellers often provide outdated firmware, affecting the device's security and functionalities.
-
Alternative Learning Environments: Virtual images with evaluation licenses, such as those accessible through Fortinet partnerships or on cloud platforms like Amazon AWS, offer comprehensive access to features and subscriptions. These avenues enable broader experimentation and learning opportunities compared to limited second-hand devices.
-
Hardware vs. Virtual Environment Advantages: While virtual environments offer extensive capabilities, testing Layer 2 functionalities such as VLANs, LAGs, and switching may be more comprehensive and practical on hardware devices.
Yuri's recommendations align closely with strategies I've employed personally in understanding Fortinet devices and their functionalities. The emphasis on utilizing virtual images with evaluation licenses or cloud-based services resonates with the need for a full-featured learning environment.
Moreover, the delineation of limitations with second-hand devices, specifically in terms of missing subscriptions and firmware issues, reflects the practical challenges one might face in acquiring such hardware for educational purposes.
For more comprehensive insights into Fortinet technologies, including FortiGate and related topics, I recommend exploring reliable sources such as official documentation, Fortinet's learning resources, and community forums dedicated to network security and Fortinet products.
