Fortinet FortiWeb Cloud WAF-as-a-Service

The course will walk students through setting up their Route 53 domain, setting up an EC2 instance, and creating their Web application. Students will use a custom script (provided in the resources section of the course) to complete their EC2 instance setup. A simple web page will be created, which students will use for a SQL injection attack during the case study module.

Prerequisites

Learners will need an AWS account. The AWS dashboard, basic navigation skills in AWS, the ability to setup and configure EC2 This course assumes a basic knowledge of instances, and the ability to set up Route 53 domains. The instructor will show how to set up a Route 53 domain and EC2 instance, but to fully understand the material presented, the learner should have some background in the setup of these items. Learners should also be familiar with web application firewalls (WAF) and their intended use.

Study Resources:

Study guide, Lab Guides, FortiWeb-Cloud.com

Course Goals

By the end of this course, students should be able to:

• Setup an EC2 instance and Route 53 Domain
• Automatically detect their Domain in the Fortinet product
• Troubleshoot issues in detecting their Route 53 Domain

Important: If you are a non-enterprise learner using the Free-Tier AWS account and the Free Fortinet trial period, please note the use of Route 53 can increase your AWS billing significantly. It is recommended you remove/delete your EC2 instance and Route 53 after following along with this course to reduce charges on your account, if you are only using the domain and EC2 instance for this course.

• Module 1: Introduction
• 1.1 Introduction
• 1.2 AWS Dashboard Overview
• 1.3 Product Overview
• Module 2: FortiWeb WAF-as-a-Service Set Up
• 2.1 What is EC2?
• 2.2 What is Route 53
• 2.3 FortiWeb Cloud WAF Signup
• 2.4 Route 53 Domain Setup
• 2.5 WAF 2.5 EC2 Setup
• 2.6 Adding to the Web Application
• Module 3: FortiWeb Cloud WAF-as-a-Service Dashboard
• 3.1: FortiWeb Cloud WAF-as-a-Service Dashboard Navigation
• Module 4: Policies and Blocking Attacks
• 4.1 Case Study 1
• 4.2 Case Study 2
• Module 5: Conclusion
• 5.1: Conclusion