Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Fortinet
Exam Format
60 min
30
Pass/Fail
Specialist
Registration
$200 USD
Pearson VUE or online proctoring
English
Validity
2 years
Pass any Fortinet NSE 6 or higher level exam; Pass two Fortinet NSE 5 exams; Earn equivalent continuing education credits
NSE6 Exam Topics and Domains
NSE6 is organized into 4 weighted domains. Expect to work with Active Directory connector, Admin profiles, Certificate enrollment, Certificate management, and more.
1
FortiAuthenticator Management
25%
Deployment Configuration
Initial System SetupHigh Availability Configuration
- Perform deployment configuration on FortiAuthenticator
- Configure standalone and HA cluster setups
- Implement network and system settings
Administrative Accounts and Roles
Admin Account ManagementRole-Based Access Control (RBAC)
- Explain and configure administrative accounts and roles
- Implement role-based access control
- Secure administrative access
Advanced System Settings
System Configuration
- Configure advanced system settings
- Implement system monitoring and logging
- Manage system backups
User Account Management
Local User ManagementGuest User Management
- Configure and manage user accounts
- Implement user and guest management
- Configure user portals
2
Certificate Management
20%
PKI and Digital Certificates Fundamentals
PKI ConceptsCertificate Types
- Describe key concepts of PKI and digital certificates
- Understand certificate hierarchy
- Explain certificate validation processes
Local Certificate Generation
Certificate Authority SetupCertificate IssuanceCertificate Revocation
- Use the FortiAuthenticator certificate management service to generate local certificates
- Create and manage Certificate Authorities
- Issue and revoke certificates
Automatic Certificate Management
SCEP ConfigurationEST Protocol
- Implement automatic certificate management services
- Configure SCEP and EST protocols
- Automate certificate enrollment and renewal
3
Active Authentication (RADIUS, LDAP, 802.1X, Portal Services)
35%
RADIUS Authentication
RADIUS Profiles and RealmsRADIUS Accounting
- Implement RADIUS profiles and realms for RADIUS authentication
- Configure RADIUS clients and servers
- Troubleshoot RADIUS authentication issues
Remote Authentication Services
LDAP IntegrationRemote RADIUS Servers
- Configure and manage supported remote authentication services
- Integrate with LDAP and Active Directory
- Implement remote RADIUS authentication
802.1X Authentication
802.1X Protocol and EAP MethodsMAC Authentication Bypass (MAB)
- Implement 802.1X authentication
- Configure various EAP methods
- Deploy MAC Authentication Bypass for non-compliant devices
Portal Services
User PortalGuest PortalCaptive Portal
- Use FortiAuthenticator portal services to authenticate local and remote users
- Configure user, guest, and captive portals
- Implement self-service features
Two-Factor Authentication and Tokens
Token TypesMulti-Factor Authentication (MFA)
- Configure tokens and two-factor authentication
- Manage FortiToken hardware and software tokens
- Implement MFA policies
4
Single Sign-On (SSO)
20%
Fortinet Single Sign-On (FSSO)
Local Authentication Events for FSSO
- Use local authentication events for Fortinet Single Sign-On (FSSO)
- Configure FSSO integration with FortiGate
- Monitor user login/logout events
RADIUS Single Sign-On (RSSO)
Third-Party Logon Events via RSSO
- Use third-party logon events via RADIUS single sign-on (RSSO), tags, and logs to generate FSSO events
- Configure RSSO for third-party authentication
- Integrate RADIUS accounting with SSO
SAML SSO
SAML Architecture and RolesSAML IdP ConfigurationSAML SP Configuration
- Implement SAML roles on FortiAuthenticator for the SAML SSO service
- Configure FortiAuthenticator as SAML IdP and SP
- Integrate with third-party SAML providers
How do I earn this certification?
Passing NSE6 earns the Fortinet Certified Solution Specialist (FCSS) certification. It sits in the Network Security / Security Operations track.
Current Level Exams
FCP_FAC_AD-6.5 - FCP - FortiAuthenticator 6.5 Administrator Current exam in FCP framework
Next Level Options
- NSE7_EFW-7.6 - NSE 7 - Enterprise Firewall 7.6 Combine with NSE6_FAC to earn FCSS
- NSE7_SDW-7.6 - NSE 7 - SD-WAN 7.6
- NSE7_SAC-7.6 - NSE 7 - Security Operations 7.6 Architect
- NSE8 - Network Security Expert 8 (Written + Practical)Expert-level certification, requires extensive experience
Alternative Paths
- NSE5_FSM-6.3 - FortiSIEM 6.3Complementary security monitoring and SIEM skills
- NSE5_FAZ-7.4 - FortiAnalyzer 7.4 Log management and analysis skills complement authentication
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for NSE6 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- TRANSITIONING
- Last content update: 2024-01-15
- Announcement date: 2023-08-15
Updates
- SAML 2.0 SSO Current standard Core topic in NSE 6 and FCP exams • Release date: Ongoing support
- 802.1X and EAP Methods Current standards (EAP-TLS, EAP-TTLS, PEAP) Major exam topic - understand all EAP variants • Release date: Ongoing support
- OATH Tokens (TOTP/HOTP) RFC 6238 (TOTP), RFC 4226 (HOTP) Two-factor authentication is key exam area • Release date: Standard support
- SCEP (Simple Certificate Enrollment Protocol) RFC 8894 Certificate management automation topic • Release date: Current standard
Who should take this exam?
- Experience with FortiAuthenticator deployment and configuration
- Understanding of RADIUS, LDAP, and 802.1X protocols
- Knowledge of PKI and digital certificates
- 3-5 years of network security experience