Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Fortinet
Exam Format
Expert
Registration
Pearson VUE or online proctoring
Validity
3 years from completion
Pass current NSE8_812 written exam at Pearson VUE test center; Must recertify within 6 months before certification expiration
NSE8 Exam Topics and Domains
NSE8 is organized into 7 weighted domains. Expect to work with FortiGate, FortiGate SD-WAN, FortiAuthenticator, FortiGate Cloud, and more.
1
Security Architecture
FortiGate Network Security Products
FortiGate Chassis SolutionsHardware Acceleration Technologies
- Understand FortiGate chassis architecture and deployment scenarios
- Select appropriate hardware acceleration for specific traffic types
- Design scalable FortiGate deployments
Fortinet Security Fabric
Security Fabric ArchitectureDeployment Scenarios
- Design Security Fabric deployments across diverse environments
- Implement automated threat response using fabric integration
- Troubleshoot Security Fabric connectivity and authorization
High Availability Solutions
HA Cluster ConfigurationAdvanced HA Scenarios
- Implement and configure high availability clusters
- Design resilient architectures using HA technologies
- Troubleshoot HA failover and synchronization issues
2
Infrastructure
FortiGate Operation Modes
NAT ModeTransparent ModeVirtual Domains (VDOM)
- Select appropriate operation mode for deployment scenarios
- Configure and manage virtual domains
- Design multi-tenant solutions using VDOMs
Cloud Security Solutions
Private Cloud DeploymentsPublic Cloud IntegrationSASE and SaaS Security
- Deploy FortiGate in various cloud environments
- Design SASE architectures using Fortinet products
- Implement cloud-native security integrations
3
Networking
Advanced Routing
OSPF RoutingBGP RoutingIPv6 Networking
- Configure and troubleshoot OSPF routing
- Implement BGP with VRF and route leaking
- Deploy IPv6 networking with translation technologies
VPN Technologies
IPsec VPNSSL VPNADVPN (Auto Discovery VPN)
- Design and implement IPsec VPN solutions
- Configure SSL VPN for remote access
- Deploy ADVPN for dynamic mesh VPN topologies
Access Layer and Application Delivery
FortiSwitch IntegrationFortiAP WirelessLoad Balancing and Application Delivery
- Implement FortiSwitch managed switching
- Deploy secure wireless with FortiAP
- Configure application delivery and load balancing
4
Secure SD-WAN
SD-WAN Architecture and Design
SD-WAN Core ComponentsAdvanced SD-WAN Features
- Design SD-WAN architectures for enterprise environments
- Configure performance SLA and health checks
- Implement advanced SD-WAN features like packet duplication
SD-WAN with Cloud Integration
Azure vWAN IntegrationMulti-Cloud SD-WAN
- Integrate FortiGate SD-WAN with Azure vWAN
- Design multi-cloud SD-WAN solutions
- Optimize traffic flows for cloud and hybrid deployments
SD-WAN with ADVPN and Dynamic Routing
SD-WAN ADVPN IntegrationDynamic Routing with SD-WAN
- Integrate ADVPN with SD-WAN for dynamic mesh
- Configure dynamic routing protocols over SD-WAN
- Troubleshoot complex SD-WAN routing scenarios
SD-WAN Troubleshooting
SD-WAN Diagnostics and Monitoring
- Monitor SD-WAN performance and health
- Troubleshoot SD-WAN traffic steering issues
- Analyze SD-WAN metrics and logs
5
Security Solutions
Application and Network Security
FortiWeb Web Application FirewallInspection Modes and Security ProfilesAdvanced Protocol Handling
- Deploy and configure FortiWeb for web application security
- Implement appropriate inspection modes for different scenarios
- Configure advanced protocol security features
Email Security
FortiMail Deployment and ConfigurationAdvanced Email Threat Protection
- Deploy FortiMail in appropriate modes
- Configure email authentication and anti-spam
- Implement advanced threat protection for email
Authentication and Identity Management
FortiAuthenticator IntegrationSAML and SSORADIUS and LDAP Authentication
- Implement FortiAuthenticator for centralized authentication
- Configure SAML SSO for applications
- Troubleshoot RADIUS and LDAP authentication
6
Security Operations
SOC and Centralized Management
FortiManager Deployment and ConfigurationFortiAnalyzer Logging and Analytics
- Deploy FortiManager for centralized device management
- Configure FortiAnalyzer for logging and analytics
- Implement workflow and approval processes
Endpoint Protection and EDR
FortiClient EMSZTNA (Zero Trust Network Access)EDR (Endpoint Detection and Response)
- Deploy FortiClient EMS for endpoint management
- Implement ZTNA for zero trust access
- Configure EDR playbooks for automated response
Threat Intelligence and Advanced Protection
FortiSandbox IntegrationIncident Response and Remediation
- Deploy FortiSandbox for advanced threat detection
- Implement automated incident response
- Conduct threat investigations using FortiAnalyzer
7
Automation
Security Automation
Automation StitchesFabric Connectors
- Implement automation stitches for security workflows
- Configure fabric connectors for cloud integration
- Design event-driven automation scenarios
Scripting and API Integration
CLI ScriptingREST API IntegrationLarge-Scale Deployment Automation
- Write CLI scripts for configuration automation
- Use REST API for programmatic configuration
- Implement large-scale automation with IaC tools
How do I earn this certification?
Passing NSE8 earns the Fortinet Certified Expert (FCX) - Cybersecurity certification. It sits in the Network Security Expert (NSE) track.
Current Level Exams
- NSE8_812 - NSE 8 - Network Security Expert 8 Written Exam
- NSE8_870 - NSE 8 - Network Security Expert 8 Practical Exam Must complete within 2 years of passing written exam
Next Level Options
None FCX (NSE 8) is the highest technical certification in the Fortinet NSE program
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
Who should take this exam?
This exam is typically taken by Network Security Architects and Senior Security Engineers.
Must pass NSE8_812 (written exam) before attempting NSE8_870 (practical exam)
- NSE 4 certification
- NSE 5 certification in relevant specialization
- NSE 6 certification in relevant specialization
- NSE 7 certification in relevant specialization
- Comprehensive experience with Fortinet products in production
- 5+ years of network security experience
- Experience with complex enterprise deployments