Fortinet certification exams.

Fortinet Certification Overview: NSE Levels, Tracks, Requirements, and Career Path Choices

Fortinet’s Network Security Expert (NSE) program is a vendor-specific learning and certification ecosystem for people working with Fortinet security technologies, from newcomers building cybersecurity fundamentals to experienced professionals designing and troubleshooting complex environments. The program combines progressive levels with tracks in Secure Networking, Security Operations, Cloud Security, and SASE. This overview explains how those pieces fit together, what each stage is intended to demonstrate, how the 2026 structure affects planning, and which questions to ask before choosing a Fortinet certification path.

Start with the program structure, not the exam name

The sensible way to approach Fortinet certification is to choose a technical direction first and then identify the level that matches your responsibilities. The NSE program is organized around progressive levels, while the higher technical levels branch into subject-focused tracks.

As of July 15, 2026, Fortinet’s program provides eight available certification levels and maintains four training tracks: Secure Networking, Security Operations, Cloud Security, and SASE. The same level can therefore represent different work depending on its track. An NSE 7 in Secure Networking and an NSE 7 in Cloud Security are not interchangeable study targets; each is tied to a different technical area and prerequisite sequence.

The program also includes industry-oriented certifications such as OT Security and MSSP Security. These are not simply alternate names for the four main tracks. Their requirements build on the NSE 4, NSE 5 or NSE 6, and NSE 7 structure, making them options for professionals whose work is specifically aligned with operational technology or managed security services.

Fortinet describes its certification program as an objective indicator of technical knowledge and skills. That makes the credential useful as a structured learning target, but it does not remove the need to evaluate the actual work involved in a target role. A person administering FortiGate environments may need a different path from someone architecting a cloud security platform or operating a managed service.

The main levels at a glance

NSE 1, NSE 2, and NSE 3 form the introductory portion of the program. NSE 1 requires completion of the online Cybersecurity and Cloud Fundamentals course. NSE 2 requires completion of the online Introduction to the Next Generation Firewall course. NSE 3 requires completion of the online FortiGate Operator course and passing the online NSE 3 FortiGate Operator exam.

NSE 4 is the first major technical administration milestone. Its requirement is passing the proctored NSE 4 in FortiOS Administrator exam. FortiOS is Fortinet’s flagship operating system and the foundation of the Fortinet Security Fabric, so NSE 4 is the point at which a learner moves from general awareness or operator-level familiarity into administration of a core Fortinet platform.

NSE 5 and NSE 6 add specialist choices. Each requires an active NSE 4 certification and a proctored exam in the selected area. The available areas include Secure Networking, Security Operations, SASE, and Cloud Security. NSE 5 and NSE 6 are therefore not merely consecutive subjects in a single linear syllabus; they are different specialization options built on the NSE 4 foundation.

NSE 7 is an advanced architect-level stage in one of the four tracks. It requires an active NSE 4, an active NSE 5 or NSE 6 certification in the same track, and the relevant proctored NSE 7 Architect exam. NSE 8 is the expert designation. It requires the prerequisite certifications, a Core Practical Exam, and one Elective Practical Exam.

Why the 2026 change matters to planning

The 2026 update affects both the number of choices and the way a candidate should check eligibility. Fortinet says the program expanded from five to eight available certification levels, introduced industry certifications, expanded the certification-eligible product range, introduced new comprehensive NSE 7 exams, reorganized and expanded cybersecurity fundamentals training and certifications, and updated recertification rules.

A candidate planning around an older Fortinet study resource should therefore verify that the resource matches the current certification name, track, exam version, and prerequisite rules. The official Training Institute and Help Desk pages are the appropriate places to confirm those details before booking an exam. This is especially important for readers who began studying under a previous program structure and are deciding whether to continue, transition, or start a new track.

The update also introduced recertification points for NSE 8 certifications and changed the NSE 8 expiration period to 2 years. Those changes make maintenance part of the initial path decision rather than an administrative issue to consider only after earning the credential.

Choose a starting level based on your current work

Newcomers should begin with NSE 1 through NSE 3, while people already administering Fortinet environments can evaluate NSE 4 directly if they can demonstrate the required FortiOS knowledge. The right starting point is determined by capability and eligibility, not by selecting the highest-sounding level.

NSE 1 and NSE 2 are suitable orientation steps for learners who need a foundation in cybersecurity, cloud concepts, and next-generation firewall concepts. Their course-based requirements make them useful for building vocabulary before tackling product administration. They can also help non-specialist stakeholders understand the basic context around Fortinet technologies without immediately committing to a technical proctored exam.

NSE 3 is more operational. The FortiGate Operator course and online exam make it a reasonable target for someone who needs to work with FortiGate in an operator capacity or who wants a guided bridge toward deeper administration. It should not be treated as a substitute for the configuration and troubleshooting depth expected at NSE 4.

NSE 4 is the central gateway to the technical branches. It is the required active foundation for the NSE 5 and NSE 6 options and appears among the prerequisites for NSE 7, NSE 8, OT Security, and MSSP Security. A learner who expects to progress beyond entry-level Fortinet work should treat NSE 4 as a planning anchor rather than an isolated badge.

The practical readiness question is simple: can you explain and perform the FortiOS administration tasks represented by the current NSE 4 exam objectives, rather than merely recognize terminology? If the answer is uncertain, use Fortinet’s course material, labs, and practical exercises to identify gaps before scheduling. The official requirement is passing the proctored exam; hands-on readiness is a practical recommendation for avoiding a theory-only preparation strategy.

A useful entry decision

Choose NSE 1 or NSE 2 when your immediate goal is foundational understanding. Choose NSE 3 when you need operator-level familiarity with FortiGate. Consider NSE 4 when your work includes administering FortiOS or when you need access to the specialist and architect paths.

If you are entering cybersecurity without a networking background, moving through the introductory levels may produce a more coherent learning sequence than jumping directly into a technical exam. If you already manage network security systems, compare your experience against the official NSE 4 content before deciding whether the introductory courses would add meaningful preparation.

Select a specialist track after NSE 4

After NSE 4, choose the track that reflects the systems you expect to design, operate, monitor, or support. Fortinet’s four maintained tracks are Secure Networking, Security Operations, Cloud Security, and SASE.

Secure Networking is the clearest fit for professionals focused on network security infrastructure, FortiOS administration, network policy, monitoring, and troubleshooting. Fortinet describes the NSE 7 in Secure Networking as validating the ability to design, administer, monitor, and troubleshoot Fortinet network security solutions.

Security Operations is more appropriate when the work centers on detection, investigation, response, security monitoring, and operational workflows. The program provides NSE 5, NSE 6, and NSE 7 options in this track, allowing a learner to select a level aligned with current responsibilities and then progress toward the Security Operations Architect exam.

Cloud Security suits professionals working with Fortinet security controls in cloud environments. SASE is aimed at professionals whose responsibilities combine networking and security functions delivered through a SASE-oriented architecture. The existence of separate tracks is a reminder not to select a credential solely because its level is familiar; the subject area should match the problems you intend to solve.

At NSE 5 and NSE 6, the rule is consistent across the main tracks: hold an active NSE 4 and pass a proctored exam in the chosen track. This gives candidates two specialist-level entry points after NSE 4. The choice between NSE 5 and NSE 6 should be based on the role’s expected depth and the current official exam descriptions, not on an assumption that one is universally better.

Secure Networking

Secure Networking is the most direct path for a FortiGate- and network-infrastructure-focused professional. The NSE 7 version validates advanced design, administration, monitoring, and troubleshooting of Fortinet network security solutions. Fortinet recommends associated NSE courses as preparation for the NSE 7 exam.

The progression is NSE 4, then an active NSE 5 or NSE 6 in Secure Networking, followed by the proctored NSE 7 Secure Networking Architect exam. Candidates who want to become network security architects should confirm that their practical experience includes design decisions and fault isolation, not only routine device administration.

Security Operations

Security Operations is a better fit for people whose daily work involves operating security controls and responding to security information than for someone focused exclusively on firewall configuration. The path uses NSE 4 as its base, followed by an NSE 5 or NSE 6 in Security Operations and then the proctored NSE 7 Security Operations Architect exam.

Before choosing this branch, identify whether your target role emphasizes monitoring, incident workflows, analysis, or architecture. Those distinctions can affect whether an intermediate NSE 5 or NSE 6 target is the more sensible next step.

Cloud Security

Cloud Security provides a specialist route for Fortinet learners whose responsibilities extend into cloud network security and cloud-based workloads. The requirements use an active NSE 4, an active NSE 5 or NSE 6 in Cloud Security, and the proctored NSE 7 Cloud Security Architect exam for the advanced stage.

Because cloud environments change the operating context, readiness should include an understanding of how security controls are designed and managed across cloud infrastructure, not only familiarity with Fortinet product names. Use the current course and exam information to define the exact scope.

SASE

SASE is the appropriate branch when your work connects secure access, networking, and cloud-delivered security services. The route begins with NSE 4, continues through an active NSE 5 or NSE 6 in SASE, and leads to the proctored NSE 7 SASE Architect exam.

A SASE candidate should ask whether the intended role is genuinely concerned with the architecture and operation of distributed access and networking services. If the work remains centered on traditional network security administration, Secure Networking may provide a more coherent sequence.

Understand the industry certifications before committing

OT Security and MSSP Security are specialized destinations for professionals working in distinct operating models. Both require an active NSE 4, an active NSE 5 or NSE 6 certification, and an active NSE 7 certification in the same track as the NSE 5 or NSE 6 certification, followed by the relevant architect exam.

OT Security is relevant to people securing operational technology environments. Fortinet’s wider portfolio identifies operational technology as including areas such as manufacturing, SCADA/ICS, oil and gas, power, utilities, and other industrial settings. The credential should therefore be considered by someone whose responsibilities include the security realities of OT, rather than as a general-purpose alternative to a network or operations track.

MSSP Security is aimed at managed security service provider environments. A candidate should consider it when the work involves delivering, operating, or architecting security services for multiple customers or tenants. It is not an entry-level shortcut: the prerequisites deliberately require progression through the core NSE structure and a same-track NSE 7.

These options make the program more adaptable to different employer contexts, but they also make sequencing more important. A reader should map the intended industry specialization to the underlying track before starting the NSE 5 or NSE 6 stage, because the later NSE 7 prerequisite must be in the same track.

Questions for an OT Security candidate

Does your target work involve industrial systems, production continuity, safety-sensitive environments, or the distinctive segmentation and monitoring needs of OT? If not, a main-track credential may be a better match. If yes, verify the current OT Security Architect requirements and ensure that your earlier NSE credentials are aligned with the same-track rule.

Questions for an MSSP Security candidate

Will you design or operate security services across multiple customer environments? Do you understand the operational processes involved in service delivery as well as the underlying Fortinet technologies? If the answer is no, first build the relevant technical and operational foundation through NSE 4 and a suitable main track.

Treat NSE 7 as an architect-level progression

NSE 7 is intended for experienced cybersecurity professionals who need to design, manage, support, and analyze Fortinet security solutions at an advanced level. It should be approached as a progression from administration and specialization into architecture, rather than as simply another product exam.

For each main track, the requirements combine three elements: an active NSE 4, an active NSE 5 or NSE 6 in the same track, and the corresponding proctored NSE 7 Architect exam. The NSE 7 in Secure Networking page additionally states that the last prerequisite exam and the NSE 7 exam must fall within the permitted 2-year window.

That timing rule changes how candidates should sequence exams. Do not complete a prerequisite and then assume it will remain usable indefinitely for the NSE 7 application. Check the active status and current validity window before scheduling the final exam. Fortinet states that the NSE 7 certification is active for 2 years from the NSE 7 exam date or the last prerequisite exam date, whichever is later.

The Secure Networking NSE 7 also has a useful renewal relationship: earning or renewing it recertifies active NSE 1, NSE 2, NSE 3, NSE 4, NSE 5 Secure Networking, and NSE 6 Secure Networking certifications. That relationship is specific to the certifications and track described by Fortinet, so readers pursuing another track should confirm the corresponding current rules rather than generalizing from Secure Networking.

A practical readiness check is whether you can reason through design trade-offs, investigate failures, and explain how multiple Fortinet components work together. The official requirement is the relevant proctored exam and prerequisites; hands-on design and troubleshooting experience is the practical indicator that the level is appropriate.

Exam logistics worth checking

Fortinet lists Pearson VUE test centers and OnVUE as availability options for NSE certification exams on the NSE 7 Secure Networking page. That page also states that the exam uses multiple-choice and drag-and-drop questions, that answers must be 100% correct to receive credit, and that there is no partial credit or deduction for incorrect answers. It states that a failed exam requires a 15 day wait before retaking it.

These details can change by exam and program version. Confirm them on the current page for the exact credential before booking. Do not assume that the delivery format or retake policy for NSE 7 applies to every Fortinet assessment.

Reserve NSE 8 for complex, practical expertise

NSE 8 is Fortinet’s Cybersecurity Expert designation and is intended for networking and security experts who use Fortinet solutions in complex networks. Fortinet recommends industry experience, formal training, and the ability to solve complex security problems.

The current NSE 8 structure requires an active NSE 4 FortiOS certification, an active NSE 5 or NSE 6 certification in any track, and an active NSE 7 certification in the same track as that NSE 5 or NSE 6. Candidates must then pass the NSE 8 Core Practical Exam and one Elective Practical Exam within 1 year. The listed electives are Secure Networking, Application Security, and Security Operations.

This is a materially different preparation challenge from a knowledge-focused progression. The NSE 8 exam information describes a Core Practical Exam delivered on-site at selected Fortinet offices and events, while elective exams are available on-site or online proctored by ProctorU. It also describes hands-on configuration and troubleshooting, multiple-choice, and drag-and-drop question types, with partial credits available for selected tasks. Candidates may be asked for additional information before scheduling the core practical exam, and Fortinet says scheduling may not proceed if that information is not satisfactorily provided.

The NSE 8 certification awarded is active for 2 years from the date of the second exam. Renewal requires the prerequisite certifications and accumulation of 200 activity points. Fortinet states that completing NSE 4–7 exams contributes to earning points. For eligible NSE 8 holders with a certificate expiry date before July 31, 2027, Fortinet provides a recertification-exam route available until January 31, 2027; readers should verify eligibility and registration instructions directly with the Training Institute.

NSE 8 is worth considering when the target role genuinely involves complex design, configuration, troubleshooting, or expert-level escalation. It is a poor first target for someone who has not yet built a strong NSE 4–7 foundation, because the prerequisite structure and practical assessment are designed around that accumulated experience.

How NSE 8 affects the rest of the portfolio

Fortinet states that achieving or recertifying NSE 8 through 200 points earned by taking an NSE 8 practical exam renews active NSE 1, NSE 2, NSE 3, NSE 4, NSE 5, NSE 6, and NSE 7 certifications. The prerequisite certifications must be active at renewal. This can make NSE 8 maintenance strategically valuable for an expert who wants to maintain a broader active portfolio, but it should not be the sole reason to pursue the designation.

A candidate should also track exam-version usage. Fortinet states that once an exam version has been counted toward certification, it cannot be used again to renew the same certification. Keep records of the exams and activities used for each credential rather than relying on memory.

Build preparation around Fortinet’s learning ecosystem

The strongest Fortinet preparation plan combines official learning content with hands-on practice and a review of the current certification requirements. Fortinet’s Training Institute offers self-paced and instructor-led courses, hands-on labs, and practical exercises, and its public schedule includes in-person and virtual classes.

Start by reading the current certification page for the target level and track. Record the prerequisites, exam name, delivery method, validity period, retake rule, and renewal conditions. Then use the associated course material to organize learning around the skills the credential is designed to validate. This prevents a common planning error: studying a broad collection of Fortinet topics without knowing which level or track the work supports.

Use practical exercises to test whether you can perform the relevant tasks without relying on step-by-step prompts. For an administration path, that may mean configuring and validating policies, interpreting system behavior, and troubleshooting expected failures. For an architect path, practice should include design reasoning, dependency analysis, and recovery decisions. For NSE 8, practical work should be central because the requirements include practical exams.

Fortinet also provides a global network of Authorized Training Centers that deliver expert-level training in local languages in more than a hundred countries. The Academic Partner Program supports institutions such as K-12 schools, higher education providers, and nonprofit organizations focused on career readiness. These options may matter to learners who need structured instruction, local delivery, or an institutional pathway.

Use practice questions only as a way to check understanding. Memorizing answer patterns, using unauthorized exam content, or relying on leaked questions does not demonstrate the configuration, troubleshooting, or design ability that the higher NSE levels are intended to assess. Preparation should remain tied to legitimate Fortinet courses, labs, documentation, and real technical reasoning.

A preparation sequence that scales

First, define the work you want the credential to represent. Second, verify the current level and track requirements. Third, study the associated course content and create a lab plan. Fourth, test your ability to explain and perform the relevant tasks. Finally, confirm exam delivery and validity details immediately before registration.

For NSE 1–3, emphasize concepts and operator fundamentals. For NSE 4, emphasize FortiOS administration and troubleshooting. For NSE 5 and NSE 6, add the selected specialist domain. For NSE 7, practice architecture and advanced fault analysis. For NSE 8, prioritize complex, timed practical work and confirm all prerequisite records before attempting to schedule.

Plan renewals before you book the first exam

Fortinet’s credentials have active-status and renewal rules that can affect the order of exams. A path is not complete when the digital badge appears; it also needs a maintenance plan that keeps prerequisites active and accounts for current exam versions.

NSE 7 Secure Networking is active for 2 years under the date rule described by Fortinet. While the NSE 7, NSE 4, and the relevant NSE 5 or NSE 6 are still active, renewal can be pursued through the next version of the NSE 7 exam, an available online NSE 7 recertification assessment under the stated conditions, or any NSE 8 practical exam. If the NSE 7 has expired, Fortinet states that the candidate must pass the NSE 4 exam and a proctored NSE 5 or NSE 6 exam in Secure Networking within 2 years.

NSE 8 renewal requires active prerequisite certifications and 200 activity points. Because higher-level renewal can renew lower active certifications in specified circumstances, candidates should review their complete transcript and expiration dates rather than treating each credential as an unrelated item.

The program’s transition rules and assessment availability are time-sensitive. Before relying on a renewal route, check the current Fortinet Help Desk and Training Institute pages for the precise certification version, eligibility conditions, and deadline. This is especially important for anyone holding a credential from before the 2026 program update.

A maintenance checklist

Keep a record of each certification’s issue and expiry information. Check whether a prerequisite is still active before scheduling a dependent credential. Confirm whether an exam version has already been counted for the same certification. Review the current recertification options before the credential approaches expiry, and do not assume that renewal of one track automatically renews a different track.

Use a decision framework to choose the next credential

Choose the next Fortinet credential by combining role, product scope, current capability, and progression intent. A short decision framework is more reliable than selecting a level based on prestige or on the order in which exam names appear.

If you are new to cybersecurity or Fortinet, begin with NSE 1 or NSE 2 and move to NSE 3 when operator-level work is relevant. If you need to administer FortiOS or want access to specialist tracks, make NSE 4 the principal near-term objective. If your work is specialized, select NSE 5 or NSE 6 in Secure Networking, Security Operations, Cloud Security, or SASE after NSE 4.

If you design or troubleshoot advanced Fortinet environments, evaluate the matching NSE 7 Architect path. Select the track based on the architecture you work with, and remember that the NSE 5 or NSE 6 prerequisite must be in the same track. If you work in OT or managed security services, investigate OT Security or MSSP Security only after confirming that the required core and same-track prerequisites fit your background.

If you are already an experienced Fortinet expert working with complex networks, NSE 8 may be appropriate. Confirm that you can complete the Core Practical Exam and one Elective Practical Exam within 1 year and that your work history supports the practical nature of the designation.

Before registering, ask: What tasks will this credential help me demonstrate? Which Fortinet track matches those tasks? Are my prerequisites active? Can I access the required training or lab environment? Which exam version is current? How will I maintain the credential? If you cannot answer those questions, the next step is research and skills assessment rather than immediate exam booking.

What employers and teams should evaluate

A certification can help structure evidence of learning, but teams should pair it with role-specific demonstrations. For an administrator, examine configuration and troubleshooting ability. For an architect, examine design decisions and failure analysis. For a security operations professional, examine investigation and response workflows. For OT or MSSP roles, examine whether the candidate understands the operating model and constraints of that environment.

This approach keeps the credential in its proper role: a vendor-defined indicator of knowledge and skills, not a guarantee of job performance or a replacement for technical evaluation.

Where to verify Fortinet certification information

Use the Fortinet Training Institute as the primary starting point for courses, schedules, certifications, Authorized Training Centers, and academic delivery options. Use the certification page for the exact target credential and the Training Institute Help Desk for current requirements and program changes.

The Fortinet pages supplied for this overview describe an ecosystem connected to FortiOS, the Fortinet Security Fabric, network security, security operations, cloud security, SASE, operational technology, and managed service environments. Because program structure, exam versions, delivery, and renewal policies can change, readers should verify those details immediately before making a study or registration decision.

The most useful next action is usually specific: identify your target work, select the matching track, confirm the next eligible level, and open the official page for that credential. That sequence gives you a defensible plan without assuming that every Fortinet learner needs to pursue the same destination.

Official starting points

The Fortinet Training Institute provides the program’s learning and certification hub. The NSE program overview explains the 2026 changes, while the Help Desk requirements page lists the prerequisite and exam combinations. The individual NSE 7 Secure Networking and NSE 8 pages provide credential-specific information about scope, delivery, validity, badges, and renewal.

Conclusion

Fortinet’s NSE ecosystem is best understood as a set of connected routes rather than one ladder that every learner must climb in exactly the same way. NSE 1–3 establish fundamentals and operator knowledge, NSE 4 provides the technical foundation, NSE 5 and NSE 6 introduce track choices, NSE 7 develops architect-level capability, and NSE 8 recognizes complex practical expertise. OT Security and MSSP Security extend the structure for specialized operating environments. Choose the track that matches your intended work, verify the current requirements and active-status rules, and use Fortinet’s official courses, labs, and certification pages to turn the next credential into a purposeful skills plan.

Related exams

• FCSS_EFW_AD-7.6 exam — Fortinet NSE 7Enterprise Firewall 7.6 Administrator
• NSE7_EFW-6.0 exam — Fortinet NSE 7 - Enterprise Firewall 6.0
• NSE4_FGT-7.2 exam — Fortinet NSE 4 - FortiOS 7.2
• EMEA-Advanced-Support exam — Fortinet EMEA Advanced Support Exam
• FCP_FMG_AD-7.6 exam — Fortinet NSE 5 - FortiManager 7.6 Administrator
• FCP_FAZ_AN-7.6 exam — Fortinet NSE 5FortiAnalyzer 7.6 Analyst
• NSE5_EDR-5.0 exam — Fortinet NSE 5 - FortiEDR 5.0 Exam
• FCP_FML_AD-7.4 exam — FCPFortiMail 7.4 Administrator
• NSE7_EFW-6.2 exam — Fortinet NSE 7 - Enterprise Firewall 6.2
• FCSS_ADA_AR-6.7 exam — FCSSAdvanced Analytics 6.7 Architect
• NSE6_EDR_AD-7.0 exam — Fortinet NSE 6FortiEDR 7.0 Administrator
• NSE6_FAC-6.1 exam — Fortinet NSE 6 - FortiAuthenticator 6.1

Official sources

• What is changing in the NSE Certification program in 2026?
• What are the new certification requirements? : Training Institute Help Desk
• Learn more about Fortinet and the Security Fabric
• www.fortinet.com
• NSE 7 in Secure Networking | Training Institute
• NSE 8 Cybersecurity Expert | Training Institute - Fortinet
• Network Security Expert (NSE) Training Institute | Fortinet
• training.fortinet.com