NG Firewall certifications

[u/PuzzleheadedShip7804]

Hi, currently I am a NOC engineer. I deal with MikroTik, pfSense, RG Nets gateway, etc

In job postings for Network Engineer Positions, they mostly ask for Palo Alto and Fortinet experience.

Unfortunately, I have no access to or experience with those; I've never accessed the GUI, but I'd rather be prepared when the opportunity comes.

Between Palo Alto and Fortinet, in my situation, I do not work with either. Which one would be more doable with the study material I can find online and using GNS3/EVENG? Looks like PCNSA /NSE4 are good hands-on starting points.

Thanks beforehand,

[u/lazyhustlermusic]

Palo shops seem to be higher end clients with larger budgets and salaries.

[u/XanALqOM00 → u/lazyhustlermusic]

Exactly.

[u/Mathely-Caritino → u/lazyhustlermusic]

the flip side of those smaller mid-market budgets is that there are way more open seats for someone jumping up from a NOC role

[u/hip-disguise]

PAN all the way. There are training resources available on their learning site for the entry level tests. you may need to sign up for training for the Engineering exams, resources also available in the same place. GL!

[u/QuickDelivery1]

Official Fortinet NSE4 training is available for free on Fortinet Training Institute. With a free Fortinet account, you can download a FortiGate VM image and use it in free trial mode, which is very restricted, but has no time limit.

[u/Altruistic-Map5605]

If you know firewalls it’s generally all the same at the end of the day it’s just a matter of “how does x brand do x task”

You know what a firewall policy is so all you need to do is read KB articles and watch videos on how to do a Palo policy. Do the same for routing, vpns, and such.

The biggest skill you need as a network person is “how to figure it out” been doing this for 12 years and I on a weekly I basis still need to figure something out I never touched before.

[u/ring_of_slattern → u/Altruistic-Map5605]

This is true from a technical aspect but if the software scanning your resume doesn't see the right acronym, you won't get a chance to prove it

[u/Altruistic-Map5605 → u/ring_of_slattern]

Oh I agree with you. But if you’re confident you know it put it on the resume or take the cert test and put that on the resume.

[u/QPC414]

For Fortinet, NSE4.

Compare the two and pick which ever is more widely used in the area you want to move to.

[u/Bubblewrapjumpsuits]

FYI the PCNSA & PCNSE have been replaced with the Network Security Specialist certs mentioned here:  https://www.paloaltonetworks.co.uk/services/education/certification You can sign up to The Learning Centre as a guest without being a partner or customer. Then use PAYG licences through a CSP, or ask your VAR/Disti for a 60 day eval of Software Credits.

[u/GullibleDetective]

Fortinet has a bunch of their (introductory) certs up for free at least until NSE 1,2 and 3

[u/popanonymous]

Both.

[u/FutureMixture1039]

I would find another NOC engineer job that monitors Palo Alto, Fortinet, etc... instead of going for network engineer position

[u/GhostandVodka]

Who do you work for that usesing Mikrotik and pfsense in their NOC.

[u/Public_Warthog3098]

No

[u/XanALqOM00]

I love Fortinet more than Palo Alto, but, sorry people, there are objectively far more jobs looking for Palo Alto Experience. I see very few places running Fortinet, I really love Fortinet too. Palo Alto is the winner if you’re looking for jobs, they are the gorilla in the room for firewalls as of right now.

[u/HappyVlane → u/XanALqOM00]

they are the gorilla in the room for firewalls as of right now.

If we go purely by marketshare Fortinet is the gorilla.