Dashboard › Status

System health and operational overview

CPU

14%

Current utilization

Memory

42%

1.72 GB / 4.00 GB

Sessions

3,842

of 1,500,000 maximum

Threats Blocked 24h

287

IPS · AV · Web · DNS

System Information FGT-LAB-01

Licenses & Services

Security Fabric Topology

Bandwidth Last 5 minutes

↓ 182.4 Mbps↑ 37.8 MbpsPeak 241 Mbps

Interface Bandwidth

wan1

66%

lan

42%

DMZ

18%

VPN

26%

FortiView › Sources

Traffic analytics and visibility

Traffic Over Time Bytes / second

Top Applications

HTTPS 44%YouTube 20%Microsoft 365 17%DNS 10%Other 9%

Top Sources

Source	Device	Sessions	Bandwidth	Threats
192.168.10.41	STUDENT-PC-07	428	3.81 GB	0
192.168.10.22	LAB-WS-02	317	2.96 GB	2
192.168.10.15	INSTRUCTOR	244	2.11 GB	0
192.168.20.11	LAB-SERVER	198	1.83 GB	5

Network › Interfaces

Physical and logical network interfaces

Network › SD-WAN

Members, zones, health checks, and steering rules

wan1

12 ms

Latency

wan2

27 ms

Latency

SLA Health

100%

2 of 2 members meet SLA

Priority	Name	Source	Destination	Strategy	Preferred Members	Status
1	Voice-Priority	Voice_VLAN	all	Lowest latency	wan1, wan2	Enabled
2	Default-Internet	all	all	Maximize bandwidth	wan1, wan2	Enabled

Network › Static Routes

IPv4 routing table configuration

	Destination	Gateway	Interface	Distance	Priority	Status

Network › DNS

System DNS and DNS-over-TLS settings

DNS Servers

DNS serversPrimary DNSSecondary DNSProtocolLocal domain name

Network › DHCP Server

Address assignment scopes and leases

Interface	Gateway	Netmask	Range	DNS	Lease Time	Status
lan	192.168.10.1	255.255.255.0	192.168.10.100 - 192.168.10.220	System DNS	86400 s	Enabled
Guest	192.168.30.1	255.255.255.0	192.168.30.50 - 192.168.30.200	System DNS	14400 s	Enabled

Policy & Objects › Firewall Policy

IPv4 traffic policies evaluated from top to bottom

ID	Status	Name	Incoming	Outgoing	Source	Destination	Service	Action	NAT	Security Profiles	Bytes

Simulator behavior: policy matching follows interface, source, destination, service, and schedule logic. Unmatched simulated traffic is treated as implicitly denied.

Policy & Objects › Addresses

Reusable IPv4/IPv6 hosts, subnets, ranges, FQDNs, and groups

Name	Type	Address	Interface	References

Policy & Objects › Services

Predefined and custom protocol/port definitions

Name	Category	Protocol	Destination Port
HTTP	Web Access	TCP	80
HTTPS	Web Access	TCP	443
DNS	Network Services	TCP/UDP	53
SSH	Remote Access	TCP	22
RDP	Remote Access	TCP	3389
ALL_ICMP	General	ICMP	—

Policy & Objects › Virtual IPs

Destination NAT and port-forwarding objects

Name	Interface	External IP	Mapped IP	Port Forwarding	References
WEB-SERVER-VIP	wan1	203.0.113.50	192.168.20.10	TCP 443 → 443	1
LAB-SSH-VIP	wan1	203.0.113.51	192.168.20.15	TCP 2222 → 22	0

Policy & Objects › Central SNAT

Centralized source NAT rules

Central SNAT is typically used when central NAT is enabled. In FortiOS policy-based NGFW mode, central NAT is enabled and source NAT is defined separately from the security policy.

ID	Incoming	Outgoing	Source	Destination	NAT	Status
1	lan	wan1	LAN-NET	all	Use outgoing interface address	Enabled

VPN › IPsec Tunnels

Site-to-site and remote-access IPsec VPN configuration

Name	Gateway	Phase 1	Phase 2	Interface	Bytes In	Bytes Out	Status
Branch-HQ	198.51.100.20	AES256 / SHA256 / DH14	AES256 / SHA256	wan1	1.31 GB	844 MB	Up
DR-Site	198.51.100.89	AES256 / SHA256 / DH14	AES256 / SHA256	wan2	0 B	0 B	Down

VPN › SSL-VPN Settings

Remote access portal, authentication, and tunnel settings

SSL-VPN Configuration

Enable SSL-VPN Listen on Interface(s) Listen on Port Server Certificate Address Range DNS Server Idle Logout

VPN › Monitor

Active IPsec and SSL-VPN sessions

Type	Name/User	Remote Gateway	Assigned IP	Duration	Bytes	Status
IPsec	Branch-HQ	198.51.100.20	—	4d 03:14	2.15 GB	Up
SSL-VPN	student.lab	203.0.113.91	10.212.134.12	00:31:42	214 MB	Connected

User & Authentication › User Definition

Local users and remote authentication sources

User	Type	Two-factor	Email	Status
student.lab	Local	Disabled	[email protected]	Enabled
lab-admins	LDAP	Remote	—	Enabled

User & Authentication › User Groups

Group membership for authentication policies and VPN portals

Name	Type	Members	References
SSLVPN-Students	Firewall	student.lab	2
Network-Admins	Firewall	lab-admins	1

Log & Report › Forward Traffic

Simulated session logs for allowed and denied traffic

Date/Time	Source	Destination	Service	Action	Policy ID	Application	Bytes

Log & Report › Security Events

IPS, antivirus, web filter, DNS filter, and application events

Date/Time	Severity	Security Action	Source	Destination	Event	Profile
2026-09-27 18:02:51	Warning	Blocked	192.168.10.22	203.0.113.99	Suspicious URL category	default-webfilter
2026-09-27 17:48:09	Critical	Reset	198.51.100.66	192.168.20.10	IPS signature match (training event)	protect_servers
2026-09-27 17:32:18	Notice	Monitor	192.168.10.41	142.250.0.1	Streaming.Media	student-app-control

Log & Report › System Events

Administrator, routing, VPN, HA, and configuration events

Date/Time	Severity	Event	Message
2026-09-27 18:05:12	Information	Admin login	Administrator admin logged in from 192.168.10.15
2026-09-27 17:55:22	Notice	Configuration	Firewall policy configuration changed
2026-09-27 16:41:07	Information	VPN	IPsec phase 1 negotiation completed for Branch-HQ

Log & Report › Log Settings

Local, FortiAnalyzer, FortiCloud, and syslog targets

Local Log

Remote Logging

System › Administrators

Administrative accounts and access profiles

Administrator	Type	Admin Profile	Trusted Hosts	Two-factor	Last Login
admin	Local	super_admin	192.168.10.0/24	Disabled	Now
helpdesk	Local	read_only	192.168.10.0/24	Enabled	2 days ago

System › High Availability

FortiGate Clustering Protocol simulation

HA Configuration

ModeGroup NameHeartbeat InterfacesSession Pickup

Cluster Members

This simulator currently runs in standalone mode. Change the mode to explore HA settings without affecting any real device.

System › Certificates

Local certificates, CA certificates, and signing requests

Name	Type	Subject	Issuer	Expires
Fortinet_Factory	Local	FGT-LAB-01	Fortinet Factory CA	2035-01-01
lab-cert	Local	firewall.lab.local	Lab Root CA	2027-09-27

System › Firmware & Registration

Firmware information, upgrades, and configuration backups

Firmware

7.6.x

Training build

This browser simulator does not install firmware. Upgrade controls are simulated.

Configuration

Save or restore the simulator's local browser state.

System › Settings

Administrative, hostname, session, and feature settings

Hostname System Time Timezone HTTP Port HTTPS Port SSH Port Idle Timeout NGFW Mode Inspection Mode

Training › Lab Center

Hands-on tasks that use the same simulator state as the GUI and CLI

Nothing here touches a real FortiGate. Student changes are stored only in this browser using localStorage. Complete tasks in the GUI or simulated CLI, then use Check Lab.