SAP Security with Fortinet - Hands-On Labs

Workshop lab guides for SAP Security with Fortinet for SAP IAM Consultants. Work through these in order - each one assumes the environment state left behind by the one before it.

Table of Contents

| # | Lab | What you'll do | |---|---|---|---| | 00 | Initial Preparations | Log in to your environment, verify connectivity to SAP, FortiGate, and FortiAnalyzer. No configuration changes. | | 01 | SAP Threat Prevention & Application Protection | Build an Application Control profile, observe SAProuter routing (legitimate vs. misconfigured), attach an IPS signature to stop an active abuse pattern. | | 02 | Detection, Incident Response & SOAR | Find the alert your own Lab 01 activity generated in FortiSOAR, then build a playbook that looks up the session and performs a light remediation. |

Before you start

Find your own sheet on the Credentials page - it has your Guacamole login, FortiGate admin credentials, and your environment's IPs. Keep it private; each student's environment is isolated from every other student's.

Getting help

If something doesn't match a screenshot in these guides, or a step doesn't work the way it's described, ask your instructor before troubleshooting on your own - the labs are guided and click-along by design, not open-ended exploration.