Fortinet FCP-FGT-AD-7.6: Certification Path
Fortinet changed its certification program on July 15, 2026, retiring the FCP, FCSS, FCF, FCA, and FCX certification labels and expanding the program to NSE 1 through NSE 8 plus track-specific certifications. That means the ExamCollection target FCP_FGT_AD-7.6 now represents a legacy exam label rather than the current certification structure.
The underlying FortiGate 7.6 administration skills remain important. Under the current program, the FortiOS Administrator exam maps to NSE 4. Candidates using older FCP study material should therefore separate the technical content from the credential name: firewall administration, policy, routing, VPN, authentication, inspection, HA, logging, and troubleshooting remain relevant, while certification planning should follow Fortinet’s new NSE requirements.
The old FCP label and the current NSE level are not the same thing
Before July 2026, the FCP in Secure Networking path combined a FortiGate administrator exam with an additional product exam. Fortinet’s new structure awards NSE certifications at specific levels and tracks. The current FortiOS Administrator exam sits at NSE 4, while products such as FortiSwitch and FortiManager sit at higher secure-networking levels.
This matters because an old article or practice set may say “earn FCP” even though that certification label has been retired. Keep the technical lesson if it matches FortiOS 7.6, but verify the current credential requirement on Fortinet’s official training site before planning the next exam.
Fortinet’s transition rules are especially important for people who passed exams before July 15, 2026. Active legacy certifications were mapped into new NSE credentials based on the exams already completed, while recent exam passes could also qualify for new certifications under Fortinet’s transition policy. If you already hold historical badges, check your Training Institute record rather than assuming you must repeat the same technical exam.
For new candidates, ignore old marketing diagrams that still describe FCP as the destination. Use them only to understand historical relationships between products. Current planning should begin with the new NSE levels and track requirements.
FortiOS Administrator remains the operational foundation
The current FortiOS 7.6 Administrator target is the clearest internal reference for the skills that now map to NSE 4. Fortinet expects practical knowledge of deployment, system configuration, routing, VPN, authentication, security profiles, high availability, logging, and troubleshooting.
That foundation matters even if your long-term goal is switching, centralized management, SD-WAN, or architecture. Advanced Fortinet roles assume you understand how a FortiGate makes decisions about sessions, routing, policy, translation, authentication, inspection, and logs. Skipping that operational layer makes later troubleshooting much harder.
Build a baseline lab that you keep through the entire secure-networking path. Start with interfaces, routing, firewall policy, NAT, authentication, inspection, VPN, HA, and logging. As you move into FortiSwitch, FortiManager, SD-WAN, or NSE 7 architecture, extend the same environment instead of starting from zero. This makes the progression concrete because each new layer depends on behavior you already understand.
Troubleshooting is the thread that connects the levels. At NSE 4 you identify why one FortiGate session fails. At higher levels you identify how switching, management, routing, automation, or multi-device architecture changed the conditions around that same session.
FortiSwitch now represents a higher secure-networking step
Under the new program, FortiSwitch Administrator maps to NSE 5 in Secure Networking for candidates who meet the current program requirements. That creates a natural progression for network and security professionals who move from FortiGate administration into secure access switching, FortiLink, VLANs, Layer 2 controls, and campus or branch access.
The distinction is useful for planning. FortiGate administration secures traffic at the firewall and routing boundary; FortiSwitch adds endpoint access, switching topology, VLAN design, port security, and FortiLink-managed access. Choose it when your responsibilities extend from perimeter or segmentation policy into the access layer.
FortiSwitch is a good next step for administrators whose firewall responsibilities are expanding into branch or campus access. The current exam covers VLANs, FortiLink, supported topologies, Layer 2 security, monitoring, troubleshooting, and standalone management. It adds a new enforcement layer while keeping FortiGate knowledge relevant.
The progression is not mandatory for every firewall administrator. If your organization uses third-party switching and your responsibility is centralized firewall management, FortiManager may be the more useful branch. The new NSE structure makes it easier to choose specializations based on work rather than completing one fixed legacy bundle.
FortiManager now sits at NSE 6 in Secure Networking
The legacy FortiManager target is another example of a label that must be interpreted through the 2026 transition. FortiManager 7.6 Administrator is currently positioned at NSE 6 in Secure Networking, reflecting deeper responsibility for centralized administration, ADOMs, device databases, policy packages, installation workflows, automation, APIs, and troubleshooting.
That progression is logical because centralized management is most useful after the administrator already understands the behavior of individual FortiGate devices. Managing many firewalls safely requires both product knowledge and control over shared state, change workflows, and blast radius.
NSE 7 moves from administration toward enterprise architecture
The current Secure Networking Architect target represents the advanced secure-networking layer. Fortinet expects candidates to design, administer, and support secure SD-WAN and enterprise security infrastructure using multiple FortiGate devices plus FortiManager, FortiAnalyzer, and related technologies.
The skill jump is not simply “more commands.” NSE 7 scenarios require system-level reasoning about routing, SD-WAN, automation, HA, Security Fabric integrations, centralized management, incident analysis, and troubleshooting across several devices. Candidates should pursue that level when they are responsible for enterprise behavior rather than one firewall.
Before moving to NSE 7, make sure you have operated failures, not just successful configurations. Advanced architecture questions assume you can reason about routing convergence, SD-WAN health, HA behavior, IPsec, centralized management, logging, automation, and incident analysis under degraded conditions. A lab that never breaks will not build that judgment.
The SD-WAN Engineer target is another possible specialization depending on the environment. Use the track structure to build depth where the organization needs it rather than treating every higher-level exam as a compulsory milestone.
Legacy practice content is useful only when the product version still matches
Older FCP materials can still be valuable if they teach FortiOS 7.6 behavior accurately. Check the product version, feature availability, objective scope, and certification label separately. A routing or IPsec lab can remain excellent practice even if the title uses an outdated FCP certification name.
The IPsec fundamentals article is an example of concept-level support that survives certification renaming. Protocol behavior is not invalidated by a program transition, but the way an exam weights or frames the topic can change and should be checked against the current Fortinet blueprint.
Create a version note at the top of every old lab you keep. Record the FortiOS release, certification label used at the time, and whether the objective still appears in the current exam. This prevents an otherwise useful lab from silently teaching an outdated command, feature path, or credential relationship.
When a legacy resource conflicts with the current Fortinet blueprint, keep the conceptual lesson but rebuild the exercise against the current product documentation. That preserves the value of older operational knowledge without letting historical exam structure dictate present-day study.
Use current Fortinet requirements for recertification decisions
Fortinet also changed recertification and transition rules in 2026. Active legacy certifications were mapped into new NSE certifications based on the exams already passed, and current requirements now depend on level and track. Candidates should not rely on an old two-exam FCP formula when deciding what is needed today.
The Fortinet certification inventory can help you find internal study targets, but official Fortinet Training Institute pages should control current requirements, expiration rules, and exam status. Treat internal labels as navigation, not as the authority for a fast-changing certification program.
Certification expiry and renewal rules can affect exam sequencing. If a credential is still active, a higher-level pass may extend or replace parts of the path differently than if everything has expired. Because Fortinet changed the program recently, status-sensitive decisions should be checked immediately before registration rather than copied from an older training plan.
Maintain a simple credential ledger with exam date, badge, current certification awarded, expiration date, and next eligible renewal action. That administrative step prevents good technical study from being wasted on an exam that no longer advances the credential you intend to hold.
Choose the next exam from the work you are taking on
If you manage individual FortiGate devices, the NSE 4 FortiOS foundation is the right level. If you also manage FortiSwitch access infrastructure, NSE 5 Secure Networking becomes relevant. If you centralize many FortiGate devices with FortiManager, NSE 6 is closer. If you design enterprise SD-WAN and multi-device secure networking, NSE 7 reflects that responsibility.
That role-first path is more useful than trying to reproduce the old FCP ladder. Fortinet’s 2026 transition makes the certification names different, but the underlying progression is still recognizable: operate one device well, expand into adjacent secure-networking technologies, centralize management, then design and troubleshoot at enterprise scale.
The transition is therefore a useful reset: keep the FortiGate skills that remain operationally valuable, but rebuild your certification plan around the current NSE level and track names.
- Category: All Certifications Certifications
