Choosing Your Professional (FCP) Journey

Fortinet’s former Fortinet Certified Professional (FCP) credentials still appear in job descriptions, training records and older exam materials. They can help explain what a practitioner studied, but they are no longer the current route for earning a new Fortinet certification. On July 15, 2026, Fortinet retired FCP along with FCF, FCA, FCSS and FCX and expanded its NSE program to eight levels. Anyone choosing training now needs to separate a historical FCP credential from the NSE badges and exams offered under the current system.

This is especially important for people who already passed an FCP-era exam. A retired credential does not necessarily mean that its technical skills are obsolete or that the training has lost all value. It does mean that an old core-plus-elective diagram cannot be assumed to describe today’s certification requirements. Fortinet’s published transition mapping, not an old article’s exam-name list, determines how an active FCP credential was converted to NSE credentials.

What changed in July 2026?

Under the former FCP system, candidates often selected a professional track such as Network Security, Public Cloud Security or Security Operations and combined the required core and elective examinations for that track. The specific track and product-version rules varied over time. From July 15, 2026, the structure is organized around NSE 1, 2, 3, 4, track-specific NSE 5, 6 and 7, and NSE 8, with separate industry certifications for particular specializations.

Fortinet identifies Secure Networking, Security Operations, SASE and Cloud Security as specialized areas within the revised NSE 5–7 levels. The numeral and specialization now matter together: an NSE 6 in Cloud Security does not communicate the same training scope as an NSE 6 in Security Operations. This is a framework for selecting skills, not a promise that completing any course automatically awards a credential.

Fortinet’s 2026 certification program announcement establishes the retirement and new levels. Its current certification page supplies the requirements that candidates should use when planning a new exam. Older Training Institute pages describing FCP can remain visible as historical references; their presence does not reverse the retirement date.

How an existing FCP credential was mapped

People with an active FCP at the transition should check the badges issued to their Fortinet Training Institute account instead of guessing an NSE title from an old course name. Fortinet says active FCP holders were awarded an NSE 4 where the relevant FortiGate or FortiOS exam had been passed. Depending on their passed exams and previous track, they could also receive an NSE 5 or NSE 6 badge. Dates for the corresponding new badges were carried over from the active FCP credential. The resulting mix is individual, not a uniform FCP-to-one-NSE conversion.

Someone who completed an administrator examination may have evidence of firewall configuration skills, while someone who also completed a cloud or security-operations exam may have a specialization-specific badge. Fortinet’s official credential-transition explanation and exam-mapping tables should be consulted for the exact outcome. A historical FCP entry can still be described on a résumé, but the current NSE credential should be named precisely, with its actual status and expiration date.

For a record obtained under the old program, it is reasonable to say that the training was completed while FCP was active. It is misleading to present that same record as proof that a new FCP can be earned today, or to treat different specialty badges as interchangeable. Candidates should verify their personal account, especially if the credential had expired before the transition, or if their record includes more than one product-family examination.

Choose training by the systems you actually manage

Secure Networking is most relevant when everyday work centers on FortiGate policy, address and service objects, network segmentation, routing, VPNs, high availability, logging, and troubleshooting. An administrator who designs and debugs these controls gains more from configuration scenarios than from memorizing every Fortinet product category. The practical distinction between permit rules, inspection behavior, NAT and routing is foundational. When revising an older study plan, FortiGate skills carried from the FCP era into NSE 4 should be checked against current FortiOS Administrator objectives: the administration tasks remain relevant, but the credential structure and exam version may have changed.

Cloud Security covers the controls applied to workloads and services running in cloud environments. The candidate should be comfortable with cloud identity, virtual networking, security groups, logging, shared-responsibility boundaries, and the Fortinet products relevant to the current exam. Public-cloud experience is not interchangeable with administering a physical firewall: the same policy idea may be enforced through different network paths, identities, APIs and deployment pipelines.

Security Operations is about visibility, investigation and response. Work may include interpreting telemetry, integrating collectors, understanding detection context, tuning alerts, and documenting what was observed. A practitioner should be able to distinguish a suspicious event from a confirmed incident and know how to preserve evidence before taking disruptive action. A lab that produces realistic investigation artifacts can be more useful than an exercise that only asks where to click in a management console.

SASE combines network-access and security-delivery decisions, often across remote users and distributed workloads. Candidates should understand how identity, device posture, access policy and traffic inspection interact. This track is not simply a synonym for all network security; it addresses a different architectural placement of controls.

Do not build a study plan around retired exam codes

Fortinet has changed course titles, product versions and exam codes multiple times. A syllabus labeled FCP or an NSE exam from an earlier version may still teach useful concepts, but it may describe screens, policy behavior, features and certification requirements that differ from today’s test. Before spending money on training, check the current examination entry for its exact code, supported product version, objectives, prerequisite structure and retirement or availability notice. The published requirements should control the plan even when a reseller or third-party course uses older branding.

Organize preparation in three layers. First learn the underlying concepts—such as firewall rule evaluation, identity-based policy, logging, segmentation, high availability or cloud access boundaries. Then learn how Fortinet products implement those concepts in the versions named by the current exam. Finally practice diagnosing failure: a policy that matches but routes incorrectly, a user who authenticates but lacks the expected authorization, or a detection that fires without sufficient context. This sequence builds transferable expertise while avoiding brittle menu memorization.

A practical way to evaluate readiness

For a Secure Networking path, create a permitted lab with a small number of hosts and security segments. Document an intended connectivity policy, implement it, and confirm that permitted traffic works while denied traffic is logged. Change one condition and explain how to locate the mismatch. Record your configuration, expected behavior and observed outcome; do not confuse a successful connection test with proof that every security control has been evaluated.

For a Cloud Security path, trace a request through identity, network controls, application permissions and logging. For Security Operations, work with a simulated event set and describe collection, enrichment, triage, escalation and evidence preservation. For SASE, document the policy decision for a remote user whose identity is valid but whose device posture does not meet access conditions. Those exercises give an employer more concrete evidence of competence than a list of product names.

Choose one concentration that is close to your role. A generalist can later move across specializations, but there is little value in attempting every exam at once when the relevant product environments are unfamiliar. Where practical, use a current lab guide and official release documentation to confirm how a feature behaves in the exam version, especially for features that have changed between FortiOS releases.

How to describe FCP and NSE accurately in 2026

Use FCP when discussing the credential as it existed before July 15, 2026, historical study paths, or the exams that produced your transition mapping. Use the exact NSE level and specialization when describing a current credential. Do not imply that all FCP holders automatically received every new NSE badge, and do not call an expired legacy designation active. Confirm status directly from your Training Institute account.

The strongest decision is not which badge sounds most prestigious. It is which set of current objectives corresponds to the systems you can administer, secure, monitor and troubleshoot. Treat the former FCP system as historical context, the 2026 NSE framework as the current map, and practical operational competence as the outcome worth pursuing.

• Category: All Certifications CyberSecurity