Fortinet Network Security Expert 8 Written (800): Current Status, Eligibility, and Practical Preparation
The Fortinet Network Security Expert 8 Written (800) label refers to an older written-exam route, not the current path to NSE 8 certification. Fortinet states that the NSE8_812 written exam is discontinued as a prerequisite for initial certification and recertification. The current program requires a Core Practical Exam and one Elective Practical Exam. This guide helps experienced Fortinet professionals decide whether they are researching a legacy exam, confirm the correct assessment before spending money, and build preparation around the current NSE 8 requirements.
Is Fortinet NSE 8 Written (800) still an available certification exam?
No. Fortinet states that the NSE8_812 written exam is discontinued as a prerequisite for initial NSE 8 certification and recertification. It also states that the discontinued written exam does not replace the required NSE 4, NSE 5 or NSE 6, and NSE 7 certifications. Candidates searching for “800” should therefore verify the current Core Practical Exam rather than prepare from old written-exam material.
What the old label means for your preparation
A search result, voucher listing, practice-question page, or training reference may still use the older written-exam terminology. That terminology should not determine your booking decision. Check the Fortinet Training Institute certification page and the NSE 8 requirements article immediately before registering, because the program structure and delivery arrangements have changed.
The current Core Practical Exam is identified as the Fortinet NSE 8 - Core Practical Exam. Fortinet describes it as an assessment of network-security design, configuration, and troubleshooting in complex networks. The current certification is not earned by passing the Core exam alone; one Elective Practical Exam is also required.
Who should pursue the current NSE 8 route?
The NSE 8 path is intended for networking and security experts who use Fortinet solutions and can solve complicated security problems in complex networks. Fortinet recommends industry experience in addition to formal training. This is a poor fit for a candidate whose experience is limited to reading configuration examples or answering isolated product questions.
A useful readiness test
Before selecting a study plan, assess whether you can explain and troubleshoot an end-to-end design rather than only configure an individual feature. For example, you should be able to connect routing, identity, inspection, logging, management, and availability decisions into one operational outcome. If a problem crosses several Fortinet products, your preparation should include the interaction between those products.
Use the official audience description as a threshold, not as a marketing statement. If you still need to learn common FortiGate administration, first strengthen that foundation through appropriate Fortinet training. The Training Institute library includes administration and technical courses across NSE levels, but course availability and versions should be checked in the live library.
What certification requirements must be completed first?
To schedule the current Core exam, Fortinet requires active NSE 4 certification, an active NSE 5 or NSE 6 certification from any of the four tracks, and an active NSE 7 certification on the same track as the NSE 5 or NSE 6 certification. Confirm those records in your Fortinet account before planning a Core appointment.
The prerequisite combination
The requirement is not simply “hold an advanced Fortinet certification.” The NSE 7 track must match the NSE 5 or NSE 6 track used for eligibility, while the NSE 4 requirement is also active. The discontinued NSE8_812 written exam cannot substitute for these prerequisites.
Fortinet’s certification page describes the current assessment sequence as passing the Core Practical Exam and then passing one Elective Practical Exam within 1 year of passing the Core. You must pass both practical exams to obtain the NSE 8 certification. Passing only the Core is not the certification outcome.
Check administrative eligibility before booking
Fortinet says candidates may be asked to provide additional information before scheduling the Core Practical Exam. The request may concern account information, training and testing history, or prior engagement with the Fortinet and NSE Certification Program. A candidate may be unable to proceed if the requested information is not satisfactorily provided.
The practical next step is to review your certification records, account identity, and prerequisite track before purchasing anything. Resolve discrepancies with the Training Institute first. This prevents a study plan from being built around an appointment you cannot yet schedule.
What does the current Core Practical Exam measure?
The Core Practical Exam measures design, configuration, and troubleshooting across complex network-security environments. Fortinet lists FortiGate 7.6, FortiManager 7.6, FortiAnalyzer 7.6, and FortiAuthenticator 8.0 among the products used in the current exam. Study should therefore emphasize connected operational scenarios, not memorized definitions.
Infrastructure: 27% of the exam
Infrastructure represents 27% of the exam. The published content includes high availability, LACP, FGCP, FGSP, FortiAnalyzer HA, FortiAuthenticator HA, FortiManager HA, virtual clustering, VRRP architecture, multi-data-center deployments, redundant connectivity, work-from-anywhere optimization, hardening, performance tuning, FortiGate-VM bootstrapping, firmware management, FortiAnalyzer integration, FortiGuard, FortiManager policy packages, log management, multi-tenancy, VDOMs, operation modes, and VM deployments.
Prepare this domain as an architecture-and-operations problem. For each availability or management feature, record its purpose, dependencies, failure behavior, and verification method. A useful lab exercise is to draw a multi-site design, identify the control and data paths, then explain what should remain available when a node, link, manager, or analyzer is unavailable.
Networking: 40% of the exam
Networking represents 40% of the exam. The published topics include SASE, Secure Private Access preparation, SD-WAN on-ramp, asymmetric routing, BFD, dynamic routing, ECMP, multicast, policy routing, PBR, SD-WAN routing, static routing, VRF, ADVPN, dial-up VPN, IPsec VPN, overlay VPN, PQC for IPsec key exchange, SD-WAN, SSL VPN, VXLAN over IPsec, ZTNA, NGFW integrations, inspection modes, IPv6, policy modes, proxy rules, security profiles, DLP, web filtering, SSL inspection, IPS, transparent mode, explicit proxy, inter-VDOM routing, local-in policies, local-out routing, NAT, traffic shaping, transparent proxy, VLANs, and zones.
This domain deserves the largest study block because it combines connectivity, policy, inspection, and access design. Do not study routing separately from security policy. Build troubleshooting cases in which a route exists but a policy, NAT rule, inspection mode, proxy behavior, identity condition, or asymmetric return path prevents the intended result. Document the diagnostic evidence that would distinguish each cause.
Authentication: 14% of the exam
Authentication represents 14% of the exam. Fortinet lists 802.1X, ADOM-scoped administrators, advanced authentication, API authentication, captive portal, device and user authentication, Fabric SSO, FSSO, IAM, LDAP, OAuth, RADIUS, RSSO, SAML, and SNMPv3 in this area.
Treat authentication as a systems-integration domain. For every identity method, identify the user or device source, the protocol exchange, the Fortinet component involved, the policy decision that consumes the identity, and the logs that confirm success or failure. Practice tracing an authentication failure from the endpoint or client through the identity service and into the enforcement policy.
Do not infer missing blueprint percentages
The supplied official exam extract identifies Infrastructure at 27%, Networking at 40%, and Authentication at 14%, along with additional exam-topic material. It does not provide a complete set of domain weights in the supplied evidence. Do not turn the listed percentages into a complete blueprint or compare them without their domain names. Use the live Fortinet Core exam page for the current full topic table.
How should you prepare without a dedicated study guide?
Fortinet says there is no dedicated study guide for the current NSE 8 practical exams. Its stated preparation direction is to use the NSE 8 Public Handbook, product administration guides, handbooks, NSE training, and course material. It also recommends reading the exam-preparation section of the Public Handbook before attempting the practical exams.
Use the handbook as a map
Start with the handbook’s preparation section and turn each product or capability into a checklist. The checklist should contain four columns: design decision, configuration task, verification evidence, and likely failure mode. This structure is more useful than copying feature names because the Core exam assesses how those skills work in a complex environment.
Mark each item as read, configured, broken and repaired, or explained to another engineer. “Read” is the weakest status. A candidate who can configure a feature but cannot identify the relevant logs, routing state, policy match, or HA behavior still has a troubleshooting gap.
Use product documentation selectively
Do not attempt to memorize every administration-guide page. Begin with the products named by the official Core exam page, then follow dependencies revealed by the topic list. For example, a VPN scenario may require routing, authentication, firewall policy, inspection, and logging knowledge. Keep version context visible in your notes so that an older course does not silently become your primary authority for a current product.
Fortinet’s library contains self-paced courses and technical training, including material covering firewall policies, authentication, HA, SSL VPN, site-to-site IPsec VPN, Security Fabric, security profiles, logging, monitoring, and related administration tasks. Use course descriptions to locate foundations, then validate current behavior in the applicable product documentation and lab environment.
How can you build a realistic lab when no remote lab is provided?
Fortinet states that there is no remote lab available for preparing for the FCX practical exam and suggests using Fortinet VMs to create an environment for testing configurations and exploring the solutions included in the exam. The practical response is to build a repeatable topology, deliberately introduce faults, and preserve evidence of how each fault was diagnosed.
Create a topology that supports reasoning
A useful environment should let you examine more than a single firewall screen. Include the management, logging, identity, routing, VPN, and security-policy relationships that your available licenses and VMs support. The exact topology will vary by access and region; the objective is to practice design choices and investigation methods, not to reproduce a secret exam environment.
For each lab, begin with a short requirement such as redundant connectivity, authenticated access, centralized policy administration, or protected application traffic. Draw the intended path before configuring it. Then test the normal path, a failover path, and at least one intentionally broken dependency.
Practice troubleshooting in a fixed order
Use a consistent diagnostic sequence: clarify the intended traffic or identity flow, confirm interfaces and addressing, inspect routing and VPN state, verify policy and NAT selection, check authentication and security-profile behavior, review relevant logs, and test the corrected path. The order can change when evidence points elsewhere, but a repeatable method reduces random changes.
Keep a fault log for every exercise. Record the symptom, the first incorrect observation, the command or interface used to verify it, the correction, and the regression test. This converts lab time into reusable troubleshooting knowledge and exposes features you only recognize by name.
Consider the NSE 8 Immersion carefully
Fortinet offers a 2-day NSE 8 Immersion course that simulates a practical-exam environment with a full-featured topology and configuration exercises. Fortinet also states that the Immersion updated for the NSE8_880 exams will be available after Q3 2026. Confirm the currently offered version and schedule before treating the course as part of your plan.
The Immersion is best used after you understand the fundamentals. Taking it too early can turn the exercise into guided configuration copying. If you attend, use the experience to identify weaknesses in design explanation, change control, cross-product troubleshooting, and time allocation, then return to independent labs.
What study sequence works for a complex practical assessment?
Use a dependency-first sequence: verify eligibility, establish product foundations, integrate the products, troubleshoot deliberately, and finish with timed design-and-repair exercises. This sequence prevents a common error—spending the final study period on isolated commands while remaining weak at the cross-product decisions the Core Practical Exam is designed to assess.
Phase 1: Confirm the target and baseline
First, confirm that your target is the current Core Practical Exam rather than the discontinued NSE8_812 written exam. Verify the active NSE 4, NSE 5 or NSE 6, and matching NSE 7 prerequisites. Then inventory your current experience with FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator, routing, VPNs, identity, HA, and security inspection.
Create a gap list based on tasks you can perform without documentation, tasks you can perform only with documentation, and tasks you cannot yet explain. This baseline determines whether you need a foundation course, product-specific reading, more lab access, or scenario practice.
Phase 2: Refresh the product and network foundations
Study the products and features in dependency order. Begin with network flow, routing, policy evaluation, NAT, inspection, and identity. Add management, logging, and HA so that you can see how configuration changes are distributed, monitored, and recovered. Use short configuration exercises to confirm each concept rather than reading passively.
At the end of this phase, explain a complete service path from source to destination. Include where identity is established, where the route is selected, where policy and NAT are applied, where inspection occurs, and where the event should appear in logs. If you cannot explain the path, keep building the foundation.
Phase 3: Integrate and break the design
Combine capabilities into multi-component scenarios. Add an HA event to a connectivity design, an authentication dependency to a policy, a logging failure to an incident workflow, or a routing change to a VPN overlay. Make one controlled change at a time, observe its effect, and revert it cleanly.
Avoid treating troubleshooting as a collection of lucky commands. State a hypothesis before testing it. If the hypothesis is wrong, record which observation disproved it. The skill being developed is disciplined fault isolation, which is more transferable than memorizing a diagnostic command sequence.
Phase 4: Rehearse the task types
The current Core Practical Exam uses hands-on configuration, troubleshooting, drag-and-drop, and multiple-choice task types. Use official sample material where available to understand the style, but do not confuse sample questions with a complete syllabus or a source of live exam content.
For hands-on work, practice producing a correct configuration and verifying it. For drag-and-drop tasks, focus on relationships and sequence: which component performs an action, what dependency comes first, and what evidence confirms the result. For multiple-choice questions, eliminate options that contradict the stated network behavior instead of relying on keyword recognition.
Phase 5: Decide whether you are ready to schedule
Schedule only when your lab results show consistent performance across the major domains and products, including unfamiliar combinations. A good readiness review asks whether you can design a solution from requirements, explain trade-offs, diagnose a fault from evidence, and recover from a mistaken change without losing the original objective.
Do not use a high score on unofficial practice questions as the sole booking signal. Unofficial material may be outdated, incomplete, or unrelated to the current practical assessment. Readiness should be based on demonstrated configuration and troubleshooting ability against the official topic scope.
Which study mistakes waste the most time?
The most damaging mistakes are targeting the discontinued written exam, studying product features in isolation, relying on dumps, and postponing troubleshooting until the end. Each mistake produces a false sense of readiness because recognition is easier than designing, configuring, verifying, and repairing a complex Fortinet environment.
Mistake: treating the old written exam as the current path
Old references to NSE8_812 or NSE 8 Written (800) can lead you toward the wrong objectives and booking process. Correct this immediately by checking the current requirements and Core Practical Exam pages. The written exam’s former delivery information should not be used to infer the current Core delivery method.
Mistake: memorizing commands without understanding state
A command is useful only when you know what question it answers. When studying, pair every command or interface view with an observation: route selected, session synchronized, policy matched, certificate accepted, tunnel established, log received, or failover completed. This makes the tool part of a diagnostic model rather than a memorized list.
Mistake: ignoring cross-product behavior
A correct FortiGate configuration can still fail if FortiManager policy handling, FortiAnalyzer logging, FortiAuthenticator identity, routing, or HA state is wrong. Include the surrounding systems in your test cases. Ask what should happen when a dependency is unavailable and how you would prove the answer from available state and logs.
Mistake: using exam dumps as a study plan
Exam dumps and leaked-question claims are not a reliable or appropriate preparation method. They may be inaccurate, violate exam rules, and encourage memorization instead of the design and troubleshooting capability the current assessment measures. Use official sample questions for orientation and spend the main study effort on documentation, training, and legitimate lab work.
Mistake: forgetting the second practical exam
Passing the Core exam does not complete the NSE 8 certification. Fortinet requires one Elective Practical Exam within 1 year of passing the Core, and the Elective must be passed to obtain the certification. Choose an elective direction early enough to build relevant product depth rather than treating it as an administrative afterthought.
How is the current Core exam delivered and scheduled?
Fortinet’s current Core exam page lists the exam format as onsite at selected Fortinet offices and events, in English, with the number of tasks and appointment time to be communicated per exam. The requirements page states that the Core exam is onsite only after July 15, 2026. Confirm availability and appointment details through Fortinet before making travel or leave arrangements.
Do not carry over old Pearson VUE information
Fortinet previously documented NSE 4–8 technical written exams as available at Pearson VUE testing centers or through OnVUE online proctoring. That information belongs to the written-exam booking process and should not be treated as the current Core Practical Exam format. The current Core page and requirements article take priority for this decision.
The current NSE 8 certification page distinguishes Core availability from Elective availability: it lists the Core as onsite at selected Fortinet offices and events, while Elective Exams are listed as onsite or online proctored by ProctorU. If you are booking an elective, verify its specific appointment process separately.
Review cost information at the point of purchase
The supplied Fortinet pricing information lists NSE 8 Practical Exams at US$800, with tax not included, and separately lists the NSE 8 Recertification Exam at US$400. Pricing and program notices are time-sensitive. Confirm the current fee, payment rules, and whether a voucher applies to the assessment you intend to take before purchasing.
Do not assume a Pearson VUE voucher can be transferred to a recertification assessment or another assessment type. Fortinet states that vouchers purchased for Pearson VUE Exams cannot be used for Recertification Assessments, and vouchers purchased for Recertification Assessments cannot be used for Pearson VUE Exams.
What happens after an unsuccessful attempt?
Fortinet lists a 30-day waiting period between unsuccessful attempts for the current Core Practical Exam. It also states that exam grade acknowledgment and training-transcript updates can take 30 days. Plan any retake around that waiting period and use the interval to address specific diagnostic weaknesses rather than repeating the same lab routine.
The Core exam uses pass-or-fail scoring, while partial credit is available for selected tasks and incorrect answers do not receive deductions. Treat each task as an opportunity to earn the available credit: complete the parts you understand, verify carefully, and avoid abandoning a partially completed configuration merely because one element is uncertain.
How should you choose an NSE 8 Elective?
Choose the elective that matches the systems you operate or can legitimately lab: Secure Networking, Application Security, or Security Operations. The Core establishes broad complex-network capability, while the elective lets you develop a deeper solution focus. Confirm the current elective scope and delivery details on the Fortinet certification pages before committing.
Secure Networking
Secure Networking is a logical choice when your work centers on FortiGate connectivity, SD-WAN, VPN, routing, switching, access, and network enforcement. Build depth by designing resilient paths, validating route and policy decisions, testing identity-aware access, and troubleshooting failures that cross network and security boundaries.
Application Security
Application Security suits candidates whose role involves protecting and maintaining web applications. The Training Institute library describes relevant Fortinet learning around deploying, configuring, managing, monitoring, protecting, and ensuring the availability of web applications. Confirm the current elective’s product and version scope rather than relying on a similarly named older course.
Security Operations
Security Operations is appropriate when your work emphasizes centralized logging, analytics, incident analysis, threat identification, and operational response. Practice moving from an event to an investigated cause and then to a validated corrective action. Make sure the lab includes both detection evidence and the network or identity context needed to interpret it.
What should you do during the final review?
Use the final review to consolidate decisions and evidence, not to open a large collection of new topics. Revisit the official topic list, test your weakest cross-product workflows, and rehearse a calm troubleshooting method. Keep version notes and account details ready, while avoiding unsupported assumptions about task count or appointment time.
A practical final checklist
Confirm that the target is the current Core Practical Exam, not NSE8_812. Verify active prerequisites and matching NSE 7 track. Review FortiGate, FortiManager, FortiAnalyzer, and FortiAuthenticator roles in the published product scope. Rehearse routing, VPN, policy, identity, HA, logging, management, and inspection scenarios. Check the official appointment instructions and venue requirements.
Prepare a one-page mental model for each major scenario: requirement, topology, expected traffic or identity flow, configuration dependencies, validation evidence, and likely faults. This is more useful than a last-minute list of isolated facts because it supports both design tasks and troubleshooting tasks.
What to do after a failed attempt
Use the result and your own task log to identify the failure category: design, configuration accuracy, troubleshooting method, cross-product integration, or task execution. Respect the 30-day waiting period listed by Fortinet, then rebuild the weakest category with new scenarios. Do not simply reread the same notes or purchase another set of purported exam questions.
What should you do next?
Start by abandoning the assumption that “Written (800)” is the current NSE 8 route. Verify your prerequisites, open the current Core Practical Exam page, download or review the official NSE 8 Public Handbook, and map its preparation guidance to a lab-based study plan. Only then should you decide whether training, VM access, immersion, or an appointment is the next sensible investment.
Recommended next actions
1. Confirm the current exam name and status in the Fortinet Training Institute.
2. Check active NSE 4, NSE 5 or NSE 6, and matching NSE 7 certifications.
3. Read the official Core exam topics and identify gaps by domain.
4. Build a study matrix for design, configuration, verification, and troubleshooting.
5. Create or obtain a legitimate Fortinet VM environment where permitted.
6. Use official training and product documentation, keeping product versions explicit.
7. Select an Elective direction before completing the Core so the wider certification timeline is realistic.
8. Confirm delivery, fee, scheduling, and administrative requirements immediately before booking.
Conclusion
For a candidate searching for Fortinet NSE 8 Written (800), the most important preparation decision is also the simplest: do not prepare for the discontinued written route as though it were the current certification assessment. The active NSE 8 path is built around the Core Practical Exam, an Elective Practical Exam, active prerequisites, and demonstrated ability to design, configure, and troubleshoot complex Fortinet networks. Use the official requirements and topic pages to validate eligibility, then replace memorization with version-aware labs and evidence-led troubleshooting.
Related exams
- FCP_FAC_AD-6.5 exam — FCPFortiAuthenticator 6.5 Administrator
- FCP_FCT_AD-7.4 exam — Fortinet NSE 6FortiClient EMS 7.4 Administrator
- FCP_FGT_AD-7.4 exam — FCP - FortiGate 7.4 Administrator
- FCP_FWF_AD-7.4 exam — FCPSecure Wireless LAN 7.4 Administrator
- NSE4_FGT_AD-7.6 exam — Fortinet NSE 4FortiOS 7.6 Administrator
- NSE5_FNC_AD_7.6 exam — Fortinet NSE 5FortiNAC-F 7.6 Administrator
