INTERNSHIP - FortiGate FW Rules Automation (academic year 2025-2026)

In modern network environments, segmentation is a crucial part of any security policy. Within our organization, we apply a Secure Network Design, where network segments are strictly separated and communication is only allowed based on explicit firewall rules. In large and distributed Fortinet environments, traffic between source and destination often passes through multiple FortiGate devices. Manually configuring firewall rules on each of these devices is error-prone, time-consuming, and difficult to scale. This internship project focuses on fully automating these configurations, so that a request for traffic between two endpoints automatically results in the correct implementation of all necessary rules — distributed across the appropriate FortiGates, while respecting the Secure Network Design.

• Analyze the existing Secure Network Design to gain insight into segmentation and firewall placement.
• Define the logic to determine where rules should be applied, based on routing and topology.
• Map out the FortiGate environment: which devices are in use, what are their roles, and how do they communicate?
• Explore automation technologies such as FortiManager API, Ansible, and Terraform, and choose a suitable framework or scripting language.
• Based on input (e.g., source, destination, protocol), develop a flow: from route determination to configuration and deployment of policies.
• Ensure all rules comply with the Secure Network Design and implement validation to prevent errors.
• Finally, develop a Proof of Concept in a test environment, simulating traffic and automatically deploying and testing policies.

• Are you studying a Bachelor's in Applied Computer Science or a Master's in Computer Science? Check!
• You have a passion for networking and security.
• You have a basic knowledge of system and network administration.
• You’re excited to take on this challenging internship.