Fortinet Certification Changes in 2026: Why NSE 1-8 Is Back

Fortinet spent three years training the security industry to say FCP, FCSS, and FCX. On July 15, 2026, it quietly reversed course and brought back the plain NSE 1 through NSE 8 numbering that the 2023 rebrand had replaced. If you have been putting off a Fortinet exam because the naming felt like it was in flux, or you already hold one of the retired credential names, the practical questions are the same: what actually changed, what happens to the certification you already earned, and is any of this still worth pursuing.

Here is what the change really means, based on Fortinet’s own transition documentation and what training providers tracking the rollout have reported.

Why Fortinet Brought Back NSE 1-8 After Only Three Years of FCP and FCSS

Back in 2023, Fortinet retired its long-running NSE numbering in favor of five named tiers: Fortinet Certified Fundamentals (FCF), Associate (FCA), Professional (FCP), Solution Specialist (FCSS), and Expert (FCX). The idea was to make the program read more like a job-role ladder and less like a list of exam numbers.

It did not stick. According to reporting on the July 2026 change, Fortinet’s own certification community pushed back on the named-tier system almost from the start, arguing the original NSE numbers were clearer and easier to track across a career. Fortinet listened. As of July 15, 2026, FCF, FCA, FCP, FCSS, and FCX are retired as active certification names, replaced by an expanded eight-level NSE structure that keeps five broad skill tiers (Fundamentals, Associate, Professional, Specialist, Expert) but labels them with numbers again.

It is a rare move for a certification vendor to publicly reverse a rebrand this quickly. Fortinet is not the only network security vendor rewriting its certification ladder this year either. Palo Alto Networks retired its PCNSE and PCNSA exams for a new role-based framework earlier in 2026, so candidates across the security certification space are dealing with more structural change than usual right now.

What Actually Changed on July 15, 2026

The mechanics matter more than the branding here, so it helps to separate what the old system looked like from what replaced it.

The Old Five-Tier Named System

Under the 2023 to 2026 structure, each named tier corresponded to a rough skill level:

• FCF (Fundamentals): entry-level cybersecurity awareness, often free, aimed at newcomers
• FCA (Associate): basic operational familiarity with FortiGate and core Fortinet tools
• FCP (Professional): hands-on configuration and administration skills, the most commonly pursued working credential
• FCSS (Solution Specialist): deep, product-specific expertise for engineers already working with Fortinet deployments
• FCX (Expert): the capstone credential, requiring significant real-world experience

These names still appear on transcripts and resumes across the industry, so recruiters and hiring managers screening candidates over the next couple of years will likely see both the old and new labels in circulation.

The New Eight-Level NSE Structure and Four Specialization Tracks

The rebuilt program, laid out on Fortinet’s own training and certification site, runs NSE 1 through NSE 8. NSE 1 through NSE 4 form a shared foundation, ending with NSE 4 as the first proctored, paid exam (FortiOS configuration and administration). From NSE 5 through NSE 7, the path splits into four specialization tracks: Secure Networking, Security Operations, Cloud Security, and SASE. Candidates choose a track rather than following one generic ladder, which is a real structural change, not just a renumbering. NSE 8 sits above all four tracks as the single expert capstone.

Fortinet also expanded what counts as certification-eligible beyond the core NSE ladder, adding two standalone industry certifications that sit outside the main eight-level structure entirely:

• MSSP Security: aimed at engineers working inside managed security service provider environments rather than a single enterprise
• OT Security: focused on operational technology and industrial control system environments, split out from the general security track for the first time

Both reflect how much of Fortinet’s real deployment base runs in managed-service and industrial environments rather than traditional enterprise IT alone.

NSE 8 Exam Format: Practical Modules Replace the Old Written Requirement

The expert tier changed shape too. Previously, earning an initial FCX required a written exam. Under the new structure, initial NSE 8 certification requires passing two practical, hands-on exam modules instead, a Core module plus one Specialization module tied to a chosen track, only after completing the NSE 4 through 7 prerequisites in that track. The written exam has not disappeared entirely; it now applies specifically to recertification rather than first-time certification, and every NSE credential, including NSE 8, carries a two-year validity window before renewal is required. Pricing has also been standardized across the new structure: industry training providers tracking the rollout report single-exam certifications priced at $400, with two-module exams like NSE 8 priced at $200 per module.

How Your Existing Certification Maps to the New System

If you already hold one of the retired named certifications, Fortinet’s published transition mapping assigns you an equivalent NSE-numbered credential automatically. No new exam is required for the mapping itself.

There is one notable carve-out. Candidates who passed the NSE 6 OT Security exam within two years before the transition do not get folded into the general NSE 6 mapping. Instead, they receive a standalone OT Security industry certification with its own two-year validity clock starting from the original exam date, reflecting how Fortinet has pulled operational-technology security out as its own specialization rather than a subtrack.

Who Should Actually Pay Attention to This Right Now

Not everyone needs to act. The transition is largely automatic for people who already hold a Fortinet credential, but a few groups have real decisions to make.

You’re Mid-Track and Currently Studying for FCP or FCSS

Your study material still applies. The underlying exam content for FortiOS administration, FortiAnalyzer, FortiManager, and similar product exams has not been thrown out, only the label on the certification you receive changes. Exams you sit after July 15, 2026 will simply issue an NSE-numbered credential instead of the old named one.

You’re New to Fortinet Certification Entirely

Starting fresh is arguably simpler now. There is no need to learn a naming system that Fortinet itself just abandoned. Begin at NSE 4 if you already have working FortiGate experience, or start at NSE 1 through 3 if you are building foundational knowledge first.

You Already Hold FCX or Another Expert-Level Credential

Your NSE 8 mapping happens automatically with matching dates, so there is nothing to file or request. The bigger consideration is recertification: since the written exam is now specifically a recertification requirement rather than an initial-certification path, budget study time differently than you would have under the old FCX renewal process.

What Fortinet Certification Is Actually Worth in 2026

Restructuring aside, the underlying reason to pursue a Fortinet credential has not changed: demand for people who can actually run FortiGate, FortiManager, and SD-WAN deployments in production. Current national listings for Fortinet-related roles on ZipRecruiter run from roughly $96,000 to $169,000 as of July 2026, a wide range that reflects everything from junior support roles up through senior security architecture positions. Compensation trackers that focus specifically on NSE 8 holders put that top credential in the $130,000 to $170,000 band, consistent with its position as the program’s expert capstone.

A few factors are driving that demand beyond general cybersecurity hiring growth:

• Continued enterprise migration toward SASE (Secure Access Service Edge) architectures, one of the four new NSE 5-7 specialization tracks
• Growing separation between network security and dedicated security operations roles, reflected in Fortinet splitting those into distinct tracks rather than one generalist path
• Expanding OT security requirements in manufacturing, utilities, and critical infrastructure, which is exactly why Fortinet pulled OT Security out as its own standalone credential
• Steady FortiGate firewall market share, which keeps FortiOS administration skills relevant regardless of what the certification is named

None of that guarantees a raise or a new job. It does mean the skills the exams test for map to roles companies are actively hiring for, which is a more durable signal than the certification name on its own.

Choosing Where to Start on the New NSE Path

With the renumbering settled, the practical question becomes which level and track to target first.

NSE 1 Through 4: Shared Foundation

NSE 1 through 3 cover general security awareness and are typically free or low cost, aimed at people who need baseline credibility before an employer will fund further training. NSE 4, covering FortiOS configuration and administration, is the first proctored paid exam and the most commonly required credential in FortiGate-heavy job postings. DirectCertify’s own Fortinet exam catalog currently includes NSE4_FGT-7.2 practice material built around this exact exam.

NSE 5 Through 7: Pick a Track

This is where the four specialization tracks diverge. Someone targeting a managed security operations role would look toward the Security Operations track, while someone focused on hybrid or multi-cloud firewall deployments would head toward Cloud Security instead. If you are still deciding between cloud-focused security paths across vendors rather than committing to Fortinet specifically, our comparison of cloud security certification options for 2026 covers how Fortinet’s approach stacks up against AWS, Google Cloud, and CompTIA alternatives. On the exam-prep side, current NSE 5-7 material in DirectCertify’s catalog spans products like FortiAnalyzer, FortiManager, SD-WAN, and enterprise firewall, reflecting the same track split Fortinet just formalized.

NSE 8: Only After the Track Prerequisites

NSE 8 is not a shortcut credential. It requires completing the NSE 4 through 7 prerequisites in a chosen track first, then passing a Core practical module and one Specialization practical module, both hands-on rather than multiple choice. Fortinet is not alone in tightening its top-tier exam around practical skill demonstration. Cisco’s own certification ladder, covered in our breakdown of the CCNA-to-CCIE restructuring, follows a similar pattern of leaning harder on hands-on validation at the expert level.

Before sitting for any exam under the new structure, it is worth doing three things:

1. Check whether a credential you already hold has been automatically remapped, using Fortinet’s published transition table
2. Confirm which of the four NSE 5-7 tracks actually matches the role you’re targeting, rather than defaulting to whichever exam has the most study material available
3. Verify current exam codes and prerequisites directly on Fortinet’s training site before registering, since product versions (like the 7.2 to 7.6 exam revisions already appearing in current catalogs) continue to update independently of the certification-level renumbering

Worth being direct about: DirectCertify is an independent exam-prep provider, not Fortinet itself, and nothing here is sponsored or reviewed by Fortinet. Transition rules, exam codes, and pricing move on Fortinet’s own timeline, so treat the specifics above as a snapshot and confirm anything you’re about to act on with Fortinet’s official training site first.

Fortinet Certification Changes: Quick Answers