On 2026-07-15, Fortinet retired the FCF, FCA, FCP, FCSS, and FCX certification names and brought back the classic NSE levels, now expanded from 5 tiers to 8. If you held an active FCP at the time, you didn’t lose anything. Fortinet mapped it to the matching NSE certification automatically, with the same expiry date.
This is the second Fortinet NSE naming change in three years. Fortinet killed the NSE 1-8 naming in October 2023, replaced it with FCF/FCA/FCP/FCSS/FCX, and reversed course in 2026. The community asked for the old levels back, and Fortinet listened.
This guide covers what changed, what happened to existing FCP and FCSS holders, and what’s new for anyone booking an NSE 4 exam today, using Fortinet’s official transition rules published on the Fortinet Training Institute helpdesk.
Update since the cutover: a new NSE 4 – FortiOS 8.0 Administrator exam is scheduled for early October 2026, the first version bump since the program relaunched. If you’re deciding which exam to book right now, see the section below before you pick 7.6 or wait.
What Changed in the Fortinet NSE Certification Program on 2026-07-15
Four things changed at once:
FCF, FCA, FCP, FCSS, and FCX were retired as certification names. Existing certifications stayed valid until their normal expiry dates.
The program expanded from 5 levels to 8 NSE levels. NSE 1 through NSE 4 form the foundation. NSE 5, 6, and 7 split into four specialization tracks. NSE 8 stayed the expert capstone.
Four tracks were kept: Secure Networking, Security Operations, SASE, and Cloud Security. Each track gets its own certifications at levels 5, 6, and 7.
Two industry certifications launched: OT Security and MSSP Security.
Fortinet also updated recertification rules across the program. NSE 8 moved from a 3-year to a 2-year validity period and now runs on a recertification points system: 200 points every 2 years, earned by passing exams (50 points for an NSE 4/5/6 pass, 75 for an NSE 7 or Industry cert pass, 200 for the NSE 8 practical itself).
Think of it like a building renovation where the tenants kept their leases. The signs on the doors changed, the floor plan gained three new storeys, but your credential kept living where it always did, until its normal renewal date.
Old Names vs New Names at a Glance
| Until 2026-07-14 | From 2026-07-15 |
|---|---|
| FCF (Fundamentals) | NSE 1, NSE 2, NSE 3 |
| FCA (Associate) | Folded into foundation levels |
| FCP (Professional) | NSE 4, NSE 5 (by track) |
| FCSS (Solution Specialist) | NSE 6, NSE 7 (by track) |
| FCX (Expert) | NSE 8 |
| – | Industry Certifications: OT Security, MSSP Security |
Source: Fortinet Training Institute helpdesk, NSE program expansion.
Why Did Fortinet Bring Back NSE Levels?
Recognition, plain and simple. The NSE 1-8 ladder ran from 2015 to 2023 and hiring managers knew it cold. “NSE 4” on a resume meant something specific: this person can run FortiGate firewalls in production.
The 2023 switch to FCF/FCA/FCP/FCSS/FCX confused recruiters and candidates alike. Job postings kept asking for “NSE 4” years after the name officially died. Most people never stopped saying it.
So Fortinet went back to the ladder everyone already spoke, and used the reset to add granularity. Instead of one broad FCP tier covering everything from FortiGate basics to FortiAnalyzer, the new structure separates NSE 4 (core firewall) from NSE 5 (product specialization within a track). That’s a clearer signal for employers and a cleaner roadmap for candidates.
The New 8-Level NSE Structure
Here’s how the levels stack from 2026-07-15:
| Level | Role | Tracks |
|---|---|---|
| NSE 1-3 | Cybersecurity fundamentals | None (general) |
| NSE 4 | Core firewall professional (FortiOS) | None (general) |
| NSE 5 | Product administrator | Secure Networking, Security Operations, SASE, Cloud Security |
| NSE 6 | Advanced specialist | Same four tracks |
| NSE 7 | Architect level | Same four tracks |
| NSE 8 | Expert (written + practical) | All tracks combined |
| Industry | OT Security, MSSP Security | Cross-track |
The four tracks aren’t new. Fortinet renamed them back on 2025-10-15, when Network Security became Secure Networking and Public Cloud Security became Cloud Security. What was new in July was the level structure sitting on top of them.
A few exam-to-level mappings worth knowing, straight from Fortinet’s transition table:
- FortiGate Administrator or FortiOS Administrator exam → NSE 4
- FortiSwitch, Secure Wireless LAN → NSE 5 Secure Networking
- FortiAnalyzer Analyst, FortiSandbox → NSE 5 Security Operations
- FortiSASE and SD-WAN Core → NSE 5 SASE
- FortiWeb, FortiADC, FortiAppSec → NSE 5 Cloud Security
What Happened to Your FCP Certification?
Active certifications converted automatically, with no paperwork, no extra exam, and no fee.
The rules Fortinet published worked like this:
Active FCP or FCSS on 2026-07-15? You were mapped to the matching NSE certification(s) based on the exams you’d passed. Issue and expiry dates carried over from your latest exam pass date.
Passed exams on or after 2024-07-15 but never completed a full certification? You still got the matching NSE award for each qualifying exam. Single exams now convert to certifications on their own.
Exams passed before 2024-07-15 with no active certification? Those didn’t qualify for an automatic NSE award. The 2-year lookback window mattered.
That second rule was a genuine upgrade. Under the FCP system, you needed a core exam plus an elective to earn the certification. Under the new mapping, one passed exam can equal one NSE certification.
A common real-world pattern: a network admin passes the FortiGate Administrator exam, never gets around to the elective, and ends up with an exam pass but no certification to show for it. If that pass landed on or after 2024-07-15, the cutover converted it to a full NSE 4 certification automatically, expiry dated two years from the exam date, no Pearson VUE visit required. The people this didn’t help were the ones whose last qualifying pass landed before 2024-07-15 with no active FCP: for them, the only path was booking the current NSE 4 exam and passing it fresh.
Stacking worked too. Fortinet’s own worked examples show a candidate with FCP Secure Networking plus a Secure Wireless LAN exam receiving NSE 4 and NSE 5 Secure Networking together. Multiple qualifying exams meant multiple NSE awards.
The NSE 4 Exam: FortiOS 7.6, and What’s New in October 2026
The exam most people book is NSE 4 – FortiOS 7.6 Administrator (NSE4_FGT_AD-7.6). This one went through its own rename cycle ahead of the July cutover:
- 2025-10-15: FCP – FortiGate 7.6 Administrator was renamed to NSE 4 – FortiOS 7.6 Administrator. Same topics, same difficulty, new name and code.
- 2025-12-31: The legacy FCP_FGT_AD-7.6 exam code was retired.
- Since 2026-01: NSE4_FGT_AD-7.6 has been the current FortiGate admin exam.
The content didn’t change with the rename. The exam tests five domains: deployment and system configuration (including FGCP high availability), firewall policies and authentication (local, RADIUS, LDAP), content inspection, routing (static routes and SD-WAN), and VPNs (IPsec and SSL).
What’s new as of this month: Fortinet has scheduled an NSE 4 – FortiOS 8.0 Administrator exam for early October 2026, the version jumping straight from 7.6 to 8.0. Fortinet’s own release pattern typically keeps the previous exam version bookable for about four months after a new one ships, so the 7.6 exam isn’t disappearing overnight, but if you’re starting your prep from scratch this month, check the Training Institute’s current exam list before you commit study time to one version over the other. If you’re already deep into 7.6 prep, finishing on that version is still the faster path: the content overlap between adjacent FortiOS versions is substantial, and waiting costs you certified status for no real benefit.
How Did the Transition Itself Go?
Smoothly, by every account available after the fact. Fortinet paused exam delivery from 2026-07-13 to 2026-07-15 for the system cutover, candidates with bookings in that window rescheduled, and the automatic mapping applied as published with no reported reversals or widespread mapping errors.
The one real risk in the transition window was letting a certification lapse right before cutover day: the automatic mapping only applied to certifications active on 2026-07-15, so anyone whose FCP expired just before that date had to rely on the exam-lookback rule instead of the cleaner certification-to-certification mapping.
Key Dates: Fortinet Certification Transition Timeline
| Date | What Happened |
|---|---|
| 2024-07-15 | Lookback cutoff: exams passed from this date qualified for automatic NSE awards |
| 2025-10-15 | Exam renames: FCP FortiGate Administrator became NSE 4 FortiOS Administrator; tracks renamed |
| 2025-12-31 | Legacy FCP_FGT_AD-7.6 exam code retired |
| 2026-07-13 to 15 | Exam delivery paused for the transition |
| 2026-07-15 | FCF/FCA/FCP/FCSS/FCX retired; 8-level NSE program went live; automatic mapping applied |
| 2026-10 (early) | NSE 4 – FortiOS 8.0 Administrator exam scheduled to ship |
How Does This Compare to Other Vendor Certs?
Fortinet isn’t alone in reshuffling. Cisco is rolling out its own exam refresh, with CCNA v2.0 topic changes landing in February 2027, and the pattern is the same across the industry: clearer levels, more specialization, shorter validity windows.
If you’re choosing between vendor security paths, the calculus hasn’t changed. Fortinet dominates the mid-market firewall space, Cisco owns large enterprise. Plenty of senior engineers end up holding both.
Did my FCP certification expire on 2026-07-15?
No. Active FCP, FCSS, and other current certifications stayed valid until their normal expiry dates. On 2026-07-15 they were automatically mapped to the matching NSE certification with the same dates. No retest, no fee.
Is NSE 4 the same as the old FCP FortiGate Administrator?
Functionally, yes. The FortiGate Administrator (now FortiOS Administrator) exam maps directly to NSE 4 in the new program. The exam content, the FortiOS focus, and the difficulty are unchanged. Only the certification name and the structure around it changed.
Did I need two exams for NSE 4 like I did for FCP?
No. Under the new mapping, a single qualifying exam converts to its matching NSE certification. The old FCP model of one core exam plus one elective is gone. Electives like FortiSwitch or FortiAnalyzer now map to their own NSE 5 certifications by track.
What if I passed an exam before 2024-07-15 but never earned the certification?
That exam didn’t qualify for an automatic NSE award. The lookback window covers exams passed on or after 2024-07-15. The path forward is to book and pass the current NSE 4 exam, which earns NSE 4 directly.
Should I take the NSE 4 – FortiOS 7.6 exam or wait for FortiOS 8.0?
If you’re mid-prep on 7.6, finish on 7.6. The exam isn’t being pulled the moment 8.0 ships, and certified status now beats certified status later. If you’re starting fresh this month, check the Training Institute’s current exam list, since 8.0 just became bookable and the overlap window for 7.6 won’t last indefinitely.
Is NSE 8 still a 3-year certification?
No. NSE 8 moved to a 2-year validity period as part of the July 2026 changes, with a 200-point recertification requirement every 2 years instead of a flat retest.
Bottom Line
On 2026-07-15, Fortinet retired FCF/FCA/FCP/FCSS/FCX and relaunched the 8-level NSE program with four tracks plus OT Security and MSSP Security industry certifications.
Active certifications converted automatically with their original expiry dates. Nobody lost a credential.
Exams passed on or after 2024-07-15 converted to NSE awards even without a completed certification, a straight upgrade for single-exam holders.
The current NSE4_FGT_AD-7.6 exam carried the same content it had under the FCP name, and a FortiOS 8.0 version is now shipping this month as the first real update since the cutover.
For hands-on practice between now and exam day, SMEnode Labs’ FortiGate NSE4 Workbook pairs lab scenarios with the exam domains, and works with EVE-NG so you can break things safely before Pearson VUE gets involved. Our guide on adding a FortiGate VM to EVE-NG covers the lab setup itself if you’re starting from zero.
