Skip to content
Practical Network Engineering

FROM NETWORKING FUNDAMENTALS TO ENTERPRISE ENGINEER.

Learn the fundamentals. Build your first FortiGate.
Connect a branch to HQ.
Then solve real network incidents.

+ Real CLI workflows+ Live configuration state+ Business-impact incidents

New to networking? Start with Fundamental Networking — free, no account needed. Already working with FortiGate? Step straight into the simulator.

KIWITUT / NETWORK CONTROLOPERATIONAL
INTERNETUPLINKFGT-HQEDGE / COREBRANCH AVPN UPBRANCH BVPN UPUSERS24 SESSIONSSERVERSREACHABLE
KIWITUT / LIVE NETWORK
TRAFFIC NOMINAL / PACKET LOSS: 0%
STATUS OPERATIONALSESSIONS 190PACKETS/SEC 1321VPN 8 / 8LATENCY 18 msLAST EVENT 14:32:07
The Journey

FROM NETWORKING FUNDAMENTALS TO ENTERPRISE ENGINEER.

One clear path, whichever way you enter: learn the basics first, or dive straight into operating a FortiGate network.

01FUNDAMENTALSThe practical networking basics behind every network.
02BUILDConfigure your first FortiGate from scratch.
03CONNECTBuild a branch office and link it to HQ.
04TROUBLESHOOTDiagnose failures and prove the recovery.
05OPERATEOwn enterprise incidents end to end.
New to networking?

Start with Fundamental Networking. Beginner-friendly, interactive, no account needed.

Start Learning  ->
Already working with FortiGate?

Skip straight to real missions and incidents inside the simulator.

Enter The Simulator  ->
Practical Network Engineering

TRAIN BY SOLVING REAL NETWORK PROBLEMS.

Investigate the failure. Find the root cause. Fix it. Prove the recovery — free missions first, the full simulator in KiwiTut Pro.

01FREE PRACTICE

Play the real first-login and management missions — open now, no account needed.

Start Free Mission  ->
02NSE 4 PRACTICAL ENGINEERING

A structured D1 → D5 progression from troubleshooting to CLI mastery.

Browse the paths  ->
03FORTIGATE INCIDENTS

Solve realistic failures: VPN, SD-WAN, HA, exposure, routing. Live board below.

View incidents  ->
04KIWITUT PRO

The full hands-on simulator. Operate the network, own the recovery.

Request Beta Access  ->
The Operating Model

THIS ISN’T A COURSE.
IT’S A NETWORK ENGINEERING SIMULATOR.

Observe the system, understand its state, make the safest change, and return the business to normal.

01OBSERVERead traffic, logs and telemetry.
02UNDERSTANDDetermine what the network is doing.
03DECIDEChoose the safest action.
04CHANGEApply the intended configuration.
05VALIDATEProve the service recovered.
06RECOVERReturn the business to normal.
FortiGate Practice & Reference

PLAY. INVESTIGATE. OPERATE.

Start with real FortiGate missions inside the KiwiTut simulator. No account required.

Private Beta

Access the full KiwiTut Network Simulator and additional engineering experiences.

FGT-HQ / OPERATOR SESSION
FGT-HQ # diagnose vpn tunnel listname=HQ_BRANCH_01 status=up incoming=1284 outgoing=1279FGT-HQ # get router info routing-table all10.20.40.0/24 via VPN_BRANCH_01FGT-HQ # diagnose debug flowpolicy=17 action=accept session=88421traffic verified / recovery proven
01DIAGNOSE
02DECIDE
03CHANGE
04VALIDATE
05RECOVER
06PROVE
Live Incident Board

REAL NETWORKS FAIL.
YOU MAKE THE CALL.

INC-2047 / P1

Branch users cannot reach the internet.

42 users. VPN degraded. High business impact.

INC-2051 / P1

VPN tunnel is down.

HQ branch traffic is failing between policy and selectors.

INC-2059 / P2

Voice traffic is degrading.

SD-WAN path health is changing under load.

INC-2064 / P1

Primary firewall has failed.

Secondary active. Session continuity requires proof.

INC-2070 / P1

Public service is exposed.

A VIP and policy decision is putting the wrong host at risk.

INC-2078 / P2

Traffic is taking the wrong path.

Routing state does not match the business intent.

Incident In Progress

FROM BUSINESS SYMPTOM TO PRODUCTION RECOVERY.

One connected incident path. The active stage follows the engineer’s work.

01BUSINESS SYMPTOM42 users cannot reach HQ.
02LIVE EVIDENCEVPN degraded. Packet loss detected.
03DIAGNOSERead the live state.
04INVESTIGATEInspect the failing route.
05ENGINEERING DECISIONChoose the safe recovery.
06CHANGERestore the affected path.
07VALIDATEProve service recovery.
08PRODUCTION RECOVERYBranch B operational.
Incident Doors

WHEN THE NETWORK FAILS, YOU KNOW WHAT TO DO.

01 / BRANCH CONNECTIVITY42 USERS AFFECTEDVPN DOWN / objective: investigate the path ->
02 / VOICE DEGRADATIONLATENCY 247 msPACKET LOSS 12% / objective: diagnose ->
03 / FIREWALL FAILURETRAFFIC BLOCKEDPOLICY CONFLICT / objective: investigate ->
04 / HA FAILOVERPRIMARY NODE FAILEDSECONDARY ACTIVE / objective: validate ->
05 / NAT FAILUREPUBLIC SERVICE UNREACHABLESESSION COUNT NORMAL / objective: trace ->
06 / ROUTING FAILUREWRONG PATH SELECTEDTRAFFIC DEVIATING / objective: resolve ->
System Ready

YOUR FIRST INCIDENT IS WAITING.

Stop learning networking from the sidelines. Start operating.

Start Free MissionRequest Beta Access  ->
SYSTEM READY    INCIDENT QUEUE: 03    ACCESS BY REQUEST