Duration
5 days
Overview
This hands-on practical course ensures participants have the proficiency to monitor, analyse and troubleshoot issues in networks related to security equipment, appliances, policies and processes. Participants will be introduced to the overall concepts of security, and the need for a comprehensive security framework. Issues associated with commonly used security applications, services and devices will be discussed as well as selecting & configuring the appropriate tools to monitor, analyse and troubleshoot performance issues.
Note: We have fully kitted out labs with multiple scenarios & environments and unlike some other security programs, participants are not required to use their work laptop into a hostile environment.
You will be able to
- Diagnose issues related to network security, firewalls, IDS/IPS systems & proxies
- Identify & resolve performance issues caused by security processes
- Utilize a range of key monitoring & analysis tools
- Develop and utilize procedures for logging and auditing
- Apply structured procedures for collection, preservation & analysis of logs and tracefiles
Pre-requisite knowledge
- Good practical knowledge of computer networking, including the use of an analyser. This can be gained via Orbitage’s Certified IP Associate (CIPA) or an equivalent practical course
Course Outline
Overview of Cyber Security Landscape
- Goals of Information Security
- Common attack strategies & attack types
- Security & monitoring tools
- Cryptography & authentication
- Network vulnerabilities & exploits
- Security frameworks & standards
- Role of policies & procedures/SOP
- Business continuity & risk evaluation
- Next-generation security platforms
- Security & performance in virtualized/cloud environments
Baselining
- Review of critical security controls
- Mapping the network equipment & service flows
- Identifying KPIs and metrics
- Hardware/software Inventory & Auditing
- Review processes, services, rights & privileges
- Evaluate Performance & load measurements
Monitoring Networks & Systems
- Network Traffic
- Types of Network Traffic
- Monitoring and Packet Sniffing
- Protocol analysers & probe systems
- Network Monitoring Systems
- Network Platforms & Services
- VPN & secure remote access
- Network services & components and impact on performance
- Monitoring processes and server load
- Security Platforms
- Network and Host based Intrusion Detection Systems
- Deep packet inspection (DPI) & Lawful interception
- Incident Identification and Response
- Logs & Audit
- Types of logs
- Accessing & reviewing log files
- Logfile collection & preservation methodologies
- Configuring log settings
- Information security audits
- Logfile analysis
Firewall & IDS/IPS Systems
- Firewall architecture and operations
- Next Generation Firewalls
- Overview of typical topologies & device placement
- Firewall rule analysis/optimisation
- Intrusion detection systems (IDS/IPS)
- IDS/IPS resources, CVE databases & threat signatures
- Load & throughput impact of IDS/IPS
- Impact of QoS & policy control requirements
- Analysing traffic and server load
- System throughput and congestion analysis
- Systematic network & service rollback and restoration
- Optimising performance
Proxy Systems
- Proxy types, implementation & operation
- SSL Proxy/selective monitoring load & throughput impact
- System throughput and congestion analysis
- Systematic network & service rollback and restoration
- Optimising performance
Assessment & Certification
- Final Practical Assessment test & Certification Process
- Knowledge written assessment
- Practical “hands-on” assessment on a live network
- Participants will take the assessment individually
- Unique “live” network scenarios will be generated for assessment participants
- Assessment duration is 2 hours
Programme scope, delivery arrangements and suitability are confirmed during enquiry.