Duration
4 days
Overview
This Course is how to protect your infrastructure and protect your network by using network security technology such as Firewall, Proxy IDS/IPS and harden Operating system and services and Network device such as Routers/Switches and also how to manage your network with network monitoring tools to detect threats.
Objectives
After completing this course, delegates should be able to:
- To understand Information Security Hardening Concept
- To understand Network Infrastructure Security Design
- To understand and Implement Operating System Security
- To understand and Implement Network Devices Security
- To understand and Implement Security Monitoring Concept
- To understand and Implement Security Devices in Network Infrastructure
Who Should Attend
- Network and Systems Administrators
- Network and Systems Engineers
- Information Security Professional
Module 1: Network Threats
- Understand Network Attack
- Denial-of-service (DoS) Attacks
- Distributed denial-of-service (DDoS) Attacks
- Back door Attacks
- Spoofing Attacks
- Man-in-the-Middle Attacks
- Replay Attacks
- Password Guessing Attacks
- TCP/IP Attacks
- TCP SYN or TCP ACK Flood Attack
- TCP Sequence Number Attack
- TCP/IP Hijacking
- ICMP Attacks
- Smurf Attacks
- ICMP Tunneling
- Demo :Network Threats
Module 2: OS Hardening
- Role Supported by Server Core
- OU Design for Security Policies
- GPO Design for Security Policies
- Implementing a Security Baseline
- Local Security Policy
- Account Policy Best Practice
- Developing Good Auditing Policy
- User Rights Assignment
- Security Options
- Deploy Domain Level Security Policy using GPO
- LAB: Audit Microsoft with Penetration Testing tools
- LAB: Deploy Security Policy using GPO and Microsoft Security toolkit
- LAB: Hardening Windows server 2008 & 2012
- LAB: Audit Active Directory
- LAB: Hardening Linux server
Module 3: Hardening your Network with Firewall
- Firewall Placement Design
- Firewall Categorized
- Firewall Architectures
- Configuring and Managing Firewalls
- LAB: IPTables Linux Firewall
- LAB: Audit Firewall with Penetration Testing tools
Module 4: Hardening your Network with Intrusion Detection and Prevention
- Intrusion Detection Systems
- Type of IDS and IPS
- IDS Detection Methods
- IDS Response Methods
- Deployment and Implementation of and IDS and IPS
- LAB: Snort Installation
Module 4: Implement VPN and Dial-in Remote Access
- VPN Concept
- Type of VPN
- VPN Implementation in Network Infrastructure
- Implementing 2 Factor Authentication
Module 5: Hardening Routers and Switches
- Introduction Switch and Router threats
- Hardening Management Access
- Hardening Service and Features
- Hardening Router and Switch
- LAB: Hardening Cisco Router and Switch
- LAB: Audit Switch and Router with Penetration Testing tools
Module 6: Secure Network with Content Filters
- Content Filtering Architectures
- LAB :Implement Content Filtering Firewall
Module 7: Hardening Wireless LAN Connection
- Introduction Wireless LAN Threats
- Introduction Wireless Security
- Hardening Wireless LAN Technology
- LAB: Audit Wireless LAN Technology with Aircrack-ng Suite
Module 8: Implement AAA
- Explain the functions and importance of AAA
- Describe the features of TACACS+ and RADIUS AAA protocols
- Configure AAA authentication
- Configure AAA authorization
- Configure AAA accounting
Module 9: Hardening your Network with Network management
- Management Information Base (MIB)
- SNMP Security
- SNMPv1 ,SNMPv2 and SNMPv3 Interoperability
- Structure of Management Information
- LAB : Install SNMP Agents
- Performance Base Monitoring
- Cacti
- Orion ( Solarwinds ) Network Performance Monitoring
- MRTG ,PRTG
- Availability Base Monitoring
- Nagios
- Zenoss
- Network flow Monitoring
- netFLOW
- ntop
- LAB : Implement Cacti
- LAB : Management Cacti
- DEMO : SNMP Management tool Solarwinds
Module 10: Implementing a Secure Perimeter
- DMZ Implementation and Design
- Internet Access Module
- WAN Access Module
- Extranet Access Module
- Wireless Access Module
- E-commerce Access Module
- Web Application Threats
- Web Application Security
Programme scope, delivery arrangements and suitability are confirmed during enquiry.