Network Security I: Policy, Administration, and Firewalls [formerly Network Security and Firewall Administration]

Real-world, hands-on attack methods and firewalls.

High-profile security breaches have made network access control one of the most important concerns for corporate and government network managers. Intruders attack companies like yours every day.

It is your job to reduce the chance of security breaches. Do you know what attacks intruders use and how to counter them? As hackers become more sophisticated, so must you. This course will give you the foundation knowledge to protect your network from attack.

Hands-On Labs reinforce vital security concepts and provide real-world practice using routers and firewalls to protect your network. You will use tools such as ISS SAFEsuite^TM and RealSecure, Check Point FireWall-1, and Funk Software's Steel-Belted Radius.

Classroom and Virtual Classroom e-Learning Outline

1. Attacks

2. Security Assessment

3. Security Implementation Policy

4. Firewall Architecture

5. Firewall Components

6. Authentication

7. Intrusion Detection

8. Vulnerability Detection and Audit

9. Futures

Hands-On Lab 1: Network Configuration

An essential element of network security is having knowledge of your network configuration. Become familiar with the classroom network configuration by setting up the equipment you will use for the remainder of the course. Test network connectivity to ensure proper operation before taking actions in subsequent labs.

Hands-On Lab 2: Hacker Tricks

Explore the methods used by attackers to hack into networked computers. Use a port scanner to scan a host for available ports and services. Use SMTP primitives and TFTP commands to send spoofed E-mail or gain unauthorized information. Discuss ways to prevent them. Explore password-cracking tools used to brute force guess passwords. Examine tools used to flood systems and review ways to prevent them from taking your systems down.

Hands-On Lab 3: Security Policy

Using RFC 2196, the Site Security Handbook, develop a network security policy to use during the course. Discuss which services and types of access to allow into or out of your network. Establish procedures for educating users about the security policy you develop. Consider how to audit your policy and what special circumstances might affect your policy.

Hands-On Lab 4: Incident Response and Network Forensics

With guidelines from RFC 2196, develop an incident response plan and list the actions to take when an incident occurs. Plan the steps required for an incident response team to investigate an incident. Use network forensics tools to gather evidence that can be used in court. Establish the requirements for investigation that will meet legal requirements for law enforcement.

Hands-On Lab 5: Packet Filters

Set up a packet filter using a Cisco router. Examine how the packets traverse the network and determine whether your filter is working as designed. Write access lists and draft several samples to meet a variety of different security policies.

Hands-On Lab 6: Firewall Configuration

Configure and test Check Point FireWall-1. Develop the trusted and untrusted network configurations, administer proxying features, and examine logging features. Set up address translation features and verify their operation.

Hands-On Lab 7: Authentication

Administer a commercially available authentication product with centralized administration. Build user accounts and set access permissions for a token-based authentication system. Test the authentication system and examine logging features.

Hands-On Lab 8: Intrusion Detection

Explore real-time intrusion detection software and see how an automated intrusion detection system works. Configure tools like ISS RealSecure to protect network resources.

Hands-On Lab 9: Vulnerability Detection

Explore vulnerability detection tools to scan your network and demonstrate how they can improve an organization’s network security. Use a commercially available vulnerability detection tool to review and correct vulnerabilities.

Self-Paced e-Learning Details

Title 1: Attack Methods - 282097

You are under attack! Statistics show that if your organization has not yet been exposed to an attack, you will be in the near future. Learn who the attackers are, how they break into computer networks, how they gain information about their victims, and how they gain unauthorized access or cause denials of service.

Title 2: Security Policy Design and Implementation - 282098

Without a well thought out security policy firmly in place, you are at a greater risk of an attack (internal or external) than those companies that have established a policy. Understand what threats your organization should be concerned about, what assets to protect, how to implement safeguards, and the costs and benefits involved in establishing a security policy.

Title 3: Firewalls, Proxies and Packet Filters - 282099

Gain a complete understanding of what a firewall does, the various components of a firewall solution, the issues that affect firewall use, and advanced features that are being developed. Learn about packet filters, proxy servers, stateful inspection, and bastion hosts. Assess the advantages and disadvantages of different security architectures.

Title 4: Authentication, Detection and Auditing - 282100

Get an in-depth look at intrusion detection systems, vulnerability scanners, and auditing features. Learn about the various features of authentication: passwords, tokens, keys and biometrics.

Package Titles 1-4 - 282101