TN-949: Certified Firewall Analyst Course

Course Overview:

This is a hands-on course that covers many of the concepts of securing the perimeter of an organization. This includes concepts such as intrusion detection, packet filtering, and central logging.

A skills focus enables the student to better absorb the subject matter and perform better on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Firewalls.

This course is an excellent precursor to PA-215 Palo Alto Firewall Essentials FastTrack.

Attendees to TN-949: Certified Firewall Analyst Prep will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Analyzing Network and Wireless Design
Creating and Auditing a Rulebase
Firewall Assessment and Penetration Testing
Host-Based Detection and DLP
Incident Detection and Analysis
IOS and Router Security
IPv6 and ICMPv6
Log Collection and Analysis
NAT and Proxies
Netfilter IPtables
Network Access Control
Network-Based Intrusion Detection
Packet Filters and Inspection
Packet Fragmentation
Perimeter Concepts and IP Fundamentals
Securing Hosts and Services
TCP/IP Protocols
VPN Design and Auditing
VPN Implementation

Course Prerequisites:

GSEC or equivalent experience
UNIX, Windows, networking and security experience
This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

Liked the class? Then let everyone know!

Security Course Flow

We are often asked what is the recommended sequence of classes. Here is our recommended sequence of classes for The Security Field.

Certified Information Security Manager (CISM)

CT-325 CompTIA Security+

TN-825 Certified Information Security Manager

Certified Information Systems Auditor(CISA)

CT-325 CompTIA Security+

TN-425 Certified Ethical Hacker

TN-822: Certified Information Systems Auditor (CISA)

Certified Information Systems Security Professional(CISSP)

CT-325 CompTIA Security+

TN-425 Certified Ethical Hacker

TN-815 CISSP Certification Prep Seminar

Observations of Instructor Led Training with Real Hardware

TechNow has heard many students talk about virtualized/remote training that TechNow Does Not Do. While training our most recent offering of PA-215: Palo Alto Networks Firewall Essentials FastTrack a student told his story of how he endend up in our course. His story we have heard for other technologies like Cisco, VMware, BlueCoat and other products.

A large percentage of training is moving to the virtualized/remote lab environments. Students are asked to use some variant of remote access software and remote into the training company's lab environment. Our student in our Palo Alto Networks Firewall course informed us that he went to a very costly offering of that course from the vendor and was not able to perform any labs. There were either network connectivity issues, or issues with the remote access software, or other problems. The whole training experience was very frustrating and not productive.

We keep our labs open to students if they would like after hours, or before hours access. Repeatedly going through a lab engrains that knowledge for later recall. Touching hardware is so critical in understanding the problems that arise when a cable comes loose, or a cable gets plugged in the wrong port. There are other scenarios such as just pulling the power cable, or turning off a power strip, or accidently overwriting a configuration. These disaster scenarious requires hands-on physical access to hardware. Preventing and recovering from disasters is what it's all about, and that requires hands-on, instructor led, real hardware.

PA-243: Palo Alto Networks Firewall Debug and Troubleshoot (EDU-311)

Course Overview: PA-243: Palo Alto Networks Firewall Debug and Troubleshoot is a three-day course on how to troubleshoot the full line of Palo Alto Networks next-generation firewalls. Students will receive hands-on experience troubleshooting the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks PAN-OS® operating system. Upon completion of this class, students will have an in-depth knowledge of how to troubleshoot visibility and control over applications, users, and content. This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development. TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

Attendees to the PA-243: Palo Alto Networks Firewall Debug and Troubleshoot (EDU-311) Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 3 days

Course Objectives: Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS).

Day 1

Module 0 – Introduction & Overview
Module 1: Troubleshooting
- Methodology
Module 2: Platform
- Comparisons When
- Troubleshooting
Module 3: Flow Logic
Module 4: Administration
- Troubleshooting

Day 2

Mod 5: Layer 3
- Troubleshooting
Mod 6: Policy
- Troubleshooting
Mod 7: User-ID™
- Troubleshooting

Day 3

Mod 8: VPN
- Troubleshooting
Mod 9: GlobalProtect™
- Troubleshooting
Mod 10: Performance
- Troubleshooting

Prerequisites:

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class? Then let everyone know!

TN-959: UNIX Security Administrator Course

Course Overview:

The UNIX Security Administrator Prep is a hands-on course that covers how to secure and audit UNIX and Linux operating systems. This includes concepts such as Rootkits, Buffer overflows, and monitoring UNIX/Linux systems.

Attendees to TN-959: Unix Security Administratorwill receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

AIDE
Apache
Best Practices for Kernel Tuning and Warning Banners
Boot Services
Chroot()
DNS- BIND
DNSSec
Evidence Collection and Preservation
Forensic Analysis
Forensic Preparation and Incident Handling
Host Based Firewalls – iptables
Intro to Forensics
OS Install and Patching
Physical, User Account, and Password Access Control
Se Linux
Sendmail
SSH
Stack Smashing
Sudo
Syslog-NG
UNIX Logging

Course Prerequisites:

GSEC or equivalent experience
UNIX, Windows, networking, and security experience
This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

User: wbcarter

Instructor comments: Good Stuff. Thanks!

User: ryuhas

Instructor comments: Very Good Instructor

Facilities comments: Facilities was great. Location had a lot to be desired. To much traffic and accidents trying to get here.