TN-865: Wireshark Network Traffic and Security Analysis

Course Overview:

This course delivers the technical knowledge, insight, and hands-on training to receive in-depth knowledge on Wireshark® and TCP/IP communications analysis. You will learn to use Wireshark to identify the most common causes of performance problems in TCP/IP communications. You will learn about the underlying theory of TCP/IP and the most used application protocols, so that you can intelligently examine network traffic for performance issues or possible Indicators of Compromise (IoC).

Duration: 5 Days

Audience:

Anyone interested in learning to troubleshoot and optimize TCP/IP networks and analyze network traffic with Wireshark, especially network engineers, information technology specialists, and security analysts.

Course Prerequisites:

We recommend that attendees of this course have the following prerequisite:
• Network+

Dates/Locations:

No Events

Course Outline:

DAY ONE

Course Set Up and Analyzer Testing

Network Analysis Overview
Wireshark Functionality Overview
Capturing Wired and Wireless Traffic
Define Global and Personal Preferences for Faster Analysis
Defined Time Values and Interpret Summaries
Interpret Basic Trace File Statistics to Identify Trends
Create and Apply Display Filters for Efficient Analysis

DAY TWO

Follow Streams and Reassemble Data
Use Wireshark’s Expert System to Identify Anomalies
TCP/IP Analysis Overview
Analyze Common TCP/IP Traffic Patterns

DAY THREE

Graph I/O Rates and TCP Trends
802.11 (WLAN) Analysis Fundamentals
Voice over IP (VoIP) Analysis Fundamentals
Network Forensics Fundamentals

DAY FOUR

Detect Scanning and Discovery Processes
Analyze Suspect Traffic

DAY FIVE

Use Command‐Line Tools

Next/Related Courses:

 

 

VM-345: VMware Infrastructure Security: VMware Install, Configure, and Manage with Security Objectives

 

Course Overview:

This course explores the VMware Infrastructure and related security, which consists of VMware ESX Server & VMware Virtual Center Server. We will look at both the design environments and operational processes of the VMware Infrastructure including security. This course provides IT architects with the insight needed to tackle tough issues in server virtualization such as virtual machine technologies, storage infrastructure, and designing clustered environments with security practices included. Extensive hands-on labs provide for a rich student experience.

Hypervisors and their supporting environment require attention to security due to the aggregated risk of hosting multiple virtual servers. This course explores the security of virtualized environments. Student configure ESXi by learning to manage the security and risk between ESXi, virtual servers and security integration of ESXi to the physical network infrastructure including appropriate segregation from other sensitive networks and management networks. How to configure virtual networks when some hosts are dual or multi homed, but internally segregate between the two or more connected networks with different security levels. Appropriate integration of zero-clients and thin clients. Configuration of defensive measures on hosts, servers, hypervisors within the virtual environment and practices for those guarding it externally. Integration of Active Directory and other AAA/CIA related services relative to a virtualized environment.

Students are also walked through DoD ESXi Security Technical Implementation Guide (STIG). Introduction to the impact of Intel Trusted Execution Technology integrated with ESXi to create a trusted platform for virtual machines. Additionally the instructor walks the students through NIST Special Publication 800-125A: Security Recommendations for Hypervisor Deployment on Servers, and NIST Special Publication 800-125B: Secure Virtual Network Configuration for Virtual Machine (VM) Protection.

Attendees to “VM-345: VMware Infrastructure Security: VMware Install, Configure, and Manage with Security Objectives” will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

• Virtual Infrastructure Overview
• ESX and ESXi Server Installation
• Configuration of Networking, Scalability and Security
• Storage
• Install and Configure vCenter Server and Components
• Creation, Deployment, Management, and Migration of Virtual Machines
• Utilize vCenter Server for Resource Management
• Utilize vCenter Server for Virtual Machine Access Control and User Managment
• Use vCenter Server to increase scalability
• Monitoring Your Environment
• Data & Availability Protection Troubleshooting
• Use VMware vCenter Update Manager to apply ESXi patches
• Use vCenter Server to manage vMotion, HA, DRS and data protection.

Welcome to TechNow!

Welcome to TechNow! The Leader in Information Security Training & Computer Training.

The world of information security and computer training is ever changing.  The techniques and systems continue to evolve and we must stay current and diligent.  To do this, you can count on TechNow®…the leader in cybersecurity training and computer system training.

TechNow® has been training the leaders in the computer community for many years.  We provide training for students in a number of areas.  Our cybersecurity trainings include popular courses like D0D 8140, Security , CISM, CISSP, CEH,CCNA, and more.  With over 34 years of experience, we’re able to provide you with unmatched training and certification programs.

TechNow also provides a variety of other popular trainings for the computer professional including Cisco, EC-Council, CompTIA, Unix/Linux and more.

.

Search Our Site

Upcoming Events

  • TN-822: Certified Information Systems Auditor (CISA) Seminar
    • 10/06/2025 – 10/10/2025
    • San Antonio
  • CT-213: Cloud Essentials+
    • 10/14/2025 – 10/16/2025
    • San Antonio
  • PM-223: Introduction to Project Management
    • 10/14/2025 – 10/16/2025
    • San Antonio
  • CT-210: Project+
    • 10/27/2025 – 10/30/2025
    • San Antonio
  • CT-325: Security+
    • 10/27/2025 – 10/31/2025
    • San Antonio
  • all events

    • in   

    PA-215: Palo Alto Networks Firewall Essentials FastTrack

      

    Course Overview: PA-215: Palo Alto Networks Firewall Essentials FastTrack Training Class is a five-day course that teaches students to configure and manage the entire line of Palo Alto Networks next-generation firewalls. This course combines PA-213 and PA-212 and adds a half day introduction to Panorama and Troubleshooting.  Through hands-on training, students learn high end skills of how to integrate Palo Alto next-generation firewalls into their network infrastructure.  This is not a virtualized theoretical course.  This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

    Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk.  Real hardware per student for real experience and real skill development.  TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

    This course sets up the foundation for the two day course PA-232: Palo Alto Networks Panorama Manage Multiple Firewalls. The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies.  Additionally, the instructor has taught several security appliance products and carries several SANS, Cisco, Unix, and Windows certifications. Attendees to the PA-215:  Palo Alto Firewall Essentials FastTrack Training Course will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration 5 days

    Course Objectives:   Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS).  Additionally Panorama and Troubleshooting are addressed.

    • Day 1
      • Module 0 – Introduction & Overview
      • Module 1 – Administration & Management
        • Configuration Management
        • PAN-OS & Software Updates
        • Service Route Configuration
        • Log Forwarding
        • GUI, CLI, and API
      • Module 2 – Interface Configuration
        • L2 & L3
        • Vwire
        • Tap
        • Interface Management in Security Zones
        • VLANs
        • QoS
    • Day 2
      • Module 3 – Layer 3 Configuration
        • L3 Configuration and DHCP
        • NAT
        • DNS Proxy
        • Policy Based Forwarding in
        • Introduction to IPv6
      • Module 4 – App-ID
        • App-ID Process
        • Policy Administration
      • Module 5 – Content-ID
        • Antivirus
        • Anti-spyware
        • Vulnerability
        • URL Filtering
        • File Blocking and Wildfire
        • Data Filtering
        • DoS Protection
        • Botnet
    • Day 3
      • Module 6 – VM Firewall
        • Downlaod VM Template
        • Configure ESXi
        • Configure VM
      • Module 7 – Decryption
        • SSL Inbound and Outbound
      • Module 8 – Custom Signatures
        • Defining New Application Signatures
        • Application Override
        • Custom Threat ID
    • Day 4
      • Module 9 – User-ID
        • User-ID Agent
        • Terminal Server Agent
        • XML API
        • Captive Portal
      • Module 10 – VPN and GlobalProtect
        • Psec Tunnels
        • GlobalProtect
        • Agent
        • Portal
        • Gateway
        • HIP
    • Day 5
      • Module 11 – High Availability
        • Active/Passive
        • Active/Active
      • Module 12 – Panorama
        • Device Groups & Objects
        • Shared Policy
        • Configuration Management
        • Reporting

    Prerequisites:

    This course is in no way associated with Palo Alto Networks, Inc.

    Comments

    Latest comments from students

    User: rod3535@gmail.com

    Instructor comments: Instructor was great, he explained everything and made sure we understood the process's/product. He also took time out of his own schedule to help set up a VM environment on our personal pc's.

    Facilities comments: Facility was great, enjoyed feeding the deers!

    Like the class?  Then let everyone know!

    VM-325: VMware View: Install, Configure and Manage

    Course Overview:

    This hands-on training course builds your skills in the VMware ViewTM suite of products: VMware View Manager, VMware View Composer, and VMware® ThinAppTM.  Based on customer specification, this course can be based on View 4.x or 5.x, and ThinApp 4.x or 5.x releases.

    Attendees to VM-325: VMware View: Install, Configure and Manage will receive TechNow approved course materials and expert instruction.

    At the end of this course, you should understand the features and operations of View and be able to:

    • Install and configure View components
    • Create and manage dedicated and floating desktop pools
    • Deploy and manage linked-clone virtual desktops
    • Configure and manage desktops that run in local mode
    • Configure secure access to desktops through a public network
    • Use ThinApp to package applications

    Date/Locations:

    No Events

    Duration: 5 days

    Course Objectives:

    • Module 1: Course Introduction
    • Module 2: Introduction to VMware View
    • Module 3: View Connection Server
    • Module 4: View Desktops
    • Module 5: View Client Options
    • Module 6: View Administratory
    • Module 7: Configuring and Managing Linked Clones
    • Module 8: Local-Mode Desktops
    • Module 9: Command-Line Tools and Backup Options
    • Module 10: Managing VMware View Security
    • Module 11: View Manager Performance and Scalability
    • Module 12: VMware® ThinAppTM

    Prerequisites:

    • VM-315: VMware Infrastructure: Install, Configure and Manage
    • Experience in Microsoft Windows Active Directory Administration
    • Experience with VMware vSphereTM
    • Before attending the course, students must be able to perform the following tasks:
      • Create a template in VMware vCenterTM Server and deploy a virtual machine from it
      • Modify a template customization file
      • Open a virtual machine console in vCenter Server and access the guest operating system
      • Configure Active Directory services

     

    Comments

    Latest comments from students

    Liked the class?  Then let everyone know!