TN-949: Certified Firewall Analyst Course

Course Overview:

This is a hands-on course that covers many of the concepts of securing the perimeter of an organization. This includes concepts such as intrusion detection, packet filtering, and central logging.

A skills focus enables the student to better absorb the subject matter and perform better on the job.   This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Firewalls.

This course is an excellent precursor to PA-215 Palo Alto Firewall Essentials FastTrack.

Attendees to TN-949: Certified Firewall Analyst Prep will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

  • Analyzing Network and Wireless Design
  • Creating and Auditing a Rulebase
  • Firewall Assessment and Penetration Testing
  • Host-Based Detection and DLP
  • Incident Detection and Analysis
  • IOS and Router Security
  • IPv6 and ICMPv6
  • Log Collection and Analysis
  • NAT and Proxies
  • Netfilter IPtables
  • Network Access Control
  • Network-Based Intrusion Detection
  • Packet Filters and Inspection
  • Packet Fragmentation
  • Perimeter Concepts and IP Fundamentals
  • Securing Hosts and Services
  • TCP/IP Protocols
  • VPN Design and Auditing
  • VPN Implementation

Course Prerequisites:

  • GSEC or equivalent experience
  • UNIX, Windows, networking and security  experience
  • This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

Liked the class?  Then let everyone know!

Contact Us

    After you press "Request Information" near the bottom of this form, within 30 seconds, status will be provided at the bottom of the form

    Tech Now can provide on-site training anywhere in the world. We'll customize a training package to meet your needs!

    First Name*

    Last Name*

    Your Email*

    Your Company*

    Your State*

    Area of Interest

    Phone

    Questions:

    After you press "Request Information" on this form, within 30 seconds, status will be provided at the bottom of the form

    from page:

    in   

    N-455: Securing Networks with ASA Fundamentals (SNAF)

    Course Overview:

    In this course, you will gain the knowledge and skills needed to configure, maintain, and operate Cisco ASA 5500 Series Adaptive Security Appliance.

    Attendees to N-455: Securing Networks with ASA Fundamentals (SNAF) will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration: 5 Days

    Course Objectives:

    • Introducing Cisco Security Appliance Technology and Features
    • Cisco Adaptive Security Appliance and PIX Security Appliance Families
    • Getting Started with Cisco Security Appliances
    • Essential Security Appliance Configuration
    • Configuring Translations and Connection Limits
    • Using ACLS and Content Filtering
    • Configuring Object Grouping
    • Switching and Routing on Security Appliances
    • Configuring AAA for Cut-Through Proxy
    • Configuring the Cisco Modular Policy Framework
    • Configuring Advanced Protocol Handling
    • Configuring Threat Detection
    • Configuring Site-to-Site VPNS Using PreShared Keys
    • Configuring Security Appliance Remote Access VPNs
    • Configuring Cisco Security Appliance for SSL VPN
    • Configuring Transparent Firewalls Mode
    • Configuring Security Contexts
    • Configuring Failover
    • Managing Security Appliances

    Prerequisites:

     

    Comments

    Latest comments from students

    Liked the class?  Then let everyone know!

    TN-865: Wireshark Network Traffic and Security Analysis

    Course Overview:

    This course delivers the technical knowledge, insight, and hands-on training to receive in-depth knowledge on Wireshark® and TCP/IP communications analysis. You will learn to use Wireshark to identify the most common causes of performance problems in TCP/IP communications. You will learn about the underlying theory of TCP/IP and the most used application protocols, so that you can intelligently examine network traffic for performance issues or possible Indicators of Compromise (IoC).

    Duration: 5 Days

    Audience:

    Anyone interested in learning to troubleshoot and optimize TCP/IP networks and analyze network traffic with Wireshark, especially network engineers, information technology specialists, and security analysts.

    Course Prerequisites:

    We recommend that attendees of this course have the following prerequisite:
    • Network+

    Dates/Locations:

    No Events

    Course Outline:

    DAY ONE

    Course Set Up and Analyzer Testing

    Network Analysis Overview
    Wireshark Functionality Overview
    Capturing Wired and Wireless Traffic
    Define Global and Personal Preferences for Faster Analysis
    Defined Time Values and Interpret Summaries
    Interpret Basic Trace File Statistics to Identify Trends
    Create and Apply Display Filters for Efficient Analysis

    DAY TWO

    Follow Streams and Reassemble Data
    Use Wireshark’s Expert System to Identify Anomalies
    TCP/IP Analysis Overview
    Analyze Common TCP/IP Traffic Patterns

    DAY THREE

    Graph I/O Rates and TCP Trends
    802.11 (WLAN) Analysis Fundamentals
    Voice over IP (VoIP) Analysis Fundamentals
    Network Forensics Fundamentals

    DAY FOUR

    Detect Scanning and Discovery Processes
    Analyze Suspect Traffic

    DAY FIVE

    Use Command‐Line Tools

    Next/Related Courses:

     

     

    PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231)

      

     

    Course Overview:  PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231) Training Class is a two-day course that teaches students strategies in defense against cyberthreats.  Successful completion of this course enables administrators to better understand the threat landscape.  This is not a virtualized theoretical course.  This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

    Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk.  Real hardware per student for real experience and real skill development.  TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

    The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies.  Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

    Attendees to the PA-242: Palo Alto Networks Firewall Manaage Cyberthreats  (EDU-231) Training Course will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration: 2 days

    Course Objectives:   Students attending this training course will gain an understanding of cyberthreats and their characteristics.  Students will learn how to manage cyberthreats using security policies, profiles, and signatures to protect their network against emerging threats.

    Day 1

    • Mod 1: Threat Landscape
      • Advanced Persistent
      • Threats
      • Data Breaches and Tactics
      • Threat Management
      • Strategies
    • Mod 2: Integrated
      • Approach to Threat
      • Protection
      • Integrated Approach to
      • Protection
      • Next-Generation Firewall
      • Advanced Endpoint
      • Protection
    • Mod 3: Network Visibility
      • Zero Trust Model
      • SSL Decryption
      • Decryption Policy
    • Mod 4: Reducing the Attack
      • Surf
      • ection

     

    Day 2

    • Mod 5: Handling Known
      • Threats
      • WildFire Analysis
      • Security Profiles
    • Mod 6: Handling Unknown
      • Traffic and Zero-Day Exploits
      • WildFire
      • Researching Threat Events
      • Identifying Unknown
      • Applications
    • Mod 7: Investigating
      • Breaches
      • Identify IOCs Using
      • App-Scope
      • Log Correlation
      • Finding Infected Host
    • Mod 8: Using Custom
      • Signatures
      • Creating Custom App-IDs
      • Threat Signatures

    A

    Prerequisites:

    • Students must complete the PA-213: Install, Configure, and Manage course
    • Understanding of network concepts, including routing, switching, and IP addressing
    • In-depth knowledge of port-based security and security technologies such as IPS, proxy, and content filtering

    This course is in no way associated with Palo Alto Networks, Inc.

    Comments

    Latest comments from students

    Like the class?  Then let everyone know!