Course Overview:

This is a hands-on course that covers many of the concepts of securing the perimeter of an organization. This includes concepts such as intrusion detection, packet filtering, and central logging.

A skills focus enables the student to better absorb the subject matter and perform better on the job.   This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Firewalls.

This course is an excellent precursor to PA-215 Palo Alto Firewall Essentials FastTrack.

Attendees to TN-949: Certified Firewall Analyst Prep will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

• Analyzing Network and Wireless Design
• Creating and Auditing a Rulebase
• Firewall Assessment and Penetration Testing
• Host-Based Detection and DLP
• Incident Detection and Analysis
• IOS and Router Security
• IPv6 and ICMPv6
• Log Collection and Analysis
• NAT and Proxies
• Netfilter IPtables
• Network Access Control
• Network-Based Intrusion Detection
• Packet Filters and Inspection
• Packet Fragmentation
• Perimeter Concepts and IP Fundamentals
• Securing Hosts and Services
• TCP/IP Protocols
• VPN Design and Auditing
• VPN Implementation

Course Prerequisites:

• GSEC or equivalent experience
• UNIX, Windows, networking and security  experience
• This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

Liked the class?  Then let everyone know!

Course Overview:

Intrusion Analyst is a hands-on course that covers intrusion detection in-depth. This includes concepts such as the use of Snort, network traffic analysis, and IDS signatures.

A skills focus enables the student to better absorb the subject matter and perform successfully on the job.   This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of packet and intrusion analysis.

Attendees to TN-979: Intrusion Analyst will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

• Advanced Snort Concepts
• Analyst Toolkit
• Domain Name System (DNS)
• Examining Packet Crafting
• Examining Packet Header Fields
• Fragmentation
• ICMP Theory
• IDS Interoperability
• IDS Patterns
• IDS/IPS Management & Architecture Issues
• Indications, Warnings & Traffic Correlation
• IPv6
• Microsoft Protocols
• Network Traffic Analysis
• NIDS Evasion, Instertion & Checksums
• Snort Fundamentals & Configuration
• Snort GUIs & Sensor Management
• Snort Performance, Active Response & Tagging
• Snort Rules
• Stimulus Response
• TCPdump Fundamentals
• TCP/IP Fundamentals
• Wireshark Fundamentals
• Writing TCPdump Filters

Course Prerequisites:

• GSEC or equivalent experience
• UNIX, Windows, Networking, and Security Experience
• This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

User: Tosha

Instructor comments: Dave was an excellent instructor. He is very informative and knowledgeable in the course and the material. I have enjoyed the class and I would take another course with him as the instructor.

Facilities comments: Very nice and clean hotel.

User: buckey26

Instructor comments: Dave was one of the best instructors I have ever had for a tech course. He broke down everything to the point where you can understand it internally.

Liked the class?  Then let everyone know!