Course Overview:

This course explores the VMware Infrastructure and related security, which consists of VMware ESX Server & VMware Virtual Center Server. We will look at both the design environments and operational processes of the VMware Infrastructure including security. This course provides IT architects with the insight needed to tackle tough issues in server virtualization such as virtual machine technologies, storage infrastructure, and designing clustered environments with security practices included. Extensive hands-on labs provide for a rich student experience.

Hypervisors and their supporting environment require attention to security due to the aggregated risk of hosting multiple virtual servers. This course explores the security of virtualized environments. Student configure ESXi by learning to manage the security and risk between ESXi, virtual servers and security integration of ESXi to the physical network infrastructure including appropriate segregation from other sensitive networks and management networks. How to configure virtual networks when some hosts are dual or multi homed, but internally segregate between the two or more connected networks with different security levels. Appropriate integration of zero-clients and thin clients. Configuration of defensive measures on hosts, servers, hypervisors within the virtual environment and practices for those guarding it externally. Integration of Active Directory and other AAA/CIA related services relative to a virtualized environment.

Students are also walked through DoD ESXi Security Technical Implementation Guide (STIG). Introduction to the impact of Intel Trusted Execution Technology integrated with ESXi to create a trusted platform for virtual machines. Additionally the instructor walks the students through NIST Special Publication 800-125A: Security Recommendations for Hypervisor Deployment on Servers, and NIST Special Publication 800-125B: Secure Virtual Network Configuration for Virtual Machine (VM) Protection.

Attendees to “VM-345: VMware Infrastructure Security: VMware Install, Configure, and Manage with Security Objectives” will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

• Virtual Infrastructure Overview
• ESX and ESXi Server Installation
• Configuration of Networking, Scalability and Security
• Storage
• Install and Configure vCenter Server and Components
• Creation, Deployment, Management, and Migration of Virtual Machines
• Utilize vCenter Server for Resource Management
• Utilize vCenter Server for Virtual Machine Access Control and User Managment
• Use vCenter Server to increase scalability
• Monitoring Your Environment
• Data & Availability Protection Troubleshooting
• Use VMware vCenter Update Manager to apply ESXi patches
• Use vCenter Server to manage vMotion, HA, DRS and data protection.

Course Overview:

TN-813: Certified in Governance, Risk, and Compliance (CGRC) course is for the (ISC)²® Certified in Governance, Risk, and Compliance (CGRC) credential previously known as Certified Authorization Professional (CAP). This course walks the student through the Risk Management Framework following practices the NIST pubs. CGRC is an objective measure of the knowledge, skills and abilities required for personnel involved in the process of certifying and accrediting security of information systems. Specifically, this credential applies to those responsible for formalizing processes used to assess risk and establish security requirements. Their decisions will ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.The CGRC credential is appropriate for civilian, state and local governments in the U.S., as well as commercial markets. CGRC certification applies to job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers.  CGRC is crucial to the Management staff.

This course is the “why” of the entire security field. It provides a logical way of allocating resources where there is greatest risk and why we make the decisions we make in the field of security. It is TechNow’s view that of all the security courses we have seen, this course genuinely puts the “big picture” of security in front of the students. Students actually come to an understanding of truly what is critical to security of an enterprise versus a bunch of nuts and bolts of security.

TechNow’s CGRC course covers all of the (ISC)²® CGRC 7 Knowledge domains:

• Security and Privacy Governance, Risk Management, and Compliance Program
• Scope of the System
• Selection and Approval of Framework, Security, and Privacy Controls
• Implementation of Security and Privacy Controls
• Assessment/ Audit of Security and Privacy Controls
• System Compliance
• Compliance Maintenance

RMF Related Steps

• Prepare – Process Initiation
• Categorize Information Systems
• Establish the Security Control Baseline
• Apply Security Controls
• Assess Security Controls
• Authorize Information System
• Monitor Security Controls

TechNow’s CGRC Instructors have extensive knowledge and experience in the field, and have been working with organizations to build assessor teams for over 20 years.

Attendees to TN-813: Certified in Governance, Risk, and Compliance (CGRC) will receive TechNow authorized training materials, including access to the documentation of the CGRC Exam domains, and expert instruction.

Dates/Locations:

No Events

Duration: 3 Days

Course Objectives:

• Initiate the Preparation Phase
• Perform Execution Phase
• Perform Maintenance Phase
• Understand the Purpose of Security Authorization

Prerequisites:

• IT Security
• Information Assurance
• Information Risk Management certification and systems administration
• 1-2 years of general experience technical experience
• 2 years of general systems experience
• 1-2 years of Database/Systems Development/Network Experience
• Information Security Policy Experience

Comments

Latest comments from students

Liked the class?  Then let everyone know!

Course Overview:

The CT-325: Security+ (SY0-701) class is the primary class you will need to take if your job responsibilities include securing network services, network devices, and network traffic. It will also help you prepare for the CompTIA Security+ examination (exam number SY0-701). In the CT-325: Security+ class you’ll build on your knowledge and professional experience with computer hardware, operating systems, and networks as you acquire the specific skills required to implement basic security services on any type of computer network.  Let us help you prepare for the CompTIA Security+ exam (SY0-701).

TechNow is a CompTIA partner and uses official CompTIA Security+ curriculum.

Attendees to CT-325: Security+ will receive TechNow approved course materials and TechNow expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

• Compare and contrast attacks
• Compare and contrast security controls
• Use security assessment tools
• Explain basic cryptography concepts
• Implement a public key infrastructure
• Implement identity and access management controls
• Manage access services and accounts
• Implement a secure network architecture
• Install and configure security appliances
• Install and configure wireless and physical access security
• Deploy secure host, mobile, and embedded systems
• Implement secure network access protocols
• Implement secure network applications
• Explain risk management and disaster recovery concepts
• Describe secure application development concepts
• Explain organizational security concepts

Prerequisites:

• CompTIA A+ and Network+ certifications, or equivalent knowledge.
• Windows 7/8/10 and Server 2008/2012/2016 experience required.
• Six to nine months experience in networking, including experience in configuring & managing TCP/IP.

Comments

Latest comments from students

User: joshjepsen@hotmail.com

Instructor comments: Instructor was very knowledgeable on all the course content. There were some instances when I felt he streamlined through some of the material too quickly, such as going over how to identify types of attacks.

Liked the class?  Then let everyone know!

Course Overview:

TN-575: Open Source Network Security Monitoring teaches students how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools. No network is bullet proof and when attackers access your network, this course will show you how to build a security net to detect, contain, and control the attacker. Sensitive data can be monitored and deep packet and deep attachment analysis can be achieved. As organizations stand up a Security Operations Center (SOC) the enterprise NSM is the key ingredient to that SOC. This course not only teaches how to implement an NSM technologically, but how to effectively monitor an enterprise operationally. You will learn how to architect an NSM solution: where to deploy your NSM platforms and how to size them, stand-alone or distributed, and integration into packet analysis, interpret evidence, and integrate threat intelligence from external sources to identify sophisticated attackers. A properly implemented NSM is integral to incident response and provides the responders timely information to react to the incident. TN-575: Open Source Network Security Monitoring is a lab intensive environment with a cyber range that gives each student in-depth knowledge and practical experience monitoring live systems to include: Cisco, Windows, Linux, IoT, and Firewalls.

Attendees to TN-575: Open Source Network Security Monitoring class will receive TechNow approved course materials and expert instruction.

This Course is taught utilizing Security Onion or RockNSM as specified by the customer.

Dates/Locations:

No Events

Duration: 5 Days

Course Objective:

The focus of this course is to present a suite of Open Source security products integrated into a highly functional and scalable Network Security Monitoring solution.

Prerequisites:

Students should have a basic understanding of networks, TCP/IP and standard protocols such as DNS, HTTP, etc. Some Linux knowledge/experience is recommended, but not required

Course Outline:

• Network Security Monitoring (NSM) Methodology
• High Bandwidth Packet Capture Challenges
• Installation of Security Onion
  • Use Cases (analysis, lab, stand-alone, distributed)
  • Resource Requirements
• Configuration
  • Setup Phase I – Network Configuration
  • Setup Phase 2 – Service Configuration
  • Evaluation Mode vs. Configuration Mode
  • Verifying Services
• Security Onion Architecture
  • Configuration Files and Folders
  • Network Interfaces
  • Docker Environment
  • Security Onion Containers
• Overview of Security Onion Analyst Tools
  • Kibana
  • CapME
  • CyberChef
  • Squert
  • Sguil
  • NetworkMiner
• Quick Review of Wireshark and Packet Analysis
  • Display and Capture Filters
  • Analyze and Statistics Menu Options
  • Analysis for Signatures
• Analyzing Alerts
  • Replaying Traffic
  • 3 Primary Interfaces:
    • Squert
    • Sguil
    • Kibana
  • Pivoting Between Interfaces
  • Pivoting to Full Packet Capture
• Snort and Surricata
  • Rule Syntax and Construction
  • Implementing Custom Rules
  • Implementing Whitelists and Blacklists
• Hunting
  • Using Kibana to Slice and Dice Logs
  • Hunting Workflow with Kibana
• Bro
  • Introduction and Overview
    • Architecture, Commands
  • Understanding and Examining Bro Logs
    • Using AWK, sort, uniq, and bro-cut
  • Working with traces/PCAPs
  • Bro Scripts Overview
    • Loading and Using Scripts
  • Bro Frameworks Overview
    • Bro File Analysis Framework FAF
  • Using Bro scripts to carve out more than files
• RockNSM ( * If Applicable)
  •  Kafka
    • Installation and Configuration
    • Kafka Messaging
    • Brokers
    • Integration with Bro and FSF
  • File Scanning Framework FSF
    • Custom YARA Signatures
    • JSON Trees
    • Sub-Object Recursion
    • Bro and Suricata Integration
• Elastic Stack
  • Adding new data sources in Logstash
  • Enriching data with Logstash
  • Automating with Elastalert
  • Building new Kibana dashboards
• Production Deployment
  • Advanced Setup
  • Master vs Sensor
  • Node Types – Master, Forward, Heavy, Storage
  • Command Line Setup with sosetup.conf
  • Architectural Recommendations
  • Sensor Placement
  • Hardening
  • Administration
  • Maintenance
• Tuning
  • Using PulledPork to Disable Rules
  • BPF’s to Filter Traffic
  • Spinning up Additional Snort / Suricata / Bro Workers to Handle Higher Traffic Loads

Comments

Latest comments from students

Liked the class?  Then let everyone know!

Course Overview:

Implementing Cisco IOS Network Security (IINS) is an instructor-led course. This five-day course focuses on the necessity of a comprehensive security policy and how it affects the posture of the network.  TechNow students each get a Cisco Switch, Router, and an ASA.  The in the classrom hardware hands-on component of this course is a priority.  Using instructor-led discussions, extensive hands-on lab exercises, and supplemental materials, this course allows learners to understand common security concepts, and deploy basic security techniques utilizing a variety of popular security appliances within a “real-life” network infrastructure.  TechNow is an Authorized VUE testing partner and this course concludes with the student taking the 210-260 IINS Cisco Certification Exam.

Attendees to N-325: Implementing Cisco IOS Network Security will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Comments

Latest comments from students

Liked the class?  Then let everyone know!