Services

Technology Training: Security: Practical Firewall Concepts Level II

Course Objectives:

Upon completion of this course students will be able to:

• Describe the purpose of a firewall
• Explain the operation of a firewall
• Implement fundamental firewall architectures on specified firewall equipment.
• Identify basic firewall components

Course Type:

The course is taught in class with an instructor providing firewall product demonstrations and group hands-on exercises.

Prerequisite:

Networking Foundations Level I and II, TCP/IP Fundamentals, or a detailed understanding of IP networking, are strongly recommended.

Audience:

Individuals that need to understand basic firewall technology and to implement firewall security within a small or medium size enterprise; specifically Systems Engineers, Network Administrators, Network Consultants, Technical Architects, and Security Planners.

Course Description:

This course introduces the student to the concept of Firewall and Security basics. Through a combination of lectures, product demonstrations, and group exercises the student will gain knowledge of these concepts. The course wraps up with a case study and firewall implementation exercise where the students will work in teams to design, implement, and manage a secure enterprise solution.

Course length

2 Days

Course Outline

Internetworking Review

• The Internet Overview
• Network Layers Explained
• Intranets vs. Extranets
• Virtual Private Networks
• Remote Access
• Firewall requirements
• Benefits of Firewalls
• Firewall applications

Firewall Demonstration 1:

• Product Introduction
• Interfaces

Firewall Configuration Exercise 1:

• Configuration File Management (Save and Restore)

Network Security Concepts

• Issues and Risks
• Access Control
• Confidentiality
• Data Integrity
• Non-repudiation
• Attacks
• Security Zones

Firewall Demonstration 2:

• Zones
• Routing
• Management Services

Firewall Configuration Exercise 2:

• IP Management Settings
• Interface and Zone assignment

Firewall Architecture

• Packet Filtering
• Application Proxies
• Stateful Inspection
• Agent/Client
• Management

Firewall Product Demonstration 3:

• Management Services
• Security Levels
• Preventing a Firewall Attack

Firewall Configuration Exercise 3:

• Management Services Config

Security Policies

• Standards
• Guidelines
• Procedures
• Rule Base
• Licensing
• Management

Firewall Product Demonstration 4:

• Address Book Management
• Security Policy Configuration
• Bandwidth Management
• Policy Scheduling

Firewall Configuration Exercise 4:

• Policy Creation

Authentication

• User/Client/Session
• FTP
• Telnet
• Rlogin
• HTTP/HTTPS
• S/key
• SecurID
• RADIUS
• AXENT
• TACACS

Firewall Product Demonstration 5

Firewall Configuration Exercise 5:

• Managing Logs

Network Address Translation

• IP Addressing
• Classless InterDomain Routing
• ARP/RARP
• Static NAT
• Dynamic NAT
• NAT Rule Base

Firewall Product Demonstration 6

• NAT Options

Conclusion

• Case Study

Firewall Configuration Exercise 7:

• Enterprise Firewall Implementation and Management