Name: Securing UNIX systems
Price: 4997 GBP
Availability: InStock

Redhill

<h3>Integrating UNIX and Microsoft course description</h3>
 This course is designed for the enterprise-level UNIX
professional and represents the highest level of
professional, distribution-neutral UNIX certification
within the industry. 
It covers administering UNIX enterprise-wide with an
emphasis on mixed environments.
 
				<h5>What will you learn</h5>
				<ul>
				 
			 <li>Configure and troubleshoot OpenLDAP.</li>
					<li>Use OpenLDAP as an authentication backend.</li>
					<li>Manage software packages.</li>
 <li>Use Samba 
- Share configuration 
- User and group management 
- Domain integration 
- Name services 
- with Linux and Windows clients</li></ul> 
 <h5>
 Integrating UNIX and Microsoft course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Enterprise-level UNIX professionals.
						 
 
							<li>Prerequisites:</li>
							
 UNIX network administration.
							
 
							<li>Duration</li>
							
 5 days
						
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Integrating UNIX and Microsoft course contents</h3>
 <ul>
				<li>OPENLDAP CONFIGURATION </li>
<li>OpenLDAP replication </li>
Replication concepts, OpenLDAP replication, replication log files, replica hubs, LDAP referrals, LDAP sync replication.

<li>Securing the Directory </li>
Securing the directory with SSL and TLS, Firewall considerations, Unauthenticated access methods, User/password authentication methods, Maintanence of SASL user DB, certificates.

<li>OpenLDAP Server Performance Tuning </li>
Measure OpenLDAP performance, Tune software configuration to increase performance, indexes.

				<li>OPENLDAP AS AN AUTHENTICATION BACKEND LDAP </li>
<li>Integration with PAM and NSS </li>
Configure PAM to use LDAP for authentication, NSS to retrieve information from LDAP and PAM modules in UNIX.

<li>Integrating LDAP with Active Directory and Kerberos </li>
Kerberos integration with LDAP, Cross platform authentication, Single sign-on concepts, Integration and compatibility limitations between OpenLDAP and Active Directory.

				<li>SAMBA BASICS </li>
<li>Samba Concepts and Architecture </li>
Samba daemons and components, key issues regarding heterogeneous network, Identify key TCP/UDP ports used with SMB/CIFS, Knowledge of Samba3 and Samba4 differences.

<li>Configure Samba </li>
Samba server configuration file structure, variables and configuration parameters, Troubleshoot and debug configuration problems.

<li>Regular Samba Maintenance </li>
Monitor and interact with running Samba daemons, Perform regular backups of Samba configuration and state data.

<li>Troubleshooting Samba </li>
Samba logging, Backup TDB files, Restore TDB files, Identify TDB file corruption, Edit / list TDB file content.

<li>Internationalization </li>
Internationalization character codes and code pages, differences in the name space between Windows and Linux/Unix with respect to share, names, user/group/computer naming in a non-English environment.

				<li>SAMBA SHARE CONFIGURATION </li>
<li>Linux File System and Share/Service Permissions </li>
File / directory permission control, Samba interaction with Linux file system permissions and ACLs, Use Samba VFS to store Windows ACLs.

<li>Print Services </li>
Printer sharing, integration between Samba and CUPS, Manage Windows print drivers and configure downloading of print drivers, security concerns with printer sharing.

				<li>SAMBA USER AND GROUP MANAGEMENT </li>
<li>Managing User Accounts and Groups </li>
User and group accounts, mappings, user account management tools, smbpasswd, file/directory ownership of objects.

<li>Authentication, Authorization and Winbind </li>
Local password database, password synchronization, passdb backends, Convert between passdb backends, Integrate Samba with LDAP, Winbind service, PAM and NSS.

				<li>SAMBA DOMAIN INTEGRATION </li>
<li>Samba as a PDC and BDC </li>
Domain membership and trust relationships, Create and maintain a PDC and BDC with Samba3/4, Add computers to an existing domain, logon scripts, roaming profiles, system policies.

<li>Samba4 as an AD compatible Domain </li>
Samba 4 as an AD DC, smbclient, how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP.

<li>Configure Samba as a Domain Member Server </li>
Joining Samba to NT4 and AD domains, obtain a TGT from a KDC.

				<li>SAMBA NAME SERVICES </li>
<li>NetBIOS and WINS </li>
WINS concepts, NetBIOS concepts, local master browser, domain master browser, Samba as a WINS server, name resolution, WINS replication, NetBIOS browsing and browser elections, NETBIOS name types.

<li>Active Directory Name Resolution </li>
DNS for Samba4 as an AD Domain Controller, DNS forwarding with the internal DNS server of Samba4.

		<li>WORKING WITH LINUX AND WINDOWS CLIENTS </li>
<li>CIFS Integration </li>
SMB/CIFS concepts, remote CIFS shares from a Linux client, securely storing CIFS credentials, features and benefits of CIFS, permissions and file ownership of remote CIFS shares.

<li>Working with Windows Clients </li>
browse lists and SMB clients from Windows, Share file/print resources from Windows, the smbclient program, the Windows net utility.
 </ul>

Systems & Network Training

Network & Security

Network Engineer

Integrating UNIX and Microsoft

General Admission

<h3>Integrating Linux and Microsoft course description</h3>
 This course is designed for the enterprise-level Linux
professional and represents the highest level of
professional, distribution-neutral Linux certification
within the industry. 
LPIC-3 300 covers administering Linux enterprise-wide with an
emphasis on mixed environments.
 
				<h5>What will you learn</h5>
				<ul>
				 
			 <li>Configure and troubleshoot OpenLDAP.</li>
					<li>Use OpenLDAP as an authentication backend.</li>
					<li>Manage software packages.</li>
 <li>Use Samba 
- Share configuration 
- User and group management 
- Domain integration 
- Name services 
- with Linux and Windows clients</li></ul> 
 <h5>
 Integrating Linux and Microsoft course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Enterprise-level Linux professionals.
						 
 
							<li>Prerequisites:</li>
							
 Delegates must have an active LPIC-2 certification to
receive LPIC-3 certification, but the LPIC-2 and LPIC-3
exams may be taken in any order.
							
 
							<li>Duration</li>
							
 5 days
						
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Integrating UNIX and Microsoft course contents</h3>
 <ul>
				<li>OPENLDAP CONFIGURATION </li>
<li>OpenLDAP replication </li>
Replication concepts, OpenLDAP replication, replication log files, replica hubs, LDAP referrals, LDAP sync replication.

<li>Securing the Directory </li>
Securing the directory with SSL and TLS, Firewall considerations, Unauthenticated access methods, User/password authentication methods, Maintanence of SASL user DB, certificates.

<li>OpenLDAP Server Performance Tuning </li>
Measure OpenLDAP performance, Tune software configuration to increase performance, indexes.

				<li>OPENLDAP AS AN AUTHENTICATION BACKEND LDAP </li>
<li>Integration with PAM and NSS </li>
Configure PAM to use LDAP for authentication, NSS to retrieve information from LDAP and PAM modules in UNIX.

<li>Integrating LDAP with Active Directory and Kerberos </li>
Kerberos integration with LDAP, Cross platform authentication, Single sign-on concepts, Integration and compatibility limitations between OpenLDAP and Active Directory.

				<li>SAMBA BASICS </li>
<li>Samba Concepts and Architecture </li>
Samba daemons and components, key issues regarding heterogeneous network, Identify key TCP/UDP ports used with SMB/CIFS, Knowledge of Samba3 and Samba4 differences.

<li>Configure Samba </li>
Samba server configuration file structure, variables and configuration parameters, Troubleshoot and debug configuration problems.

<li>Regular Samba Maintenance </li>
Monitor and interact with running Samba daemons, Perform regular backups of Samba configuration and state data.

<li>Troubleshooting Samba </li>
Samba logging, Backup TDB files, Restore TDB files, Identify TDB file corruption, Edit / list TDB file content.

<li>Internationalization </li>
Internationalization character codes and code pages, differences in the name space between Windows and Linux/Unix with respect to share, names, user/group/computer naming in a non-English environment.

				<li>SAMBA SHARE CONFIGURATION </li>
<li>Linux File System and Share/Service Permissions </li>
File / directory permission control, Samba interaction with Linux file system permissions and ACLs, Use Samba VFS to store Windows ACLs.

<li>Print Services </li>
Printer sharing, integration between Samba and CUPS, Manage Windows print drivers and configure downloading of print drivers, security concerns with printer sharing.

				<li>SAMBA USER AND GROUP MANAGEMENT </li>
<li>Managing User Accounts and Groups </li>
User and group accounts, mappings, user account management tools, smbpasswd, file/directory ownership of objects.

<li>Authentication, Authorization and Winbind </li>
Local password database, password synchronization, passdb backends, Convert between passdb backends, Integrate Samba with LDAP, Winbind service, PAM and NSS.

				<li>SAMBA DOMAIN INTEGRATION </li>
<li>Samba as a PDC and BDC </li>
Domain membership and trust relationships, Create and maintain a PDC and BDC with Samba3/4, Add computers to an existing domain, logon scripts, roaming profiles, system policies.

<li>Samba4 as an AD compatible Domain </li>
Samba 4 as an AD DC, smbclient, how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP.

<li>Configure Samba as a Domain Member Server </li>
Joining Samba to NT4 and AD domains, obtain a TGT from a KDC.

				<li>SAMBA NAME SERVICES </li>
<li>NetBIOS and WINS </li>
WINS concepts, NetBIOS concepts, local master browser, domain master browser, Samba as a WINS server, name resolution, WINS replication, NetBIOS browsing and browser elections, NETBIOS name types.

<li>Active Directory Name Resolution </li>
DNS for Samba4 as an AD Domain Controller, DNS forwarding with the internal DNS server of Samba4.

		<li>WORKING WITH LINUX AND WINDOWS CLIENTS </li>
<li>CIFS Integration </li>
SMB/CIFS concepts, remote CIFS shares from a Linux client, securely storing CIFS credentials, features and benefits of CIFS, permissions and file ownership of remote CIFS shares.

<li>Working with Windows Clients </li>
browse lists and SMB clients from Windows, Share file/print resources from Windows, the smbclient program, the Windows net utility.
 </ul>

Integrating Linux and Microsoft

<h3>Security+ training course description</h3>
 
 A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. 
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
 <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
 </ul>
 <h5>
 Security+ training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Those wishing to pass the Security+ exam.
 
							<li>Prerequisites:</li>
							
 TCP/IP foundation for engineers
 
							<li>Duration</li>
							
 5 days
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Security+ training course contents</h3>
				<ul>	<li>General security concepts</li>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					<li>Communication security</li>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	<li>Infrastructure security</li>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	<li>Cryptography basics</li>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	<li>Operational/Organisation security</li>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 

				</ul>

Security+

<h3>Netgear switches training course description</h3>
 
 A hands on course covering the product specifics of Netgear switches. Installation, configuration, maintenance and troubleshooting are all covered in a practical oriented way.
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Install Netgear switches.</li>
					<li>Use the command line interface and the web based interface to manage Netgear switches.</li>
 <li>Configure and troubleshoot Netgear switches.</li>
 <li>Perform software upgrades.</li>
 </ul>
 <h5>
 Netgear switches training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 
 Anyone working with Netgear switches. Particularly aimed at engineers and technicians supporting Netgear switches.
 
							<li>Prerequisites:</li>
							
 None.
 
							<li>Duration</li>
							
 2 days
 
							
 
 
						</ul>
					</div>
				</div>
			
				 <h3>Netgear switches training course content</h3>
 <ul>
				<li>Introduction </li>
How Ethernet works with hubs, How Ethernet works with switches. Installing Netgear switches.
 Hands on Building a network with a hub, building a network with a Netgear switch.

<li>Basic troubleshooting </li>
The Netgear switch range, LEDs, cabling issues, factory resets, default settings.
 Hands on Building a network with multiple Netgear switches.

<li>Configuration methods </li>
Managed vs. unmanaged switches, Console port access, telnet, web based access, SNMP, saving configurations, NVRAM, switch stacks, stacking ports.
 Hands on Accessing the switch using the console, IP address configuration, telnet.

<li>Console interface </li>
Password protection, the menus, menu options.
 Hands on Setting a password, displaying the switch configuration.

<li>Web based interface </li>
Getting started, basic format.
 Hands on Configuring the switch using the web interface.

<li>Port configuration </li>
Common port configuration tasks, port trunking.
 Hands on Configuring ports.

<li>STP configuration </li>
What is STP? Configuring STP.
 Hands on Enabling and disabling STP, configuring STP

<li>VLAN configuration </li>
What are VLANS? 802.1Q, tagged/untagged, creating VLANS, applying VLANS.
 Hands on Setting up VLANS, setting up 802.1Q, Inter VLAN traffic.

<li>Housekeeping </li>
TFTP, upgrades
 Hands on Boot from net.

<li>SNMP </li>
SNMP configuration, NMS's.
 Hands on Using SNMP to manage a Netgear switch, putting it all together: troubleshooting.

 </ul>

Netgear switches for engineers

<h3>Hardening Cisco devices training course description</h3>
 
 A hands on course focusing on how to lock down Cisco
IOS routers and switches. 
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Harden Cisco devices.</li>
 </ul>
 <h5>
 Hardening Cisco devices training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 
 Technical network staff. 
 Technical security staff.
 
							<li>Prerequisites:</li>
							
 TCP/IP foundation for engineers.
 
							<li>Duration</li>
							
 5 days
 
							
 
 
						</ul>
					</div>
				</div>
			
				
				 <h3>Hardening Cisco devices training course content</h3>
 <ul>
				<li>Introduction </li>
Router security, Switch security, Cisco IOS, IOS versions, Cisco advisories, the management plane, control plane, data plane.
 Hands on Checking IOS versions and advisories.

<li>Access control </li>
Infrastructure ACLs, Transit ACLs.
 Hands on Restricting access to the device, Filtering data traffic.

<li>Management plane: Securing operations </li>
Passwords, privilege levels, AAA, TACACS+, RADIUS.
 Hands on Password management.

<li>Management plane: Other general hardening </li>
Logging best practices, secure protocols, encrypting management sessions, configuration management.
 Hands on Hardening the management plane.

<li>Control plane </li>
Disabling reception and transmission of certain messages, Limiting CPU impact of control plane traffic, securing routing protocols.
 Hands on Hardening the control plane.

<li>Data plane </li>
Transit ACLs, disabling unused services, disabling unnecessary protocols, anti spoofing, limiting CPU impact of data plane traffic, identifying and tracing traffic, Netflow, VLANs, port security.
 Hands on hardening the data plane.
 

 </ul>

Hardening Cisco Devices

<h3>Penetration testing training course description</h3>
 
 An advanced technical hands on course focusing on hacking and counter hacking. The course revolves around a series of exercises based on "hacking" into a network (pen testing the network) and then defending against the hacks.
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Perform penetration tests.</li>
					<li>Explain the technical workings of various penetration tests.</li>
 <li>Produce reports on results of penetration tests.</li>
					<li>Defend against hackers. </li>
 </ul>
				
 <h5>Penetration testing training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Technical support staff, auditors and security
professionals. Staff who are responsible for network
infrastructure integrity.
 
							<li>Prerequisites:</li>
							
 IP Security 
 IP VPNs
 
							<li>Duration</li>
							
 5 days
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Penetration testing training course contents</h3>
				<ul>	<li>Introduction</li>
Hacking concepts, phases, types of attacks, 'White
hacking', What is penetration testing? Why use
pen testing, black box vs. white box testing,
equipment and tools, security lifecycles, counter
hacking, pen testing reports, methodologies, legal
issues.
					<li>Physical security and social engineering</li>
Testing access controls, perimeter reviews,
location reviews, alarm response testing. Request
testing, guided suggestions, trust testing. Social
engineering concepts, techniques, counter
measures, Identity theft, Impersonation on social
media, Footprints through social engineering
<li>Reconnaissance (discovery)</li>
Footprinting methodologies, concepts, threats and
countermeasures, WHOIS footprinting, Gaining
contacts and addresses, DNS queries, NIC
queries, ICMP ping sweeping, system and server
trails from the target network, information leaks,
competitive intelligence. Scanning pen testing.
<li>Gaining access</li>
Getting past passwords, password grinding,
spoofed tokens, replays, remaining anonymous.
<li>Scanning (enumeration)</li>
Gaining OS info, platform info, open port info,
application info. Routes used, proxies, firewalking,
Port scanning, stealth port scanning, vulnerability
scanning, FIN scanning, Xmas tree scanning, Null
scanning, spoofed scanning, Scanning beyond
IDS. Enumeration concepts, counter measures and
enumeration pen testing.
<li>Hacking</li>
Hacking webservers, web applications, Wireless
networks and mobile platforms. Concepts, threats,
methodology, hacking tools and countermeasures.
<li>Trojan, Backdoors, Sniffers, Viruses and Worms</li>
Detection, concepts, countermeasures, Pen
testing Trojans, backdoors, sniffers and viruses.
MAC attacks, DHCP attacks, ARP poisoning, DNS
poisoning Anti-Trojan software, Malware analysis
Sniffing tools.
<li>Exploiting (testing) vulnerabilities</li>
Buffer overflows,, simple exploits, brute force
methods, UNIX based, Windows based, specific
application vulnerabilities.
<li>DoS/DDoS</li>
Concepts, techniques, attack tools, Botnet,
countermeasures, protection tools, DoS attack pen
testing.
<li>SQL Injection</li>
Types and testing, Blind SQL Injection, Injection
tools, evasion and countermeasures.
<li>Securing networks</li>
'Hurdles', firewalls, DMZ, stopping port scans,
IDS, Honeypots, Router testing, firewall testing,
IDS testing, Buffer Overflow.
<li>Cryptography</li>
PKI, Encryption algorithms, tools, Email and Disk
Encryption.
<li>Information security</li>
Document grinding, privacy.

				</ul>

Penetration testing and Ethical Hacking

<h3>Samba training course description</h3>
 Samba enables UNIX/Linux machines to act as Microsoft File and Print servers. This two day hands on training course progresses from the basics of installing samba and simple configurations through to authentication issues and troubleshooting.
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Install and configure Samba.</li>
					<li>Administrate file and printer sharing.</li>
					<li>Secure Samba servers.</li>
 <li>Troubleshoot Samba</li>
 </ul>
 
 <h5>
 Samba training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Technical staff working with Samba.
 
							<li>Prerequisites:</li>
							
 Intro to UNIX Systems Administration 
 TCP/IP Foundation.
 
							<li>Duration</li>
							
 2 days
						
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Samba training course contents</h3>
 <ul>
				<li>What is Samba?</li>
File and print servers, Samba server roles,
Windows networking, NetBIOS, SMB. Hands on
Microsoft File and Print shares, analysing the
network traffic.
<li>Installing Samba</li>
Source, binaries, where to find samba, building
and compiling Samba. Hands on Download and
install Samba.
<li>Controlling Samba</li>
Samba daemons, starting and stopping Samba,
smbcontrol, Samba net command, smb.conf.
Viewing Samba status, smbclient. Hands on
Starting and stopping Samba, testing the server.
<li>Samba configuration</li>
Simple shares, smb.conf variables, configuration
from a web browser, swat, enabling access to
swat. Hands on Configuring samba servers and
clients.
<li>File sharing</li>
Basic shares, [homes], locking options, UNIX file
permissions, controlling user access, Windows
ACLs, virtual samba servers, browsing. Hands on
File sharing and browsing.
<li>Print sharing</li>
Sharing printers, UNIX printing, CUPS, printer
drivers, [printers], PRINT$. Hands on Samba print
server.
<li>Authentication</li>
Workgroups, domains, users and passwords,
Samba domain security, Samba password
backends: smbpasswd, tdbsam, nisplus, mysql,
Active Directory. Hands on Securing samba
shares.
	<li>Troubleshooting</li>
Logging options, controlling logs, Samba utilities,
network protocols, .SMB/CIFS. Performance
tuning. Hands on Troubleshooting Samba 

 </ul>

Definitive Samba for engineers

<h3>Apache training course description</h3>
 A hands on training course covering installation, configuration and management of the Apache web server. 
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Install Apache.</li>
					<li>Configure Apache.</li>
					<li>Manage Apache.</li>
					<li>Build static and dynamic web sites with Apache.</li>
					<li>Secure Apache.</li>
 </ul>
 
 
 <h5>
 Apache training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Technical staff working with Apache.
 
							<li>Prerequisites:</li>
							
 TCP/IP foundation for engineers. 
							UNIX fundamentals
 
							<li>Duration</li>
							
 3 days
						
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Apache training course contents</h3>
 <ul>
				<li>Installing Apache</li>
What is Apache? Apache versions, history, downloading Apache, source distribution, compilation, binary distribution, installation, platform considerations.
 Hands on Downloading and installing Apache.

<li>Controlling the Apache server</li>
Running Apache, automatic Apache start, starting, stopping, restarting Apache. Checking Apache status.
 Hands on Server control.

<li>Configuration</li>
Serving webpages, setting the document root, applying configuration changes, Configuration files, httpd.conf, syntax, directives, modules, utilities, turning features on/off.
 Hands on basic Apache configuration.

<li>More configuration</li>
MIME, URL mapping, content negotiation, indexing, performance tuning.

<li>Logging</li>
log file content, configuration, log file locations, error logging, browser errors, error page configuration, forbidden index pages.
 Hands on Log files.

<li>Security</li>
File permissions, .htaccess, protecting files with passwords, password files, authentication, restricting access by IP address.

<li>Secure HTTP</li>
HTTPS, installing mod_ssl, certificates, configuring mod_ssl, http and https coexistence

<li>Virtual hosts</li>
Multiple sites on one server, separate configuration files, IP based, name based, port based, virtual host names, enabling, defining, configuring, aliases, testing, https virtual hosts.
 Hands on Virtual hosts.

<li>Dynamic sites</li>
Dynamic sites, CGI, PHP, PERL, CGI programs, example CGI scripts, Apache and CGI, CGI parameters, CGI issues, PHP, mod_php, Perl and Apache, mod_perl, installing mod_perl.
 Hands on CGI, PHP and Perl with Apache.

<li>Modules</li>
What are modules, standard modules, loading modules, mod_speling, mod_rewrite, other special purpose modules, URL rewriting, redirection, URL transformation, browser dependent pages.
 Hands on Working with modules.

 </ul>

Definitive Apache for Engineers

<h3>SIP security training course description</h3>
 
 A hands-on course covering SIP security. It is assumed that delegates already know SIP as this course focuses purely on the security issues in SIP IP telephony networks. Hands-on practicals follow each major theory session and include use of various SIP security tools such as vomit, sipp, sipsak and sivus amongst others.
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Secure SIP networks</li>
					<li>Use various SIP security tools</li>
 </ul>
				
 <h5>SIP security training course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Technical staff working with SIP. 
 Technical security staff.
 
							<li>Prerequisites:</li>
							
 SIP for engineers
 
							<li>Duration</li>
							
 2 days
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>SIP security training course contents</h3>
				<ul>	<li>SIP review</li>
SIP infrastructure and entities, example SIP session.
 Hands on Simple SIP network with and without
authentication.
					<li>SIP security attacks</li>
 DOS attacks, infrastructure attacks, eavesdropping,
spoofing, replay, message integrity. Hands on Basic
SIP packet capture, infrastructure attacks.
<li>SIP tools</li>
 SIP packet creation: Sivus, SIPsak, PROTOS, SFTF,
SIP bomber, SIPp, Seagull, Nastysip. SIP packet
generators: SIPNess, NetDude. Monitoring:
Wireshark, Cain &amp; Abel, Vomit, Oreka, VoiPong.
Scripts and tools: SIP-Fun, Skora.net, kphone-ddos,
sip-scan, sip-kill, sip-redirectrtp. Health of different
tools. Hands on Generating SIP packets, rebuilding
conversations from captured packets, password
cracking.
<li>VPNs and SIP</li>
 IPSec, AH, ESP, transport mode, tunnel mode, Pre
Shared Keys, Public keys. Hands on SIP calls over
IPSec.
<li>Secure SIP signaling</li>
 SIP relationship with HTTP, Deprecated HTTP 1.0
basic authentication, HTTP 1.1 Digest authentication,
S/MIME, SIPS, SIPS URI, TLS, DTLS, PKI
infrastructures. Hands on SIP with TLS.
<li>Secure media streams</li>
 SRTP, features, packet format, default encryption,
default authentication, key distribution. S/MIME,
MIKEY, SDP security descriptions. SIP security
agreements. Hands on Analysing SRTP packets.
<li>Firewalls</li>
 NAT traversal. Impact of firewall on infrastructure
attacks. TLS and firewalls. SIP specific firewalls.
 Hands on SIP calls through a firewall. 


				</ul>

SIP security for engineers

<h3>Securing UNIX systems training course description</h3>
 This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. 
 
				<h5>What will you learn</h5>
				<ul>
				 
 <li>Secure UNIX accounts.</li>
					 <li>Secure UNIX file systems.</li>
 <li>Secure UNIX access through the network.</li>
 </ul>
 
 
 <h5>
 Securing UNIX systems course details </h5>
				<div>
					<div>
						<ul>
							<li> Who will benefit: </li>
							
 Linux technical staff needing to secure their systems.
 
							<li>Prerequisites:</li>
							
 Linux system administration (LPIC-1)
 
							<li>Duration</li>
							
 5 days
						
 
							
 
 
						</ul>
					</div>
				</div>
 <h3>Securing UNIX systems course contents</h3>
 <ul>
				<li>Cryptography</li>
<li>Certificates and Public Key Infrastructures</li>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
<li>Encryption, signing and authentication</li>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
<li>Encrypted File Systems</li>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
<li>DNS and cryptography</li>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				<li>Host Security</li>
<li>Host Hardening</li>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
<li>Host Intrusion Detection</li>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
<li>User Management and Authentication</li>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
<li>FreeIPA Installation and Samba Integration</li>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				<li>Access Control</li>
<li>Discretionary Access Control</li>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
<li>Mandatory Access Control</li>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
<li>etwork File Systems</li>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system. 
				<li>Network Security</li>
<li>Network Hardening</li>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
<li>Network Intrusion Detection</li>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
<li>Packet Filtering</li>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
<li>Virtual Private Networks</li>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.

 </ul>

Educators providing Courses in Coventry

Courses matching "Password"

Integrating UNIX and Microsoft

By Systems & Network Training

Integrating Linux and Microsoft

By Systems & Network Training

Security+

By Systems & Network Training

Netgear switches for engineers

By Systems & Network Training

Hardening Cisco Devices

By Systems & Network Training

Penetration testing and Ethical Hacking

By Systems & Network Training

Definitive Samba for engineers

By Systems & Network Training

Definitive Apache for Engineers

By Systems & Network Training

SIP security for engineers

By Systems & Network Training

Securing UNIX systems

By Systems & Network Training

Search By Location