Name: Real-World DevOps Project From Start to Finish
Price: 48.99 GBP
Availability: InStock

Redhill

<h3><b>CWSP training course description</b></h3>
        <p>A hands-on training course concentrating solely on WiFi security with an emphasis on the delegates learning the necessary knowledge and skills to pass the CWSP exam. The course progresses from simple authentication, encryption and key management onto in depth coverage of 802.X and EAP along with many other security solutions such as access control, intrusion prevention and secure roaming.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          
              							    <li>Demonstrate the threats to WiFi networks.</li>
              <li>Secure WiFi networks.</li>
              <li>Configure:
                <br />
                  WPA2<br />
                  RADIUS<br />
                  802.1x<br />
                  EAP<br />
               
					</li>
              <li>Pass the CWSP exam.</li>
      </ul>
     
        <h5>
        <b>CWSP training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network staff.<br />
         Technical security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>
                 Certified Wireless Network Associate.</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>CWSP training course contents</b></h3>
      <ul>
				<li>WLAN Security overview</li><p>
Standards, security basics, AAA, 802.11 security
history. <br /><span>Hands on</span> WLAN connectivity.
				</p><li>Legacy 802.11 security</li><p>
Authentication: Open system, shared key. WEP.
VPNs. MAC filters. SSID segmentation, SSID
cloaking. <br /><span>Hands on</span> Analysing 802.11 frame
exchanges, viewing hidden SSIDs.
</p><li>Encryption</li><p>
Basics, AES, TKIP, CCMP, WPA, WPA2. <br /><span>Hands on</span> Decrypting 802.11 data frames.
</p><li>802.11 layer 2 authentication</li><p>
802.1X: Supplicant, Authenticator, Authentication
server. Credentials. Legacy authentication. EAP,
Weak EAP protocols, Strong EAP protocols: EAP
-PEAP, EAP-TTLS, EAP-TLS, EAP-FAST. <br /><span>Hands on</span> Analysing 802.1X/EAP frames.
</p><li>802.11 layer 2 dynamic key generation</li><p>
Robust Security Network. <br /><span>Hands on</span>
Authentication and key management.
</p><li>SOHO 802.11 security</li><p>
WPA/WPA2 personal, Preshared Keys, WiFi
Protected Setup (WPS). <br /><span>Hands on</span> PSK
mapping.
</p><li>WLAN security infrastructure</li><p>
DS, Autonomous APs, WLAN controllers, split
MAC, mesh, bridging, location based access
control. Resilience. Wireless network
management system. RADIUS/LDAP servers,
PKI, RBAC. <br /><span>Hands on</span> 802.1X/EAP
configuration. RADIUS configuration.
</p><li>802.11 Fast secure roaming</li><p>
History, RSNA, OKC, Fast BSS transition,
802.11k. <br /><span>Hands on</span> Roaming.
</p><li>Wireless security risks</li><p>
Rogue devices, rogue prevention.
Eavesdropping, DOS attacks. Public access and
hotspots. <br /><span>Hands on</span> Backtrack.
</p><li>WiFi security auditing</li><p>
Layer 1 audit, layer 2 audit, pen testing. WLAN
security auditing tools.
</p><li>WiFi security monitoring</li><p>
Wireless Intrusion Detection and Prevention
Systems. Device classification, WIDS/WIPS
analysis. Monitoring. 802.11w. <br /><span>Hands on</span> Laptop
spectrum analysers.
</p><li>VPNs, remote access, guest access</li><p>
Role of VPNs in 802.11, remote access,
hotspots, captive portal.
</p><li>Wireless security policies</li><p>
General policy, functional policy,
recommendations.
 </p>

      </ul>

Systems & Network Training

Network & Security

Network Engineer

Certified Wireless Security Professional

General Admission

<h3><b>Advanced TCP/IP training course description</b></h3>
   <p>An intensive advanced TCP/IP course focusing on the details of the protocols according to the RFCs. This course is designed to go into the technical details of the protocols and is not for those that are new to TCP/IP. A particular focus is on TCP and performance. Those more interested in routing protocols should see our Definitive IP routing for engineers course. It is expected that delegates are totally familiar with configuration addressing. Hands on sessions consist of protocol analysis using Wireshark.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
       <li>Analyse packets and protocols in detail.</li>
              <li>Troubleshoot networks using Wireshark.</li>
              <li>Find performance problems using Wireshark.</li>
              <li>Perform network forensics.</li>
                  </ul>
        <h5><b>Advanced TCP/IP training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Advanced technical staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP Foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Advanced TCP/IP training course contents</b></h3>
				<ul>	<li>IP</li><p>
Fragmentation and MTU issues, Path MTU
discovery, Geolocation, unusual IP addresses,
forwarding broadcasts, DiffServ, DSCP, ECN,
assured and expedited forwarding. TTL usage in
traceroute, Protocol field. Sanitising IP addresses
in trace files. Wireshark and checksum errors.
</p><li>IPv6</li><p>
The header. Extension headers. Traffic class and
flow labels. Tunnelling. IPv6 and fragmentation.
</p><li>ARP</li><p>
Requests, responses, gratuitous ARP, Proxy ARP,
ARP poisoning.
</p><li>ICMP</li><p>
ping, Round Trip Times, ICMP redirect, ICMP
router advertisement and solicitation, Time
Exceeded, Destination unreachable. ICMPv6:
Similarity to ICMPv4, Neighbor discovery and the
replacement of ARP. MLD.
</p><li>First hop redundancy</li><p>
ICMP discovery, HSRP, VRRP, GLBP.
</p><li>IGMP</li><p>
Multicast overview, multicast architecture,
multicast addresses, IGMP v1, IGMPv2, IGMPv3.
</p><li>UDP</li><p>
Use in broadcasts and multicasts. Port numbers.
</p><li>TCP</li><p>
Connections, RST, FIN, sequence numbering,
packet loss recovery, Fast recovery, RTO timeout,
SACK, TCP flow control, receive window,
congestion window, van Jacobsen, nagle, delayed
ACKs, PSH, URG, TCP options, MSS, Window
scaling, TCP timestamps. Congestion notification.
<br /><span>Hands on</span> Troubleshooting with sequence
numbers, Wireshark IO and TCP graphs to
analyse performance. Window size issues.
</p><li>DHCP</li><p>
DHCP header. Relationship to BOOTP. Discover,
offer, request, decline, ACK, release. Lease,
renewal and rebind times. Relay agents. DHCPv6
</p><li>DNS</li><p>
Names and addresses, Resource Records,
queries, responses, problems. MDNS.
</p><li>HTTP</li><p>
Requests, methods, request modifiers, response
codes. HTTPS. SSL, TLS. Proxies. <br /><span>Hands on</span>
Redirects, recreating pages from packets.
</p><li>FTP</li><p>
Commands, responses, passive/active mode.
</p><li>Email</li><p>
SMTP, POP3, IMAP, commands responses.
</p><li>Voice and Video</li><p>
RTP, RTCP, SIP. IP PBXs. Traffic flows. <br /><span>Hands on</span> Voice playback.
</p><li>SNMP</li><p>
MIBs, GET, TRAP, polling.
</p><li>Performance</li><p>
Baselining, high latency, Wireshark and timings,
packet loss, redirections, small packets,
congestion, name resolution.
</p><li>Security</li><p>
Network forensics, scanning and discovery,
suspect traffic. IPsec, SSH.

</p>
				</ul>

Advanced TCP/IP

<h3><b>Total SIPp course description</b></h3>
      <p>SIPp is a robust performance testing tool designed for
evaluating the SIP protocol. This comprehensive
course takes you on a journey from the initial
installation of SIPp to mastering fundamental scenarios,
exploring diverse architectures, delving into statistics
analysis, and crafting XML scenario files. 

</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Monitor SIP traffic with SIPp.</li>
<li>Use SIPp for performance testing.</li>
<li>Use the standard SIPp scenarios.</li>
<li>Create custom scenarios in XML for SIPp.
</li>
                  </ul>
       
        <h5>
        <b>Total SIPp course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those working with SIP.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p> Definitive SIP for
engineers </p>
              
							<li><b>Duration</b></li>
							
              <p>2 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Total SIPp course contents</b></h3>
      <ul>
		  
<li>Introduction</li><p>
What is SIPp? SIP review: UAC, UAS, INVITE,
BYE. Sample SIP call flows. <br /><span>Hands on</span> Wireshark,
SIP call flow.
</p><li>Installing SIPp</li><p>
Getting SIPp, installing SIPp.
</p><li>Using SIPp</li><p>
Running sipp. sipp with uas scenario, sipp with uac
scenario. The integrated scenarios. Online help.
<br /><span>Hands on</span> uac, uas.
</p><li>Controlling SIPp</li><p>
Hot keys, commands, UDP socket. Running SIPp in
the background. Traffic control. SIPp performance
testing. <br /><span>Hands on</span> Changing call rates, remote
control, pausing traffic.
</p><li>Monitoring SIP traffic</li><p>
Scenario screen, statistics. Response times,
counters. <br /><span>Hands on</span> Monitoring SIP traffic.
</p><li>More integrated scenarios</li><p>
SIPp and media and RTP. 3PCC. 3PCC extended.
Transport modes: UDP, TCP, TLS, SCTP, IPv6
mono and multi socket. <br /><span>Hands on</span> Third Party Call
Control.
</p><li>XML</li><p>
What is XML? Content, markup, elements,
attributes. Start tags, end tags. <br /><span>Hands on</span>
Displaying embedded scenarios, looking at the XML
files of the integrated scenarios.
</p><li>Creating your own XML scenarios</li><p>
scenario, message commands, send, recv,
nop, pause, sendCmd, recvCmd,
common sipp scenario attributes, command specific
sipp scenario attributes. XML DTD, jEdit. <br /><span>Hands on</span>
uac and uas scenario XML files.
</p><li>Recv actions</li><p>
Log and warning, exec, variables, variable types,
variable scope. External variables.<br /><span>Hands on</span> RTP
streaming, Change a calls network destination,
injection files.
</p><li>Regular expressions</li><p>
What is an RE. POSIX 1003.2. Re injection.
Validation. <br /><span>Hands on</span> regex example.

</p>
      </ul>

Total SIPp for engineers

<h3><b>IP broadcast training course description</b></h3>
        <p>A current hot topic in recent years has been the provision of multimedia services over IP networks aka triple or quadruple play. This course investigates the characteristics of video transmission and then studies the impact on IP networks.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
         <li>Use Wireshark to analyse and troubleshoot TV streams.</li>
											<li>Describe techniques, which can be used in IP to provide low uniform delay.</li>
											<li>Evaluate IPTV technologies.</li>
											<li>Design data networks, which will support IPTV.</li>
                  </ul>
       
        <h5>
        <b>IP broadcast training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in broadcast. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>IP broadcast training course contents</b></h3>
      <ul>
				<li>What is IPTV?</li><p>
What is IP? What is TV? Pixels, frames, colour,
digital modulation, digital video broadcasting.
SDTV, HDTV, 4K. IPTV architectures,
Contribution, distribution, delivery. IPTV
standards. <br /><span>Hands on</span> Base IP connectivity, VLC.
</p><li>IPTV protocol stacks</li><p>
IP, TCP, UDP, RTP. IPv6. HTTP. Bandwidth
requirements. <br /><span>Hands on</span> IPTV bandwidth
calculations.
</p><li>Video codecs</li><p>
What is a CODEC, pictures and audio, digitisation,
sampling, quantisation, encoding, compressing.
MPEG, bit rates, resolution. I, B, P frames, GOP.
MPEG 2, MPEG 4, H.264, H.265, VP9, AV1.
<br /><span>Hands on</span> Analysing MPEG frames.
</p><li>IP issues</li><p>
Quality vs. bandwidth. Bandwidth, delay, latency,
jitter, signalling. Routers. <br /><span>Hands on</span> Analysing
jitter and other performance issues.
</p><li>IPTV performance and QoS</li><p>
IP DSCP field, queuing strategies; FIFO, WFQ,
custom, priority, RED. Differentiated services,
Diffserv. 802.1Q. Traffic shaping. QoE. <br /><span>Hands on</span>
best effort versus prioritisation.
</p><li>UDP versus TCP</li><p>
Reliable, unreliable, connection oriented,
connectionless. Broadcasts, multicasts and
unicasts. TCP flow control, TCP and
performance. <br /><span>Hands on</span> TCP window sizes.
</p><li>RTP</li><p>
RTP, ports, mixers, translators, RTCP, SMPTE,
FEC. <br /><span>Hands on</span> RTP analysis with Wireshark.
</p><li>Multicasting</li><p>
Multicasting compared to unicasting and
broadcasting, when to use and when not to use
multicasting. IGMP, PIM-SM, SSM. MLD. <br /><span>Hands on</span> Analysing multicast streams.
</p><li>OTT TV</li><p>
HTTP, HTTPS, Chunked HTTP. Adaptive
streaming. HTML5. DASH vs HLS. <br /><span>Hands on</span>
Analysing HTTP streams.
</p><li>Security</li><p>
Firewalls, TLS, DRM, watermarking. Encryption.
Geolocation. VPNs.
</p><li>IPTV architecture and other protocols</li><p>
Content providers, Service providers, delivery
networks, home networks. Caching, Service
discovery. RTSP. SAP, SDP. DHCP, DNS, NTP  </p>
      </ul>

IP broadcast fundamentals

<h3><b>IPTV training course description</b></h3>
   <p>A current hot topic in recent years has been the provision of multimedia services over IP networks aka triple or quadruple play. This course investigates the characteristics of video transmission and then studies the impact on IP networks.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
        <li>Use Wireshark to analyse and troubleshoot TV streams.</li>
					<li>Describe techniques, which can be used in IP to provide low uniform delay. </li> 
					<li>Evaluate IPTV technologies.</li>
					<li>Design data networks, which will support IPTV.</li>
                  </ul>
        <h5><b>IPTV training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working with IPTV. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP Foundation for engineers
							<br />Intro to data communications &amp; networking.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>IPTV training course contents</b></h3>
				<ul>	<li>What is IPTV?</li><p>
What is IP? What is TV? Pixels, frames, colour,
digital modulation, digital video broadcasting.
SDTV, HDTV, 4K. IPTV architectures,
Contribution, distribution, delivery. IPTV
standards. <br /><span>Hands on</span> Base IP connectivity, VLC.
</p><li>IPTV protocol stacks</li><p>
IP, TCP, UDP, RTP. IPv6. HTTP. Bandwidth
requirements. <br /><span>Hands on</span> IPTV bandwidth
calculations.
</p><li>Video codecs</li><p>
What is a CODEC, pictures and audio, digitisation,
sampling, quantisation, encoding, compressing.
MPEG, bit rates, resolution. I, B, P frames, GOP.
MPEG 2, MPEG 4, H.264, H.265, VP9, AV1.
<br /><span>Hands on</span> Analysing MPEG frames.
</p><li>IP issues</li><p>
Quality vs. bandwidth. Bandwidth, delay, latency,
jitter, signalling. Routers. <br /><span>Hands on</span> Analysing
jitter and other performance issues.
</p><li>IPTV performance and QoS</li><p>
IP DSCP field, queuing strategies; FIFO, WFQ,
custom, priority, RED. Differentiated services,
Diffserv. 802.1Q. Traffic shaping. QoE. <br /><span>Hands on</span>
best effort versus prioritisation.
</p><li>UDP versus TCP</li><p>
Reliable, unreliable, connection oriented,
connectionless. Broadcasts, multicasts and
unicasts. TCP flow control, TCP and
performance. <br /><span>Hands on</span> TCP window sizes.
</p><li>RTP</li><p>
RTP, ports, mixers, translators, RTCP, SMPTE,
FEC. <br /><span>Hands on</span> RTP analysis with Wireshark.
</p><li>Multicasting</li><p>
Multicasting compared to unicasting and
broadcasting, when to use and when not to use
multicasting. IGMP, PIM-SM, SSM. MLD. <br /><span>Hands on</span> Analysing multicast streams.
</p><li>OTT TV</li><p>
HTTP, HTTPS, Chunked HTTP. Adaptive
streaming. HTML5. DASH vs HLS. <br /><span>Hands on</span>
Analysing HTTP streams.
</p><li>Security</li><p>
Firewalls, TLS, DRM, watermarking. Encryption.
Geolocation. VPNs.
</p><li>IPTV architecture and other protocols</li><p>
Content providers, Service providers, delivery
networks, home networks. Caching, Service
discovery. RTSP. SAP, SDP. DHCP, DNS, NTP
<br /><span>Hands on</span> Fixing the network. 

</p>
				</ul>

Total IPTV for engineers

<h3><b>SIP in IMS training course description</b></h3>
      <p>The IP Multimedia Core Network Subsystem (IMS) is defined by 3GPP as a new mobile infrastructure. This advanced course looks at the use of SIP in the IMS.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
				   <li>Describe the role of SIP in the IMS.</li>
					<li>Explain how SIP works in the IMS</li>
					<li>Describe the SIP architecture in the IMS.</li>
                    <li>Explain how SIP and SDP are used in basic IMS procedures.</li>
                  </ul>
        <h5>
        <b>SIP in IMS training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical telecommunications staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p> SIP for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>SIP in IMS training course contents</b></h3>
      <ul>
				<li>Introduction </li><p>
SIP review, SIP elements, Simple SIP call flow, What is IMS? Why IMS? Why SIP in the IMS? SIP and IMS relationship.

</p><li>Standards </li><p>
3GPP, IETF, 3GPPr5, 3GPPr6, 3GPP SIP extensions.

</p><li>SIP and IMS </li><p>
IMS architecture, SIP interfaces.

</p><li>Server functions </li><p>
Registration, home and away, location and directory services, stateful and stateless servers.

</p><li>SIP servers </li><p>
P-CSCF, I-CSCF, S-CSCF, PSTN gateways

</p><li>SIP registration in the IMS </li><p>
SIP REGISTER, IMS identities, registration process, P-CSCF discovery, S-CSCF assignment, IMS subscriber and IMS registrar signalling flow. IMS routing in the registration process. Re and De-registration.

</p><li>SIP sessions in the IMS </li><p>
SIP INVITE, Establishing IMS SIP sessions, User at home network, user roaming, IMS offer answer architecture, SIP preconditions, QoS, reserving resources, IMS bearer network interactions, IMS subscriber and IMS service signalling flow. Typical call flows.

</p><li>SIP services in the IMS </li><p>
IMS specifications, IMS service procedures, call scenarios, call services. IMS multimedia related procedures. IMS presence, IMS messaging, IMS conferencing, IMS PoC.

</p><li>SIP-T </li><p>
SIP and the PSTN, URIs and ENUM, NAPTR, SRV, ISUP numbers and URI mapping, IAM and INVITE, SIP to PSTN/ISUP mapping, PSTN/ISUP to SIP mapping, PSTN to PSTN over SIP. MIME media types for ISUP, DTMF transmission, CLIP and CLIR in SIP, ring tone, split gateways

</p><li>SIP-I </li><p>
ISO standards, translation versus tunnelling.

</p><li>IMS SIP extensions </li><p>
Security (RFC 3310, 3329), Resource reservation (RFC 3312), Media authorisation (RFC 3313), SigComp (RFC 3320), P Headers (RFC 3325, 3455), Mobile registration (RFC 3327, 3608), Reg event (RFC 3680), Preconditions (RFC 4032)

</p><li>Security </li><p>
IMS security architecture, identities, HTTP digest, TLS. Affect of security on SIP media sessions.
</p>
      </ul>

Definitive SIP in the IMS for engineers

<h3><b>SMTP training course description</b></h3>
      <p>A hands on course focusing on the workings of email systems and the standard protocols that they use. The course is not specific to any particular implementation, but some vendor specifics are noted. Linux and Microsoft machines are used in hands on sessions to reinforce the theory of major sessions. The course concentrates on troubleshooting and interworking using network sniffing and protocol inspection rather than "which
buttons to push". </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
        <li>Describe and explain
                   
                    	<br />SMTP<br />
                        MIME<br />
                        POP3<br />
                        IMAP<br />
                        PGP, GPG, S/MIME<br />
                        SPF, DKIM, DMARC</li>
                  
					<li>Configure mail routing</li>
					<li>Secure email systems </li>
                  </ul>
       
        <h5>
        <b>SMTP training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff responsible for email systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p> TCP/IP foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>SMTP training course contents</b></h3>
      <ul>
				<li>SMTP architecture</li><p>
What is SMTP, email before SMTP, SMTP history,
the different protocols, clients, servers. Email
composition, transmission, delivering emails,
storing and reading emails. MUAs, MTAs, POP3,
IMAP, SMTP, DNS, webmail.
<br /><span>Hands on</span> Setting up MTAs and MUAs
and sending a simple email using telnet.
</p><li>The SMTP protocol</li><p>
SMTP protocol stack, SMTP headers, HELO,
SMTP mail, MAIL FROM, RCPT TO, DATA,
SMTPUTF8, 8BITMIME, TURN, EHLO, ETRN, 3
digit replies.
<br /><span>Hands on</span> Analysing SMTP packets on a
network.
</p><li>DNS and SMTP</li><p>
SMTP forwarding, SMTP relays, interoperation,
how SMTP uses DNS, MX records.
<br /><span>Hands on</span> Setting up mail relays.
</p><li>SMTP headers</li><p>
IMF data, From, to, cc, bcc, sender and recipient
headers, message Ids, received trails, in-reply-to,
received-SPF, mail list headers.
<br /><span>Hands on</span> Using clients to analyse
details from mail headers, including true
originators and path of emails.
</p><li>MIME</li><p>
Email attachments, MIME versions, content type
headers, encoding, base 64, binary data, multi
part headers, troubleshooting attachments.
<br /><span>Hands on</span> Analysing MIME headers and
attachments.
</p><li>POP3</li><p>
What is POP3, where to use POP3, authorisation,
transactions, POP3 commands: USER, PASS,
STAT, LIST, RETR, DELE.
<br /><span>Hands on</span> Setting up a POP3 server,
analysing POP3 packets on a network.
</p><li>IMAP and IMAPS</li><p>
What is IMAP, where to use IMAP, authorisation,
mailbox structure, IMAP commands: LOGIN,
AUTHENTICATE, LIST, CREATE, Examine
(message flags), SELECT, STORE.
<br /><span>Hands on</span> Setting up an IMAP server
and analysing IMAP packets on a network.
</p><li>Interoperation</li><p>
Mail gateways, addressing, Exchange, sendmail.
</p><li>Email security</li><p>
Basics, Transport level: STARTTLS. Content:
PGP/GPG, mail signing and encryption, S/MIME,
digital certificates, secure email submission.
<br /><span>Hands on</span> Setting up and using a PGP
key, configure MTAs to use TLS.
</p><li>Email authentication and spam prevention</li><p>
Mail relays, grey listing, block list &amp; RBL, DNSBL
(Real-time Black hole List), White list, SPF,
Domain Keys Identified Mail (DKIM), Author
Domain Signing Practices (ADSP), Abuse Report
Format (ARF), Domain-based Message
Authentication, Reporting and Conformance
(DMARC).
<br /><span>Hands on</span> Relay spamming and the
blocking spamming.
</p>
      </ul>

Total SMTP and email for engineers

<h3><b>Integrating UNIX and Microsoft course description</b></h3>
      <p>This course is designed for the enterprise-level UNIX
professional and represents the highest level of
professional, distribution-neutral UNIX certification
within the industry.<br /><br />
It covers administering UNIX enterprise-wide with an
emphasis on mixed environments.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
			 <li>Configure and troubleshoot OpenLDAP.</li>
					<li>Use OpenLDAP as an authentication backend.</li>
					<li>Manage software packages.</li>
                    <li>Use Samba<br />
- Share configuration<br />
- User and group management<br />
- Domain integration<br />
- Name services<br />
- with Linux and Windows clients</li></ul> 
        <h5>
        <b>Integrating UNIX and Microsoft course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Enterprise-level UNIX professionals.</p>
						   
              
							<li><b>Prerequisites:</b></li>
							
              <p>UNIX network administration.
							</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Integrating UNIX and Microsoft course contents</b></h3>
      <ul>
				<li><b>OPENLDAP CONFIGURATION</b> </li><p>
</p><li>OpenLDAP replication </li><p>
Replication concepts, OpenLDAP replication, replication log files, replica hubs, LDAP referrals, LDAP sync replication.

</p><li>Securing the Directory </li><p>
Securing the directory with SSL and TLS, Firewall considerations, Unauthenticated access methods, User/password authentication methods, Maintanence of SASL user DB, certificates.

</p><li>OpenLDAP Server Performance Tuning </li><p>
Measure OpenLDAP performance, Tune software configuration to increase performance, indexes.

				</p><li><b>OPENLDAP AS AN AUTHENTICATION BACKEND LDAP</b> </li><p>
</p><li>Integration with PAM and NSS </li><p>
Configure PAM to use LDAP for authentication, NSS to retrieve information from LDAP and PAM modules in UNIX.

</p><li>Integrating LDAP with Active Directory and Kerberos </li><p>
Kerberos integration with LDAP, Cross platform authentication, Single sign-on concepts, Integration and compatibility limitations between OpenLDAP and Active Directory.

				</p><li><b>SAMBA BASICS</b> </li><p>
</p><li>Samba Concepts and Architecture </li><p>
Samba daemons and components, key issues regarding heterogeneous network, Identify key TCP/UDP ports used with SMB/CIFS, Knowledge of Samba3 and Samba4 differences.

</p><li>Configure Samba </li><p>
Samba server configuration file structure, variables and configuration parameters, Troubleshoot and debug configuration problems.

</p><li>Regular Samba Maintenance </li><p>
Monitor and interact with running Samba daemons, Perform regular backups of Samba configuration and state data.

</p><li>Troubleshooting Samba </li><p>
Samba logging, Backup TDB files, Restore TDB files, Identify TDB file corruption, Edit / list TDB file content.

</p><li>Internationalization </li><p>
Internationalization character codes and code pages, differences in the name space between Windows and Linux/Unix with respect to share, names, user/group/computer naming in a non-English environment.

				</p><li><b>SAMBA SHARE CONFIGURATION</b> </li><p>
</p><li>Linux File System and Share/Service Permissions </li><p>
File / directory permission control, Samba interaction with Linux file system permissions and ACLs, Use Samba VFS to store Windows ACLs.

</p><li>Print Services </li><p>
Printer sharing, integration between Samba and CUPS, Manage Windows print drivers and configure downloading of print drivers, security concerns with printer sharing.

				</p><li><b>SAMBA USER AND GROUP MANAGEMENT</b> </li><p>
</p><li>Managing User Accounts and Groups </li><p>
User and group accounts, mappings, user account management tools, smbpasswd, file/directory ownership of objects.

</p><li>Authentication, Authorization and Winbind </li><p>
Local password database, password synchronization, passdb backends, Convert between passdb backends, Integrate Samba with LDAP, Winbind service, PAM and NSS.

				</p><li><b>SAMBA DOMAIN INTEGRATION</b> </li><p>
</p><li>Samba as a PDC and BDC </li><p>
Domain membership and trust relationships, Create and maintain a PDC and BDC with Samba3/4, Add computers to an existing domain, logon scripts, roaming profiles, system policies.

</p><li>Samba4 as an AD compatible Domain </li><p>
Samba 4 as an AD DC, smbclient, how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP.

</p><li>Configure Samba as a Domain Member Server </li><p>
Joining Samba to NT4 and AD domains, obtain a TGT from a KDC.

				</p><li><b>SAMBA NAME SERVICES</b> </li><p>
</p><li>NetBIOS and WINS </li><p>
WINS concepts, NetBIOS concepts, local master browser, domain master browser, Samba as a WINS server, name resolution, WINS replication, NetBIOS browsing and browser elections, NETBIOS name types.

</p><li>Active Directory Name Resolution </li><p>
DNS for Samba4 as an AD Domain Controller, DNS forwarding with the internal DNS server of Samba4.

		</p><li><b>WORKING WITH LINUX AND WINDOWS CLIENTS</b> </li><p>
</p><li>CIFS Integration </li><p>
SMB/CIFS concepts, remote CIFS shares from a Linux client, securely storing CIFS credentials, features and benefits of CIFS, permissions and file ownership of remote CIFS shares.

</p><li>Working with Windows Clients </li><p>
browse lists and SMB clients from Windows, Share file/print resources from Windows, the smbclient program, the Windows net utility.</p>
      </ul>

Integrating UNIX and Microsoft

<h3><b>Integrating Linux and Microsoft course description</b></h3>
      <p>This course is designed for the enterprise-level Linux
professional and represents the highest level of
professional, distribution-neutral Linux certification
within the industry.<br /><br />
LPIC-3 300 covers administering Linux enterprise-wide with an
emphasis on mixed environments.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
			 <li>Configure and troubleshoot OpenLDAP.</li>
					<li>Use OpenLDAP as an authentication backend.</li>
					<li>Manage software packages.</li>
                    <li>Use Samba<br />
- Share configuration<br />
- User and group management<br />
- Domain integration<br />
- Name services<br />
- with Linux and Windows clients</li></ul> 
        <h5>
        <b>Integrating Linux and Microsoft course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Enterprise-level Linux professionals.</p>
						   
              
							<li><b>Prerequisites:</b></li>
							
              <p>Delegates must have an active LPIC-2 certification to
receive LPIC-3 certification, but the LPIC-2 and LPIC-3
exams may be taken in any order.
							</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Integrating UNIX and Microsoft course contents</b></h3>
      <ul>
				<li><b>OPENLDAP CONFIGURATION</b> </li><p>
</p><li>OpenLDAP replication </li><p>
Replication concepts, OpenLDAP replication, replication log files, replica hubs, LDAP referrals, LDAP sync replication.

</p><li>Securing the Directory </li><p>
Securing the directory with SSL and TLS, Firewall considerations, Unauthenticated access methods, User/password authentication methods, Maintanence of SASL user DB, certificates.

</p><li>OpenLDAP Server Performance Tuning </li><p>
Measure OpenLDAP performance, Tune software configuration to increase performance, indexes.

				</p><li><b>OPENLDAP AS AN AUTHENTICATION BACKEND LDAP</b> </li><p>
</p><li>Integration with PAM and NSS </li><p>
Configure PAM to use LDAP for authentication, NSS to retrieve information from LDAP and PAM modules in UNIX.

</p><li>Integrating LDAP with Active Directory and Kerberos </li><p>
Kerberos integration with LDAP, Cross platform authentication, Single sign-on concepts, Integration and compatibility limitations between OpenLDAP and Active Directory.

				</p><li><b>SAMBA BASICS</b> </li><p>
</p><li>Samba Concepts and Architecture </li><p>
Samba daemons and components, key issues regarding heterogeneous network, Identify key TCP/UDP ports used with SMB/CIFS, Knowledge of Samba3 and Samba4 differences.

</p><li>Configure Samba </li><p>
Samba server configuration file structure, variables and configuration parameters, Troubleshoot and debug configuration problems.

</p><li>Regular Samba Maintenance </li><p>
Monitor and interact with running Samba daemons, Perform regular backups of Samba configuration and state data.

</p><li>Troubleshooting Samba </li><p>
Samba logging, Backup TDB files, Restore TDB files, Identify TDB file corruption, Edit / list TDB file content.

</p><li>Internationalization </li><p>
Internationalization character codes and code pages, differences in the name space between Windows and Linux/Unix with respect to share, names, user/group/computer naming in a non-English environment.

				</p><li><b>SAMBA SHARE CONFIGURATION</b> </li><p>
</p><li>Linux File System and Share/Service Permissions </li><p>
File / directory permission control, Samba interaction with Linux file system permissions and ACLs, Use Samba VFS to store Windows ACLs.

</p><li>Print Services </li><p>
Printer sharing, integration between Samba and CUPS, Manage Windows print drivers and configure downloading of print drivers, security concerns with printer sharing.

				</p><li><b>SAMBA USER AND GROUP MANAGEMENT</b> </li><p>
</p><li>Managing User Accounts and Groups </li><p>
User and group accounts, mappings, user account management tools, smbpasswd, file/directory ownership of objects.

</p><li>Authentication, Authorization and Winbind </li><p>
Local password database, password synchronization, passdb backends, Convert between passdb backends, Integrate Samba with LDAP, Winbind service, PAM and NSS.

				</p><li><b>SAMBA DOMAIN INTEGRATION</b> </li><p>
</p><li>Samba as a PDC and BDC </li><p>
Domain membership and trust relationships, Create and maintain a PDC and BDC with Samba3/4, Add computers to an existing domain, logon scripts, roaming profiles, system policies.

</p><li>Samba4 as an AD compatible Domain </li><p>
Samba 4 as an AD DC, smbclient, how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP.

</p><li>Configure Samba as a Domain Member Server </li><p>
Joining Samba to NT4 and AD domains, obtain a TGT from a KDC.

				</p><li><b>SAMBA NAME SERVICES</b> </li><p>
</p><li>NetBIOS and WINS </li><p>
WINS concepts, NetBIOS concepts, local master browser, domain master browser, Samba as a WINS server, name resolution, WINS replication, NetBIOS browsing and browser elections, NETBIOS name types.

</p><li>Active Directory Name Resolution </li><p>
DNS for Samba4 as an AD Domain Controller, DNS forwarding with the internal DNS server of Samba4.

		</p><li><b>WORKING WITH LINUX AND WINDOWS CLIENTS</b> </li><p>
</p><li>CIFS Integration </li><p>
SMB/CIFS concepts, remote CIFS shares from a Linux client, securely storing CIFS credentials, features and benefits of CIFS, permissions and file ownership of remote CIFS shares.

</p><li>Working with Windows Clients </li><p>
browse lists and SMB clients from Windows, Share file/print resources from Windows, the smbclient program, the Windows net utility.</p>
      </ul>

Integrating Linux and Microsoft

Packt

DevOps

Docker

Borg

Ansible

Automation

Embark on a transformative DevOps journey! This comprehensive course equips you with skills in Ansible, Docker, GitLab, backups, and more. Master the art of self-hosting your infrastructure, streamlining deployments, and boosting efficiency. Launch your DevOps career today and unleash the endless possibilities!

Real-World DevOps Project From Start to Finish

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.</p><p></p><p></p><p>This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization?s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.</p><p></p>Prerequisites<p></p><li>AZ-104T00 - Microsoft Azure Administrator</li>  <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li>  <li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li>  <li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li>  <li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li><p></p></div><div id="course-pills-2"><h3>1 - Manage identities in Microsoft Entra ID</h3> <ul> <li>Secure users in Microsoft Entra ID</li> <li>Secure groups in Microsoft Entra ID</li> <li>Recommend when to use external identities</li> <li>Secure external identities</li> <li>Implement Microsoft Entra Identity protection</li> </ul> <h3>2 - Manage authentication by using Microsoft Entra ID</h3> <ul> <li>Configure Microsoft Entra Verified ID</li> <li>Implement multifactor authentication (MFA)</li> <li>Implement passwordless authentication</li> <li>Implement password protection</li> <li>Implement single sign-on (SSO)</li> <li>Integrate single sign-on (SSO) and identity providers</li> <li>Recommend and enforce modern authentication protocols </li> </ul> <h3>3 - Manage authorization by using Microsoft Entra ID</h3> <ul> <li>Configure Azure role permissions for management groups, subscriptions, resource groups, and resources</li> <li>Assign built-in roles in Microsoft Entra ID</li> <li>Assign built-in roles in Azure</li> <li>Create and assign a custom role in Microsoft Entra ID</li> <li>Implement and manage Microsoft Entra Permissions Management</li> <li>Configure Microsoft Entra Privileged Identity Management </li> <li>Configure role management and access reviews by using Microsoft Entra Identity Governance</li> <li>Implement Conditional Access policies</li> </ul> <h3>4 - Manage application access in Microsoft Entra ID</h3> <ul> <li>Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants</li> <li>Manage app registrations in Microsoft Entra ID</li> <li>Configure app registration permission scopes</li> <li>Manage app registration permission consent</li> <li>Manage and use service principals</li> <li>Manage managed identities for Azure resources</li> <li>Recommend when to use and configure a Microsoft Entra Application Proxy, including authentication</li> </ul> <h3>5 - Plan and implement security for virtual networks</h3> <ul> <li>Plan and implement Network Security Groups (NSGs) and Application Security Groups (ASGs)</li> <li>Plan and implement User-Defined Routes (UDRs)</li> <li>Plan and implement Virtual Network peering or gateway</li> <li>Plan and implement Virtual Wide Area Network, including secured virtual hub</li> <li>Secure VPN connectivity, including point-to-site and site-to-site</li> <li>Implement encryption over ExpressRoute</li> <li>Configure firewall settings on PaaS resources</li> <li>Monitor network security by using Network Watcher, including NSG flow logging</li> </ul> <h3>6 - Plan and implement security for private access to Azure resources</h3> <ul> <li>Plan and implement virtual network Service Endpoints</li> <li>Plan and implement Private Endpoints</li> <li>Plan and implement Private Link services</li> <li>Plan and implement network integration for Azure App Service and Azure Functions</li> <li>Plan and implement network security configurations for an App Service Environment (ASE)</li> <li>Plan and implement network security configurations for an Azure SQL Managed Instance</li> </ul> <h3>7 - Plan and implement security for public access to Azure resources</h3> <ul> <li>Plan and implement Transport Layer Security (TLS) to applications, including Azure App Service and API Management</li> <li>Plan, implement, and manage an Azure Firewall, Azure Firewall Manager and firewall policies</li> <li>Plan and implement an Azure Application Gateway</li> <li>Plan and implement an Azure Front Door, including Content Delivery Network (CDN)</li> <li>Plan and implement a Web Application Firewall (WAF)</li> <li>Recommend when to use Azure DDoS Protection Standard</li> </ul> <h3>8 - Plan and implement advanced security for compute</h3> <ul> <li>Plan and implement remote access to public endpoints, Azure Bastion and just-in-time (JIT) virtual machine (VM) access</li> <li>Configure network isolation for Azure Kubernetes Service (AKS)</li> <li>Secure and monitor AKS</li> <li>Configure authentication for AKS</li> <li>Configure security for Azure Container Instances (ACIs)</li> <li>Configure security for Azure Container Apps (ACAs)</li> <li>Manage access to Azure Container Registry (ACR)</li> <li>Configure disk encryption, Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption</li> <li>Recommend security configurations for Azure API Management</li> </ul> <h3>9 - Plan and implement security for storage</h3> <ul> <li>Configure access control for storage accounts</li> <li>Manage life cycle for storage account access keys</li> <li>Select and configure an appropriate method for access to Azure Files</li> <li>Select and configure an appropriate method for access to Azure Blob Storage</li> <li>Select and configure an appropriate method for access to Azure Tables</li> <li>Select and configure an appropriate method for access to Azure Queues</li> <li>Select and configure appropriate methods for protecting against data security threats, including soft delete, backups, versioning, and immutable storage</li> <li>Configure Bring your own key (BYOK)</li> <li>Enable double encryption at the Azure Storage infrastructure level</li> </ul> <h3>10 - Plan and implement security for Azure SQL Database and Azure SQL Managed Instance</h3> <ul> <li>Enable database authentication by using Microsoft Entra ID</li> <li>Enable and monitor database audit</li> <li>Identify use cases for the Microsoft Purview governance portal</li> <li>Implement data classification of sensitive information by using the Microsoft Purview governance portal</li> <li>Plan and implement dynamic mask</li> <li>Implement transparent data encryption?</li> <li>Recommend when to use Azure SQL Database Always Encrypted</li> </ul> <h3>11 - Plan, implement, and manage governance for security</h3> <ul> <li>Create, assign, and interpret security policies and initiatives in Azure Policy</li> <li>Configure security settings by using Azure Blueprint</li> <li>Deploy secure infrastructures by using a landing zone</li> <li>Create and configure an Azure Key Vault</li> <li>Recommend when to use a dedicated Hardware Security Module (HSM)</li> <li>Configure access to Key Vault, including vault access policies and Azure Role Based Access Control</li> <li>Manage certificates, secrets, and keys</li> <li>Configure key rotation</li> <li>Configure backup and recovery of certificates, secrets, and keys</li> </ul> <h3>12 - Manage security posture by using Microsoft Defender for Cloud</h3> <ul> <li>Implement Microsoft Defender for Cloud</li> <li>Identify and remediate security risks by using the Microsoft Defender for Cloud Secure Score and Inventory</li> <li>Assess compliance against security frameworks and Microsoft Defender for Cloud</li> <li>Add industry and regulatory standards to Microsoft Defender for Cloud</li> <li>Add custom initiatives to Microsoft Defender for Cloud</li> <li>Connect hybrid cloud and multicloud environments to Microsoft Defender for Cloud</li> <li>Identify and monitor external assets by using Microsoft Defender External Attack Surface Management</li> </ul> <h3>13 - Configure and manage threat protection by using Microsoft Defender for Cloud</h3> <ul> <li>Enable workload protection services in Microsoft Defender for Cloud, including Microsoft Defender for Storage, Databases, Containers, App Service, Key Vault, Resource Manager, and DNS</li> <li>Configure Microsoft Defender for Servers</li> <li>Configure Microsoft Defender for Azure SQL Database</li> <li>Manage and respond to security alerts in Microsoft Defender for Cloud</li> <li>Configure workflow automation by using Microsoft Defender for Cloud</li> <li>Evaluate vulnerability scans from Microsoft Defender for Server</li> </ul> <h3>14 - Configure and manage security monitoring and automation solutions</h3> <ul> <li>Monitor security events by using Azure Monitor</li> <li>Configure data connectors in Microsoft Sentinel</li> <li>Create and customize analytics rules in Microsoft Sentinel</li> <li>Configure automation in Microsoft Sentinel</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AZ-500T00 Microsoft Azure Security Technologies training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AZ-500T00 Microsoft Azure Security Technologies course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Nexus Human

Microsoft AZ-900

Microsoft AZ-104

Microsoft Azure

Microsoft AZ-303

Microsoft AZ-700

CompTIA Security+

AZ-500T00 Microsoft Azure Security Technologies

<h3><b>OpenSSL for engineers training course description</b></h3>
        <p>
      A hands on course covering OpenSSL. The course
focusses on the use of OpenSSL from the command
line as opposed to using its extensive libraries.
Certificate authorities are configured along with key
generation, HTTPS and a SSL VPN. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe OpenSSL.</li>
                          <li>Use OpenSSL.</li>
                          <li>Describe and implement:</li>
																										<li>Explain how the various technologies involved in an
OpenSSL work.</li>
                 
                  </ul>
        <h5>
        <b>OpenSSL for engineers training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network personnel.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP security foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>OpenSSL for engineers training course contents</b></h3>
				<ul>	<li>What is OpenSSL? </li><p>
What is SSL? SSL versions, TLS, TLS negotiation, TLS authentication, What is OpenSSL, Command line tool, SSL library. OpenSSH, OpenVPN.
<br /><span>Hands on</span> TLS packet analysis.

</p><li>Getting started with OpenSSL </li><p>
Downloading, source code, packages, installing, versions, configuration, openssl command. Cipher suite selection.
<br /><span>Hands on</span> Encrypting a file with openssl.

</p><li>Public and private keys </li><p>
Algorithms, creating keys, public keys, private keys, encrypting the private key.
<br /><span>Hands on</span> Encrypting a file with keys.

</p><li>Digital signatures </li><p>
Creating signatures, checking validity of signatures, Self signing SSL certificates. Viewing certificates. Certificate files. Converting between formats.
<br /><span>Hands on</span> Securing a web server with HTTPS.

</p><li>Simple PKI with OpenSSL </li><p>
Root CA, signing CA, configuration files, Certificate signing requests. Email certificates, TLS server certificates.
<br /><span>Hands on</span> Implementing a simple PKI with OpenSSL.
</p>
				</ul>

Definitive OpenSSL for engineers

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security for engineers

<h3><b>SIP security training course description</b></h3>
        <p>
        A hands-on course covering SIP security. It is assumed that delegates already know SIP as this course focuses purely on the security issues in SIP IP telephony networks. Hands-on practicals follow each major theory session and include use of various SIP security tools such as vomit, sipp, sipsak and sivus amongst others.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Secure SIP networks</li>
					<li>Use various SIP security tools</li>
                  </ul>
				
        <h5><b>SIP security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff working with SIP.<br />
                 Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>SIP security training course contents</b></h3>
				<ul>	<li>SIP review</li><p>
SIP infrastructure and entities, example SIP session.
<br /><span>Hands on</span> Simple SIP network with and without
authentication.
					</p><li>SIP security attacks</li><p>
 DOS attacks, infrastructure attacks, eavesdropping,
spoofing, replay, message integrity. <br /><span>Hands on</span> Basic
SIP packet capture, infrastructure attacks.
</p><li>SIP tools</li><p>
 SIP packet creation: Sivus, SIPsak, PROTOS, SFTF,
SIP bomber, SIPp, Seagull, Nastysip. SIP packet
generators: SIPNess, NetDude. Monitoring:
Wireshark, Cain &amp; Abel, Vomit, Oreka, VoiPong.
Scripts and tools: SIP-Fun, Skora.net, kphone-ddos,
sip-scan, sip-kill, sip-redirectrtp. Health of different
tools. <br /><span>Hands on</span> Generating SIP packets, rebuilding
conversations from captured packets, password
cracking.
</p><li>VPNs and SIP</li><p>
 IPSec, AH, ESP, transport mode, tunnel mode, Pre
Shared Keys, Public keys. <br /><span>Hands on</span> SIP calls over
IPSec.
</p><li>Secure SIP signaling</li><p>
 SIP relationship with HTTP, Deprecated HTTP 1.0
basic authentication, HTTP 1.1 Digest authentication,
S/MIME, SIPS, SIPS URI, TLS, DTLS, PKI
infrastructures. <br /><span>Hands on</span> SIP with TLS.
</p><li>Secure media streams</li><p>
 SRTP, features, packet format, default encryption,
default authentication, key distribution. S/MIME,
MIKEY, SDP security descriptions. SIP security
agreements. <br /><span>Hands on</span> Analysing SRTP packets.
</p><li>Firewalls</li><p>
 NAT traversal. Impact of firewall on infrastructure
attacks. TLS and firewalls. SIP specific firewalls.
<br /><span>Hands on</span> SIP calls through a firewall. 

</p>
				</ul>

SIP security for engineers

<strong>This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.</strong>
        <p>This course is all about securing websites with SSL/TLS certificates. We start by exploring the basics of symmetric encryption algorithms such as AES, asymmetric encryption (RSA), and hashing protocols (MD5 and SHA). We will also explain the fundamentals of computer networks and TCP/IP stacks; for that, we will use the Wireshark traffic analyzer. 
You will learn about the structure of SSL/TLS certificates. You will also understand why CAs (Certificate Authorities) are needed and how the chain of trust is built. 
We will perform multiple practice activities such as buying a domain and configuring DNS settings, using the Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt; then with the help of OpenSSL, we'll generate RSA keys and self-signed certificates, we'll secure WordPress with Apache using SSL/TLS certificates, and create a CSR (Certificate Signing Request) via OpenSSL and submit it to the CA server. We will configure Cloudflare for your domain and set up different SSL operation modes, install and configure NGINX web servers for SSL/TLS certificates, migrate from HTTP to HTTPS, and redirect all traffic using HTTP 301 redirect from HTTP to HTTPS. 
By the end of this course, you will become a guru of SSL and TLS encryption and will be able to easily obtain and install SSL certificates on your web servers.</p>
        <h2>What You Will Learn</h2><p>Learn how to install SSL/TLS certificate on web servers<br>Differentiate between HTTP and HTTPS<br>Secure WordPress with Apache using SSL/TLS certificates<br>Understand what a CA is and how the chain of trust is built<br>Install and configure an NGINX web server for SSL/TLS encryption<br>Redirect all traffic using HTTP 301 redirect from HTTP to HTTPS</p>
        <h2>Audience</h2><p>This course is for anyone who wants to learn SSL via real-life projects. This course will also be beneficial for website owners, DevOps engineers, web developers, network engineers, and JavaScript developers.</p>
        <h2>Approach</h2><p>In this course, all practice exercises are performed on a real domain with real hosting. When you've completed the course, you'll have production-ready solutions with HTTPS set up and HTTP-to-HTTPS redirection.</p>
        <h2>Key Features</h2><p>Use Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt * With the help of OpenSSL, generate RSA keys and self-signed certificates * Configure Cloudflare for your domain and set up different SSL modes of operations</p>
        
        <h2>About the Author</h2><h3>Bogdan Stashchuk</h3><p>Bogdan Stashchuk has over 20 years of experience as a software engineering instructor. He excels at breaking down complex topics into easy-to-follow steps. His courses are designed with hands-on exercises, ensuring that learners can actively participate and apply what they learn. From start to finish, students can follow along and complete tasks just as Bogdan demonstrates in his lectures. He also includes challenging assignments with detailed solutions. This approach helps learners understand and remember the material long after they've completed the course. Through his dedication and expertise, Bogdan ensures a valuable and effective learning experience for everyone.</p>
        <h2>Course Outline</h2><h4>1. Introduction</h4><p></p><br><h4>2. Introduction to HTTPS and TLS</h4><p></p><br><h4>3. Encryption and Hashing Overview</h4><p></p><br><h4>4. RSA, Certificates, and Chain of Trust</h4><p></p><br><h4>5. SSL, TLS, and HTTPS</h4><p></p><br><h4>6. Launching TLS Secured Website with Free Domain and Hosting</h4><p></p><br><h4>7. Custom Domain with Free Hosting</h4><p></p><br><h4>8. Free TLS Certificate (Let's Encrypt) on Paid Hosting</h4><p></p><br><h4>9. Cloudflare with Free TLS Certificate</h4><p></p><br><h4>10. Configuring NGINX Web Server and Installing TLS Certificate</h4><p></p><br><h4>11. Creating a Self-Signed Certificate Using OpenSSL</h4><p></p><br><h4>12. Getting and Installing a Custom Certificate</h4><p></p><br><h4>13. Cleanup</h4><p></p>

Online Course Creation

Basic Security Training (BST)

IT Certifications

This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.

SSL Complete Guide 2021: HTTP to HTTPS

<h3><b>Securing UNIX systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure UNIX accounts.</li>
					              <li>Secure UNIX file systems.</li>
                   <li>Secure UNIX access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing UNIX systems course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing UNIX systems course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing UNIX systems

<h3><b>Securing Linux systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure Linux accounts.</li>
					              <li>Secure Linux file systems.</li>
                   <li>Secure Linux access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing Linux systems training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing Linux systems training course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing Linux systems

<h3><b>Definitive 802.1X training course description</b></h3>
        <p>
        A hands-on training course concentrating solely on 802.1X. Hands on sessions follow major chapters to reinforce the theory.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Describe 802.1X.</li>
                   		 <li>Explain how 802.1X works</li>
                   		 <li>Configure 802.1X</li>
                   		 <li>Troubleshoot 802.1X.</li>
                  </ul>
				
        <h5><b>Definitive 802.1X training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network staff.<br />
                    Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Definitive 802.1X training course contents</b></h3>
				<ul>	<li>Introduction</li><p>
What is 802.1X? Authentication access, 802.3,
802.11. IEEE, 802, 802.1X-2001, 802.1X-2010.
				</p><li>Architecture</li><p>
Supplicant, Authenticator, Authentication server,
EAP, EAPOL, RADIUS, Diameter.
</p><li>Port configuration</li><p>
802.1X in a switch environment.
<br /><span>Hands on</span> Configuring 802.1X.
</p><li>How it works</li><p>
Controlled ports, uncontrolled ports.
Authentication flow chart, Initialisation, initiation,
negotiation, authentication.
<br /><span>Hands on</span> 802.1X packet analysis.
</p><li>802.1X and 802.11</li><p>
WiFi, WiFi security.
<br /><span>Hands on</span> 802.1X WiFi port access.
</p><li>EAP</li><p>
Extensible Authentication Protocol, RFC 3748,
RFC 5247. EAP methods: Weak, MD5, LEAP,
Strong: TTLS, TLS, FAST. Encapsulation:
802.1X, PEAP, RADIUS, Diameter, PPP.
</p><li>802.1X accounting</li><p>
RADIUS, accounting messages, 802.1X
accounting AV pairs.
</p><li>8021.X and VLANS</li><p>
VLANs, Guest VLAN, restricted VLAN, voice
VLAN.
<br /><span>Hands on</span> VLAN assignments with 802.1X.

</p>
				</ul>

Definitive 802.1X for engineers

<h3><b>Network forensics training course description</b></h3>
        <p>
   This course studies network forensics-monitoring and
analysis of network traffic for information gathering,
intrusion detection and legal evidence. We focus on the
technical aspects of network forensics rather than other
skills such as incident response procedures etc.. Hands
on sessions follow all the major sections.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Recognise network forensic data sources.</li>
	<li>Perform network forensics using:<br />
		Wireshark<br />
                    NetFlow<br />
			Log analysis<br />
		
		
</li>
           <li>Describe issues such as encryption.</li>         
                  </ul>
        <h5>
        <b>Network forensics training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network and/or security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Network forensics training course contents</b></h3>
	<ul>				
					
<li>What is network forensics?</li><p>
What it is, host vs network forensics, purposes,
legal implications, network devices, network data
sources, investigation tools. <br /><span> Hands on </span> whois, DNS
queries.
					
</p><li>Host side network forensics</li><p>
Services, connections tools. <br /><span>Hands on</span> Windows
services, Linux daemons, netstat, ifoconfig/ipconfig,
ps and Process explorer, ntop, arp, resource
monitor.
</p><li>Packet capture and analysis</li><p>
Network forensics with Wireshark, Taps,
NetworkMiner. <br /><span>Hands on</span> Performing Network
Traffic Analysis using NetworkMiner and Wireshark.
</p><li>Attacks</li><p>
DOS attacks, SYN floods, vulnerability exploits,
ARP and DNS poisoning, application attacks, DNS
ANY requests, buffer overflow attacks, SQL
injection attack, attack evasion with fragmentation.
<br /><span>Hands on</span> Detecting scans, using nmap, identifying
attack tools.
</p><li>Calculating location</li><p>
Timezones, whois, traceroute, geolocation. Wifi
positioning. <br /><span>Hands on</span> Wireshark with GeoIP
lookup.
</p><li>Data collection</li><p>
NetFlow, sflow, logging, splunk, splunk patterns,
GRR. HTTP proxies. <br /><span>Hands on</span> NetFlow
configuration, NetFlow analysis.
</p><li>The role of IDS, firewalls and logs</li><p>
Host based vs network based, IDS detection styles,
IDS architectures, alerting. Snort. syslog-ng.
Microsoft log parser. <br /><span>Hands on</span> syslog, Windows
Event viewer.
</p><li>Correlation</li><p>
Time synchronisation, capture times, log
aggregation and management, timelines. <br /><span>Hands on</span>
Wireshark conversations.
</p><li>Other considerations</li><p>
Tunnelling, encryption, cloud computing, TOR.
<br /><span>Hands on</span> TLS handshake in Wireshark.
</p>
	</ul>

Definitive network forensics for engineers

<h3><b>Security+ training course description</b></h3>
        <p>
   A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
                    <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
                  </ul>
        <h5>
        <b>Security+ training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those wishing to pass the Security+ exam.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Security+ training course contents</b></h3>
				<ul>	<li>General security concepts</li><p>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					</p><li>Communication security</li><p>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	</p><li>Infrastructure security</li><p>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	</p><li>Cryptography basics</li><p>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	</p><li>Operational/Organisation security</li><p>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 
</p>
				</ul>

54 TLS courses delivered Online

Certified Wireless Security Professional

By Systems & Network Training

Advanced TCP/IP

By Systems & Network Training

Total SIPp for engineers

By Systems & Network Training

IP broadcast fundamentals

By Systems & Network Training

Total IPTV for engineers

By Systems & Network Training

Definitive SIP in the IMS for engineers

By Systems & Network Training

Total SMTP and email for engineers

By Systems & Network Training

Integrating UNIX and Microsoft

By Systems & Network Training

Integrating Linux and Microsoft

By Systems & Network Training

Real-World DevOps Project From Start to Finish

By Packt