Name: CompTIA Security+ Certification SY0-601: The Total Course
Price: 59.99 GBP
Availability: InStock

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This class is designed for experienced administrators and platform developers as well as solution, enterprise, and technical architects responsible for designing or building integration solutions on the Salesforce Platform. It's also designed for project or program managers looking to understand the big picture of integration in order to better manage their projects and programs. Ideally, you hold the Salesforce Administrator, Salesforce App Builder, or Salesforce Platform Developer I credential and/or are knowledgeable about standard and custom objects; how to work with flows and Process Builder; how to navigate Salesforce, Lightning Components, and Schema Builder; and Apex basics such as creating a Class and Anonymous Blocks. This class is recommended for anyone looking to earn their Salesforce Certified Integration Designer credential.</p>Overview<p>When you complete this course, you will be able to:<br />Identify integration requirements by asking relevant integration questions to business stakeholders.<br />Recommend appropriate integration patterns (Remote Process Invocation - Request and Reply, Remote Process Invocation - Fire and Forget, Batch Data Synchronization, Remote Call-In, and UI Update Based on Data Changes, Data Virtualization) to design integration solutions.<br />Recommend appropriate integration capabilities (SOAP, REST, bulk, streaming, Outbound Messaging, Callouts, and Salesforce Connect) to build integration solutions.</p><p>Explore architectural concepts and the big picture thinking of how to integrate on the Salesforce Platform. In this 3-day class, our Salesforce integration experts will demonstrate how to build solutions that provide a single view of your customers. You?ll learn about integration capabilities and the considerations that should be made when architecting an integration solution. Through a combination of demos, discussions, and hands-on exercises, you?ll design and build secure, scalable, and high-performing integration solutions that seamlessly surface the information that matters most</p></div><div id="course-pills-2"><h4>Integration Overview</h4><ul><li>Understand the Importance of Integration</li><li>Explore Integration Architecture</li><li>Explore the Meaning of Single View of the Customer</li><li>Explore the Meaning of System Landscape</li><li>Understand the Role of Enterprise Service Bus (ESB) and Extract Transform Load (ETL) in System Landscape</li></ul><h4>Integration Capabilities</h4><ul><li>Introduction to Salesforce APIs</li><li>Create External Applications Using SOAP API</li><li>Build Mobile Applications Using REST API</li><li>Work with Large Data Volumes Using BULK API</li><li>Build Event-Driven Applications Using Streaming API</li><li>Build Event-Driven Applications Using Platform Events</li><li>Build Event-Driven Applications Using Change Data Capture</li><li>Send Data from Salesforce to External Applications Using Outbound Message</li><li>Call External APIs Programmatically Using Callouts</li><li>Integrate Data from an External Data Source Using Salesforce Connect</li><li>Synchronize Data with Heroku Connect</li><li>Call External APIs Declaratively Using External Services</li></ul><h4>Integration Patterns</h4><ul><li>Understand Use Cases for a Request and Reply Pattern</li><li>Understand Use Cases for a Fire and Forget Pattern</li><li>Understand Use Cases for a Batch Data Synchronization Pattern</li><li>Understand Use Cases for a Remote Call-In Pattern</li><li>Understand Use Cases for a UI Update Based on Data Changes Pattern</li><li>Understand Use Cases for a Data Virtualization Pattern</li></ul><h4>Integration Security</h4><ul><li>Explore Two-Way Transport Layer Security (TLS)</li><li>Understand When to Use Remote Site Settings</li><li>Understand the Benefits of Using Named Credentials</li><li>Understand Certificates</li><li>Encrypt Your Data at Rest Using Salesforce Shield Platform Encryption</li></ul><h4>Advanced Integration Discussions</h4><ul><li>Design Solutions for Performance</li><li>Design Solutions for Scale</li><li>Review Integration Regulatory Requirements</li><li>Review Integration Best Practices</li></ul><h4>Case Study</h4><ul><li>Draw a System Landscape Diagram</li><li>Evaluate Business Needs</li><li>Translate Needs to Integration Requirements</li><li>Design an Integration Solution</li><li>Build an Integration Solution</li><li>Maintain an Integration Solution</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Salesforce Design and Build Integration Solutions (ARC101) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Salesforce Design and Build Integration Solutions (ARC101) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Nexus Human

Salesforce Associate

Service Design Courses (SDC)

Salesforce Certified JavaScript Developer

AWS Certified Solutions Architect

Salesforce

Salesforce Certified Marketing Cloud Email Specialist

Salesforce Design and Build Integration Solutions (ARC101)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Experienced security administrators</p>Overview<p>By the end of the course, you should be able to meet the following objectives:<br />Define information-security-related concepts<br />Explain the different types of firewalls and their use cases<br />Describe the operation of intrusion detection and intrusion prevention systems<br />Differentiate between Malware Prevention approaches<br />Describe the VMware intrinsic security portfolio<br />Implement Zero-Trust Security using VMware NSX segmentation<br />Configure user and role management<br />Configure and troubleshoot Distributed Firewall, Identity Firewall, and time-based policies<br />Configure and troubleshoot Gateway Security<br />Use VMware vRealize Log Insightâ¢ for NSXâ¢ and VMware vRealize Network Insightâ¢ to operate NSX firewalls<br />Explain the security best practices related to grouping, tagging, and rule configuration<br />Describe north-south and east-west service insertion<br />Describe endpoint protection<br />Configure and troubleshoot IDS/IPS<br />Deploy NSX Application Platform<br />Configure and troubleshoot NSX Malware Prevention<br />Describe the capabilities of NSX Intelligence and NSX Network Detection and Response</p><p>This five-day, hands-on training course provides you with the knowledge, skills, and tools to achieve competency in configuring, operating, and troubleshooting VMware NSX-T? Data Center for intrinsic security. In this course, you are introduced to all the security features in NSX-T Data Center, including Distributed Firewall and Gateway Firewall, Intrusion Detection and Prevention (IDS/IPS), NSX Application Platform, NSX Malware Prevention, VMware NSXÂ© Intelligence?, and VMware NSXÂ© Network Detection and Response?.In addition, you are presented with common configuration issues and given a methodology to resolve them.</p></div><div id="course-pills-2"><h4>Course Introduction</h4><ul><li>Introductions and course logistics</li><li>Course objectives</li></ul><h4>Security Basics</h4><ul><li>Define information-security-related concepts</li><li>Explain the different types of firewalls and their use cases</li><li>Describe the operation of IDS/IPS</li><li>Differentiate between Malware Prevention approaches</li></ul><h4>VMware Intrinsic Security</h4><ul><li>Define the VMware intrinsic security strategy</li><li>Describe the VMware intrinsic security portfolio</li><li>Explain how NSX-T Data Center aligns with the intrinsic security strategy</li></ul><h4>Implementing Zero-Trust Security</h4><ul><li>Define Zero-Trust Security</li><li>Describe the five pillars of a Zero-Trust Architecture</li><li>Define NSX segmentation and its use cases</li><li>Describe the steps needed to enforce Zero-Trust with NSX segmentation</li></ul><h4>User and Role Management</h4><ul><li>Integrate NSX-T Data Center and VMware Identity Manager?</li><li>Integrate NSX-T Data Center and LDAP</li><li>Describe the native users and roles in NSX-T Data Center</li><li>Create and assign custom user roles</li></ul><h4>Distributed Firewall</h4><ul><li>Configure Distributed Firewall rules and policies</li><li>Describe the NSX Distributed Firewall architecture</li><li>Troubleshoot common problems related to NSX Distributed Firewall</li><li>Configure time-based policies</li><li>Configure Identity Firewall rules</li></ul><h4>Gateway Security</h4><ul><li>Configure Gateway Firewall rules and policies</li><li>Describe the architecture of the Gateway Firewall</li><li>Identify and troubleshoot common Gateway Firewall issues</li><li>Configure TLS Inspection to decrypt traffic for both internal and external services</li><li>Configure URL filtering and identify common configuration issues</li></ul><h4>Operating Internal Firewalls</h4><ul><li>Use vRealize Log Insight for NSX and vRealize Network Insight to operate NSX firewalls</li><li>Explain security best practices related to grouping, tagging, and rule configuration</li></ul><h4>Network Introspection</h4><ul><li>Explain network introspection</li><li>Describe the architecture and workflows of north-south and east-west service insertion</li><li>Troubleshoot north-south and east-west service insertion</li></ul><h4>Endpoint Protection</h4><ul><li>Explain endpoint protection</li><li>Describe the architecture and workflows of endpoint protection</li><li>Troubleshoot endpoint protection</li></ul><h4>Intrusion Detection and Prevention</h4><ul><li>Describe the MITRE ATT&amp;CK framework</li><li>Explain the different phases of a cyber attack</li><li>Describe how NSX security solutions can be used to protect against cyber attacks</li><li>Configure and troubleshoot Distributed IDS/IPS</li><li>Configure and troubleshoot North-South IDS/IPS</li></ul><h4>NSX Application Platform</h4><ul><li>Describe NSX Application Platform and its use cases</li><li>Identify the topologies supported for the deployment of NSX Application Platform</li><li>Deploy NSX Application Platform</li><li>Explain the NSX Application Platform architecture and services</li><li>Validate the NSX Application Platform deployment and troubleshoot common issues</li></ul><h4>NSX Malware Prevention</h4><ul><li>Identify use cases for NSX Malware Prevention</li><li>Identify the components in the NSX Malware Prevention architecture</li><li>Describe the NSX Malware Prevention packet flows for known and unknown files</li><li>Configure NSX Malware Prevention for east-west and north-south traffic</li></ul><h4>NSX Intelligence and NSX Network Detection and Response</h4><ul><li>Describe NSX Intelligence and its use cases</li><li>Explain NSX Intelligence visualization, recommendation, and network traffic analysis capabilities</li><li>Describe NSX Network Detection and Response and its use cases</li><li>Explain the architecture of NSX Network Detection and Response in NSX-T Data Center</li><li>Describe the visualization capabilities of NSX Network Detection and Response</li></ul></div>

VMware Vsphere

IT Security

CompTIA Network+

IT Certifications

Network & Security

CompTIA Security+

VMware NSX-T Data Center for Intrinsic Security [V3.2]

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>Security architects<br />System designers<br />Network administrators<br />Operations engineers<br />Network managers, network or security technicians, and security engineers and managers responsible for web security<br />Cisco integrators and partners</p>Overview<p>After taking this course, you should be able to:<br />Describe Cisco WSA<br />Deploy proxy services<br />Utilize authentication<br />Describe decryption policies to control HTTPS traffic<br />Understand differentiated traffic access policies and identification profiles<br />Enforce acceptable use control settings<br />Defend against malware<br />Describe data security and data loss prevention<br />Perform administration and troubleshooting</p><p>The Securing the Web with Cisco Web Security Appliance (SWSA) v3.0 course shows you how to implement, use, and maintain CiscoÂ© Web Security Appliance (WSA), powered by Cisco Talos, to provide advanced protection for business email and control against web security threats. Through a combination of expert instruction and hands-on practice, you?ll learn how to deploy proxy services, use authentication, implement policies to control HTTPS traffic and access, implement use control settings and policies, use the solution?s anti-malware features, implement data security and data loss prevention, perform administration of Cisco WSA solution, and more.</p></div><div id="course-pills-2"><h4>Describing Cisco WSA</h4><ul><li>Technology Use Case<br />Cisco WSA Solution<br />Cisco WSA Features<br />Cisco WSA Architecture<br />Proxy Service<br />Integrated Layer 4 Traffic Monitor<br />Data Loss Prevention<br />Cisco Cognitive Intelligence<br />Management Tools<br />Cisco Advanced Web Security Reporting (AWSR) and Third-Party Integration<br />Cisco Content Security Management Appliance (SMA)</li></ul><h4>Deploying Proxy Services</h4><ul><li>Explicit Forward Mode vs. Transparent Mode<br />Transparent Mode Traffic Redirection<br />Web Cache Control Protocol<br />Web Cache Communication Protocol (WCCP) Upstream and Downstream Flow<br />Proxy Bypass<br />Proxy Caching<br />Proxy Auto-Config (PAC) Files<br />FTP Proxy<br />Socket Secure (SOCKS) Proxy<br />Proxy Access Log and HTTP Headers<br />Customizing Error Notifications with End User Notification (EUN) Pages</li></ul><h4>Utilizing Authentication</h4><ul><li>Authentication Protocols<br />Authentication Realms<br />Tracking User Credentials<br />Explicit (Forward) and Transparent Proxy Mode<br />Bypassing Authentication with Problematic Agents<br />Reporting and Authentication<br />Re-Authentication<br />FTP Proxy Authentication<br />Troubleshooting Joining Domains and Test Authentication<br />Integration with Cisco Identity Services Engine (ISE)</li></ul><h4>Creating Decryption Policies to Control HTTPS Traffic</h4><ul><li>Transport Layer Security (TLS)/Secure Sockets Layer (SSL) Inspection Overview<br />Certificate Overview<br />Overview of HTTPS Decryption Policies<br />Activating HTTPS Proxy Function<br />Access Control List (ACL) Tags for HTTPS Inspection<br />Access Log Examples</li></ul><h4>Understanding Differentiated Traffic Access Policies and Identification Profiles</h4><ul><li>Overview of Access Policies<br />Access Policy Groups<br />Overview of Identification Profiles<br />Identification Profiles and Authentication<br />Access Policy and Identification Profiles Processing Order<br />Other Policy Types<br />Access Log Examples<br />ACL Decision Tags and Policy Groups<br />Enforcing Time-Based and Traffic Volume Acceptable Use Policies, and End User Notifications</li></ul><h4>Defending Against Malware</h4><ul><li>Web Reputation Filters<br />Anti-Malware Scanning<br />Scanning Outbound Traffic<br />Anti-Malware and Reputation in Policies<br />File Reputation Filtering and File Analysis<br />Cisco Advanced Malware Protection<br />File Reputation and Analysis Features<br />Integration with Cisco Cognitive Intelligence</li></ul><h4>Enforcing Acceptable Use Control Settings</h4><ul><li>Controlling Web Usage<br />URL Filtering<br />URL Category Solutions<br />Dynamic Content Analysis Engine<br />Web Application Visibility and Control<br />Enforcing Media Bandwidth Limits<br />Software as a Service (SaaS) Access Control<br />Filtering Adult Content</li></ul><h4>Data Security and Data Loss Prevention</h4><ul><li>Data Security<br />Cisco Data Security Solution<br />Data Security Policy Definitions<br />Data Security Logs</li></ul><h4>Performing Administration and Troubleshooting</h4><ul><li>Monitor the Cisco Web Security Appliance<br />Cisco WSA Reports<br />Monitoring System Activity Through Logs<br />System Administration Tasks<br />Troubleshooting<br />Command Line Interface</li></ul><h4>References</h4><ul><li>Comparing Cisco WSA Models<br />Comparing Cisco SMA Models<br />Overview of Connect, Install, and Configure<br />Deploying the Cisco Web Security Appliance Open Virtualization Format (OVF) Template<br />Mapping Cisco Web Security Appliance Virtual Machine (VM) Ports to Correct Networks<br />Connecting to the Cisco Web Security Virtual Appliance<br />Enabling Layer 4 Traffic Monitor (L4TM)<br />Accessing and Running the System Setup Wizard<br />Reconnecting to the Cisco Web Security Appliance<br />High Availability Overview<br />Hardware Redundancy<br />Introducing Common Address Redundancy Protocol (CARP)<br />Configuring Failover Groups for High Availability<br />Feature Comparison Across Traffic Redirection Options<br />Architecture Scenarios When Deploying Cisco AnyConnectÂ© Secure Mobility</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans SWSA v3.0-Securing the Web with Cisco Web Security Appliance training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the SWSA v3.0-Securing the Web with Cisco Web Security Appliance course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Cyber Security

Security Awareness

Information Security Awareness

SWSA v3.0-Securing the Web with Cisco Web Security Appliance

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>This class is primarily intended for the following participants:<br />Technical employees using GCP, including customer companies, partners and system integrators<br />deployment engineers, cloud architects, cloud administrators, system engineers , and SysOps/DevOps engineers.<br />Individuals using GCP to create, integrate, or modernize solutions using secure, scalable microservices architectures in hybrid environments.</p>Overview<p>Connect and manage Anthos GKE clusters from GCP Console whether clusters are part of Anthos on Google Cloud or Anthos deployed on VMware.<br />Understand how service mesh proxies are installed, configured and managed.<br />Configure centralized logging, monitoring, tracing, and service visualizations wherever the Anthos GKE clusters are hosted.<br />Understand and configure fine-grained traffic management.<br />Use service mesh security features for service-service authentication, user authentication, and policy-based service authorization.<br />Install a multi-service application spanning multiple clusters in a hybrid environment. Understand how services communicate across clusters.<br />Migrate services between clusters.<br />Install Anthos Config Management, use it to enforce policies, and explain how it can be used across multiple clusters.</p><p>This two-day instructor-led course prepares students to modernize, manage, and observe their applications using Kubernetes whether the application is deployed on-premises or on Google Cloud Platform (GCP). Through presentations, and hands-on labs, participants explore and deploy using Kubernetes Engine (GKE), GKE Connect, Istio service mesh and Anthos Config Management capabilities that enable operators to work with modern applications even when split among multiple clusters hosted by multiple providers, or on-premises.</p></div><div id="course-pills-2"><h4>Anthos Overview</h4><ul><li>Describe challenges of hybrid cloud</li><li>Discuss modern solutions</li><li>Describe the Anthos Technology Stack</li></ul><h4>Managing Hybrid Clusters using Kubernetes Engine</h4><ul><li>Understand Anthos GKE hybrid environments, with Admin and User clusters</li><li>Register and authenticate remote Anthos GKE clusters in GKE Hub</li><li>View and manage registered clusters, in cloud and on-premises, using GKE Hub</li><li>View workloads in all clusters from GKE Hub</li><li>Lab: Managing Hybrid Clusters using Kubernetes Engine</li></ul><h4>Introduction to Service Mesh</h4><ul><li>Understand service mesh, and problems it solves</li><li>Understand Istio architecture and components</li><li>Explain Istio on GKE add on and it's lifecycle, vs OSS Istio</li><li>Understand request network traffic flow in a service mesh</li><li>Create a GKE cluster, with a service mesh</li><li>Configure a multi-service application with service mesh</li><li>Enable external access using an ingress gateway</li><li>Explain the multi-service example applications: Hipster Shop, and Bookinfo</li><li>Lab: Installing Open Source Istio on Kubernetes Engine</li><li>Lab: Installing the Istio on GKE Add-On with Kubernetes Engine</li></ul><h4>Observing Services using Service Mesh Adapters</h4><ul><li>Understand service mesh flexible adapter model</li><li>Understand service mesh telemetry processing</li><li>Explain Stackdriver configurations for logging and monitoring</li><li>Compare telemetry defaults for cloud and on-premises environments</li><li>Configure and view custom metrics using service mesh</li><li>View cluster and service metrics with pre-configured dashboards</li><li>Trace microservice calls with timing data using service mesh adapters</li><li>Visualize and discover service attributes with service mesh</li><li>Lab: Telemetry and Observability with Istio</li></ul><h4>Managing Traffic Routing with Service Mesh</h4><ul><li>Understand the service mesh abstract model for traffic management</li><li>Understand service mesh service discovery and load balancing</li><li>Review and compare traffic management use cases and configurations</li><li>Understand ingress configuration using service mesh</li><li>Visualize traffic routing with live generated requests</li><li>Configure a service mesh gateway to allow access to services from outside the mesh</li><li>Apply virtual services and destination rules for version-specific routing</li><li>Route traffic based on application-layer configuration</li><li>Shift traffic from one service version to another, with fine-grained control, like a canary deployment</li><li>Lab: Managing Traffic Routing with Istio and Envoy</li></ul><h4>Managing Policies and Security with Service Mesh</h4><ul><li>Understand authentication and authorization in service mesh</li><li>Explain mTLS flow for service to service communication</li><li>Adopt mutual TLS authentication across the service mesh incrementally</li><li>Enable end-user authentication for the frontend service</li><li>Use service mesh access control policies to secure access to the frontend service</li><li>Lab: Managing Policies and Security with Service Mesh</li></ul><h4>Managing Policies using Anthos Config Management</h4><ul><li>Understand the challenge of managing resources across multiple clusters</li><li>Understand how a Git repository is as a configuration source of truth</li><li>Explain the Anthos Config Management components, and object lifecycle</li><li>Install and configure Anthos Config Management, operators, tools, and related Git repository</li><li>Verify cluster configuration compliance and drift management</li><li>Update workload configuration using repo changes</li><li>Lab: Managing Policies in Kubernetes Engine using Anthos Config</li></ul><h4>Configuring Anthos GKE for Multi-Cluster Operation</h4><ul><li>Understand how multiple clusters work together using DNS, root CA, and service discovery</li><li>Explain service mesh control-plane architectures for multi-cluster</li><li>Configure a multi-service application using service mesh across multiple clusters with multiple control-planes</li><li>Configure a multi-service application using service mesh across multiple clusters with a shared control-plane</li><li>Configure service naming/discovery between clusters</li><li>Review ServiceEntries for cross-cluster service discovery</li><li>Migrate workload from a remote cluster to an Anthos GKE cluster</li><li>Lab: Configuring GKE for Multi-Cluster Operation with Istio</li><li>Lab: Configuring GKE for Shared Control Plane Multi-Cluster Operation</li></ul></div>

Kubernetes

Architecting Hybrid Cloud Infrastructure with Anthos

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Experienced security administrators</p>Overview<p>By the end of the course, you should be able to meet the following objectives:<br />Define the concepts related to information security<br />Explain the different types of firewalls and their use cases<br />Describe the operation of intrusion detection and intrusion prevention systems<br />Differentiate between Malware Prevention approaches<br />Describe the VMware intrinsic security portfolio<br />Use NSX segmentation to implement Zero-Trust Security<br />Configure user and role management<br />Configure and troubleshoot Distributed Firewall, Identity Firewall, and time-based policies<br />Configure and troubleshoot Gateway Security<br />Use VMware Aria Operationsâ¢ for Logs and VMware Aria Operationsâ¢ for Networks to operate NSX firewalls<br />Explain the security best practices related to grouping, tagging, and rule configuration<br />Describe north-south and east-west service insertion<br />Describe endpoint protection<br />Configure and troubleshoot IDS/IPS<br />Deploy NSX Application Platform<br />Configure and troubleshoot NSX Malware Prevention<br />Describe the capabilities of NSX Intelligence and NSX NDR</p><p>This five-day, hands-on training course provides you with the knowledge, skills, and tools to achieve competency in configuring, operating, and troubleshooting VMware NSXÂ© for intrinsic security. This course introduces all the security features in NSX, including Distributed Firewall and Gateway Firewall, Intrusion Detection and Prevention (IDS/IPS), NSX Application Platform, NSX Malware Prevention, VMware NSXÂ© Intelligence?, and VMware NSXÂ© NDR?. In addition, this course presents common configuration issues and gives a methodology to resolve them.</p></div><div id="course-pills-2"><h4>Course Introduction</h4><ul><li>Introduction and course logistics</li><li>Course objectives</li></ul><h4>Security Basics</h4><ul><li>Define the concepts related to information security</li><li>Explain the different types of firewalls and their use cases</li><li>Describe the operation of IDS/IPS</li><li>Differentiate between Malware Prevention approaches</li></ul><h4>VMware Intrinsic Security</h4><ul><li>Define the VMware intrinsic security strategy</li><li>Describe the VMware intrinsic security portfolio</li><li>Explain how NSX aligns with the intrinsic security strategy</li></ul><h4>Implementing Zero-Trust Security</h4><ul><li>Define Zero-Trust Security</li><li>Describe the five pillars of a Zero-Trust architecture</li><li>Define NSX segmentation and its use cases</li><li>Describe the steps needed to enforce Zero-Trust with NSX segmentation</li></ul><h4>User and Role Management</h4><ul><li>Integrate NSX and VMware Identity Manager?</li><li>Integrate NSX and LDAP</li><li>Describe the native users and roles in NSX</li><li>Create and assign custom user roles</li><li>Explain object-based RBAC in a multitenancy environment</li></ul><h4>Distributed Firewall</h4><ul><li>Configure Distributed Firewall rules and policies</li><li>Describe the NSX Distributed Firewall architecture</li><li>Troubleshoot common problems related to NSX Distributed Firewall</li><li>Configure time-based policies</li><li>Configure Identity Firewall rules</li><li>Configure the distributed firewall to block malicious IPs</li></ul><h4>Gateway Security</h4><ul><li>Configure Gateway Firewall rules and policies</li><li>Describe the architecture of the Gateway Firewall</li><li>Identify and troubleshoot common Gateway Firewall issues</li><li>Configure TLS Inspection to decrypt traffic for both internal and external services</li><li>Configure URL filtering and identify common configuration issues</li></ul><h4>Operating Internal Firewalls</h4><ul><li>Use VMware Aria Operations for Logs and VMware Aria Operations for Networks to operate NSX firewalls</li><li>Explain security best practices related to grouping, tagging, and rule configuration</li></ul><h4>Network Introspection</h4><ul><li>Explain network introspection</li><li>Describe the architecture and workflows of north-south and east-west service insertion</li><li>Troubleshoot north-south and east-west service insertion</li></ul><h4>Endpoint Protection</h4><ul><li>Explain endpoint protection</li><li>Describe the architecture and workflows of endpoint protection</li><li>Troubleshoot endpoint protection</li></ul><h4>Intrusion Detection and Prevention</h4><ul><li>Describe the MITRE ATT&amp;CK framework</li><li>Explain the different phases of a cyber attack</li><li>Describe how NSX security solutions can be used to protect against cyber attacks</li><li>Configure and troubleshoot Distributed IDS/IPS</li><li>Configure and troubleshoot North-South IDS/IPS</li></ul><h4>NSX Application Platform</h4><ul><li>Describe NSX Application Platform and its use cases</li><li>Identify the topologies supported for the deployment of NSX Application Platform</li><li>Deploy NSX Application Platform</li><li>Explain the NSX Application Platform architecture and services</li><li>Validate the NSX Application Platform deployment and troubleshoot common issues</li></ul><h4>NSX Malware Prevention</h4><ul><li>Identify use cases for NSX Malware Prevention</li><li>Identify the components in the NSX Malware Prevention architecture</li><li>Describe the NSX Malware Prevention packet flows for known and unknown files</li><li>Configure NSX Malware Prevention for east-west and north-south traffic</li></ul><h4>NSX Intelligence and NSX NDR</h4><ul><li>Describe NSX Intelligence and its use cases</li><li>Explain NSX Intelligence visualization, recommendation, and network traffic analysis capabilities</li><li>Describe NSX NDR and its use cases</li><li>Explain the architecture of NSX NDR in NSX</li><li>Describe the visualization capabilities of NSX NDR</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br />Notes<p>Delivery by TDSynex, Exit Certified and New Horizons an VMware Authorised Training Centre (VATC)</p><p>Nexus Humans VMware NSX for Intrinsic Security [V4.x] training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the VMware NSX for Intrinsic Security [V4.x] course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

VMware NSX for Intrinsic Security [V4.x]

Janets

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional certification (CCNP)

AWS Certification

Certificate in Information Security Management Principles (CISMP)

Cisco Certified Entry Networking Technician (CCENT)

Cisco Certified Internetwork Expert (CCIE)

Cisco ASA Firewall Training

General Admission

Packt

Security

Take your basic cyber security knowledge to a new level with this exciting course that promises to be educational, informative, and fun-filled. Build upon a basic foundation in cyber security with a strong focus on networking, privacy and anonymity, malware, email security, backups and encryption, and Windows 10 Hardening.

Cyber Security for Absolute Beginners - 2022 Edition - Part 02

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>Overview<p>How to implement advanced administration concepts such as backups, disaster recovery, scalability and redundancy for a Citrix Virtual Apps and Desktop 7 Site.<br />Advanced troubleshooting techniques to troubleshoot Citrix Virtual Apps and Desktop 7.<br />Security considerations and configurations for Citrix Apps and Desktop 7 site including multi-site management using zones.<br />Install and initialize WEM and integrate into Citrix Virtual Apps and Desktops and Citrix DaaS.<br />Configure WEM features to improve the end user environment and virtual resource consumption.<br />Migrate an on-premises WEM deployment to WEM service</p><p>Designed for experienced IT professionals, this course builds on the foundational implementation and management skills introducing scalability, redundancy, and security configurations. You will learn to build to implement Workspace Environment Management to improve logon times, centralize user settings management, and optimize the performance of machines. In the advanced troubleshooting section, you will learn techniques to investigate many of the common issues that can affect environment health and how to solve issues more effectively. You will leave this course with a good understanding of how to manage more complex solutions such as multi-location environments with configurations around StoreFront, the Delivery Controllers, Cloud Connectors, and HDX.</p></div><div id="course-pills-2"><h4>Module 1: Introduction to Citrix Virtual  Apps and Desktops 7 Advanced  Configuration</h4><ul><li>Citrix Virtual Apps and Desktops Deployments - Advanced Configuration</li></ul><h4>Module 2: Planning: Redundancy and  Scalability</h4><ul><li>Citrix Virtual Apps and Desktops Redundancy and Scalability</li><li>StoreFront and Citrix Gateway Redundancy and Scalability</li><li>Site Infrastructure Redundancy and Scalability</li><li>Machines Running the Virtual Delivery Agent</li></ul><h4>Module 3: Planning: Virtual Apps and  Desktops Environment with Multiple  Locations</h4><ul><li>Zones</li><li>VDA Registration in a Multi-Zone Environment</li><li>Zone Preference</li><li>Optimal Gateway Routing and Zones</li><li>StoreFront Resource Aggregation</li><li>Managing StoreFront Store Subscriptions in a Multi-Location Environment</li></ul><h4>Module 4: Planning: Backups and  Disaster Recovery</h4><ul><li>Backups </li><li>Disaster Recovery Considerations </li><li>Disaster Recovery Process </li></ul><h4>Module 5: Planning: Advanced  Authentication Methods</h4><ul><li>Multi-factor Authentication - RADIUS and One Time Passwords (OTP)</li><li>Multi-factor Authentication ? Smart Card Authentication</li><li>Federated Authentication</li></ul><h4>Module 6: Planning: App and Data  Security</h4><ul><li>Introduction to Application Security</li><li>Preventing Jailbreak Attacks</li><li>Minimizing the Impact of Attacks</li></ul><h4>Module 7: Planning: Virtual Delivery  Agent Security</h4><ul><li>Transport Layer Security (TLS) Virtual Delivery Agent (VDA) Encryption</li><li>Microsoft Group Policy Objects (GPOs) and Citrix Policies</li><li>Image Management</li></ul><h4>Module 8: Introduction to  Troubleshooting</h4><ul><li>Troubleshooting Methodology</li><li>Resource Tools and Utilities</li><li>Introduction to PowerShell</li></ul><h4>Module 9: Troubleshoot Access Issues</h4><ul><li>Troubleshooting StoreFront</li><li>Citrix ADC and Citrix Gateway ? Workflow and Troubleshooting Overview</li><li>Citrix ADC and Citrix Gateway - Troubleshooting Access and Authentication</li><li>Citrix ADC and Citrix Gateway - Troubleshooting App/Desktop Launch</li></ul><h4>Module 10: Troubleshoot Delivery  Controller Issues</h4><ul><li>Validating FlexCast Management Architecture (FMA) Services</li></ul><h4>Module 11: Troubleshoot Virtual Delivery  Agent (VDA) Registration Issues</h4><ul><li>Troubleshooting Virtual Delivery Agent (VDA) </li><li>Registration</li></ul><h4>Module 12: Troubleshoot HDX  Connection Issues</h4><ul><li>Troubleshooting HDX Connections</li></ul><h4>Module 13: Introduction to Workspace  Environment Management (WEM)</h4><ul><li>WEM Features and Benefits</li></ul><h4>Module 14: Planning ? WEM Architecture and  Component Communications</h4><ul><li>WEM On-Premises Components and Deployments</li><li>WEM Service Components and Deployments</li><li>WEM Component Communication Workflows</li></ul><h4>Module 15: Planning - WEM On-Premises  Deployment Installation</h4><ul><li>On-Premises WEM: Leading Practice </li><li>Installation Prerequisites and Steps</li><li>On-Premises WEM: ADMX Template Configuration</li><li>Choosing a Security Principal to run the WEM Infrastructure Service</li><li>Creating the WEM Database</li><li>Running the WEM Infrastructure Service Configuration Utility</li><li>On-Premises WEM: Agent Installation</li></ul><h4>Module 16: Planning ? WEM Service  Deployment Installation</h4><ul><li>WEM On-Premises vs WEM Service</li><li>WEM Service: Leading Practice Installation Prerequisites and Steps</li><li>WEM Service: ADMX Template Configuration</li><li>WEM Service: Agent Installation</li></ul><h4>Module 17: Planning ? WEM Consoles  and Initial Setup</h4><ul><li>On-Premises WEM and WEM Service Consoles</li><li>WEM Initial Setup</li><li>Migrating GPO settings to WEM</li></ul><h4>Module 18: Planning ? WEM System and  Log On Optimization</h4><ul><li>WEM System Optimization Overview</li><li>WEM CPU Management</li><li>WEM Memory Management</li><li>Additional System Optimization Features</li><li>WEM Log On Optimization Overview</li><li>WEM Assigned Actions</li><li>WEM Environmental Settings</li><li>Citrix Profile Management In WEM</li></ul><h4>Module 19: Planning ? WEM Security and  Lockdown Features</h4><ul><li>WEM Security Management Features</li><li>Privilege Elevation and Process Hierarchy Control</li><li>WEM Transformer</li></ul><h4>Module 20: Planning - The WEM Agent</h4><ul><li>WEM Settings Processing and WEM Agent Caches</li><li>WEM Agent Integration with Citrix Virtual Apps and Desktops and Citrix DaaS</li></ul><h4>Module 21: Planning ? WEM Monitoring,  Reporting, and Troubleshooting</h4><ul><li>WEM Monitoring and Reporting</li><li>WEM Agent Troubleshooting</li><li>WEM Service Troubleshooting</li></ul><h4>Module 22: Planning ? Upgrading WEM  and Migration to WEM Service</h4><ul><li>Upgrading Workspace Environment Management</li><li>WEM On-Premises Migration to WEM Service</li></ul><h4>Module 23: Rolling Out a WEM  Deployment</h4><ul><li>WEM Agent User Options on Windows </li><li>Desktops</li></ul><h4>Module 24: Managing a WEM  Deployment</h4><ul><li>Measuring WEM Success</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CWS-322 Citrix Virtual Apps and Desktops 7 Advanced Configuration and WEM Administration training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CWS-322 Citrix Virtual Apps and Desktops 7 Advanced Configuration and WEM Administration course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

AWS Certified Cloud Practitioner

Citrix

CWS-322 Citrix Virtual Apps and Desktops 7 Advanced Configuration and WEM Administration

This course helps you prepare for your CISSP certification. In this course, we will be discussing CISSP&reg;? Certification Domain 4: Communication and Network Security. This course focuses on how our network and communications channels work and how to protect them. Domain 4 makes up 13% of the weighted exam questions.

CISSP®️ Certification Domain 4 - Communication and Network Security Video Boot Camp for 2022

Cryptography

Firewall

This video course is designed to prepare you to achieve the internationally recognized fundamental IT training certification, CompTIA Security+ Certification SY0-601 exam. The course covers all the major domains needed for the certification and will help you develop the basics of IT and computers with the help of examples and quizzes.

CompTIA Security+ Certification SY0-601: The Total Course

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.</p><p></p><p></p><p>This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization?s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.</p><p></p>Prerequisites<p></p><li>AZ-104T00 - Microsoft Azure Administrator</li>  <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li>  <li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li>  <li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li>  <li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li><p></p></div><div id="course-pills-2"><h3>1 - Manage identities in Microsoft Entra ID</h3> <ul> <li>Secure users in Microsoft Entra ID</li> <li>Secure groups in Microsoft Entra ID</li> <li>Recommend when to use external identities</li> <li>Secure external identities</li> <li>Implement Microsoft Entra Identity protection</li> </ul> <h3>2 - Manage authentication by using Microsoft Entra ID</h3> <ul> <li>Configure Microsoft Entra Verified ID</li> <li>Implement multifactor authentication (MFA)</li> <li>Implement passwordless authentication</li> <li>Implement password protection</li> <li>Implement single sign-on (SSO)</li> <li>Integrate single sign-on (SSO) and identity providers</li> <li>Recommend and enforce modern authentication protocols </li> </ul> <h3>3 - Manage authorization by using Microsoft Entra ID</h3> <ul> <li>Configure Azure role permissions for management groups, subscriptions, resource groups, and resources</li> <li>Assign built-in roles in Microsoft Entra ID</li> <li>Assign built-in roles in Azure</li> <li>Create and assign a custom role in Microsoft Entra ID</li> <li>Implement and manage Microsoft Entra Permissions Management</li> <li>Configure Microsoft Entra Privileged Identity Management </li> <li>Configure role management and access reviews by using Microsoft Entra Identity Governance</li> <li>Implement Conditional Access policies</li> </ul> <h3>4 - Manage application access in Microsoft Entra ID</h3> <ul> <li>Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants</li> <li>Manage app registrations in Microsoft Entra ID</li> <li>Configure app registration permission scopes</li> <li>Manage app registration permission consent</li> <li>Manage and use service principals</li> <li>Manage managed identities for Azure resources</li> <li>Recommend when to use and configure a Microsoft Entra Application Proxy, including authentication</li> </ul> <h3>5 - Plan and implement security for virtual networks</h3> <ul> <li>Plan and implement Network Security Groups (NSGs) and Application Security Groups (ASGs)</li> <li>Plan and implement User-Defined Routes (UDRs)</li> <li>Plan and implement Virtual Network peering or gateway</li> <li>Plan and implement Virtual Wide Area Network, including secured virtual hub</li> <li>Secure VPN connectivity, including point-to-site and site-to-site</li> <li>Implement encryption over ExpressRoute</li> <li>Configure firewall settings on PaaS resources</li> <li>Monitor network security by using Network Watcher, including NSG flow logging</li> </ul> <h3>6 - Plan and implement security for private access to Azure resources</h3> <ul> <li>Plan and implement virtual network Service Endpoints</li> <li>Plan and implement Private Endpoints</li> <li>Plan and implement Private Link services</li> <li>Plan and implement network integration for Azure App Service and Azure Functions</li> <li>Plan and implement network security configurations for an App Service Environment (ASE)</li> <li>Plan and implement network security configurations for an Azure SQL Managed Instance</li> </ul> <h3>7 - Plan and implement security for public access to Azure resources</h3> <ul> <li>Plan and implement Transport Layer Security (TLS) to applications, including Azure App Service and API Management</li> <li>Plan, implement, and manage an Azure Firewall, Azure Firewall Manager and firewall policies</li> <li>Plan and implement an Azure Application Gateway</li> <li>Plan and implement an Azure Front Door, including Content Delivery Network (CDN)</li> <li>Plan and implement a Web Application Firewall (WAF)</li> <li>Recommend when to use Azure DDoS Protection Standard</li> </ul> <h3>8 - Plan and implement advanced security for compute</h3> <ul> <li>Plan and implement remote access to public endpoints, Azure Bastion and just-in-time (JIT) virtual machine (VM) access</li> <li>Configure network isolation for Azure Kubernetes Service (AKS)</li> <li>Secure and monitor AKS</li> <li>Configure authentication for AKS</li> <li>Configure security for Azure Container Instances (ACIs)</li> <li>Configure security for Azure Container Apps (ACAs)</li> <li>Manage access to Azure Container Registry (ACR)</li> <li>Configure disk encryption, Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption</li> <li>Recommend security configurations for Azure API Management</li> </ul> <h3>9 - Plan and implement security for storage</h3> <ul> <li>Configure access control for storage accounts</li> <li>Manage life cycle for storage account access keys</li> <li>Select and configure an appropriate method for access to Azure Files</li> <li>Select and configure an appropriate method for access to Azure Blob Storage</li> <li>Select and configure an appropriate method for access to Azure Tables</li> <li>Select and configure an appropriate method for access to Azure Queues</li> <li>Select and configure appropriate methods for protecting against data security threats, including soft delete, backups, versioning, and immutable storage</li> <li>Configure Bring your own key (BYOK)</li> <li>Enable double encryption at the Azure Storage infrastructure level</li> </ul> <h3>10 - Plan and implement security for Azure SQL Database and Azure SQL Managed Instance</h3> <ul> <li>Enable database authentication by using Microsoft Entra ID</li> <li>Enable and monitor database audit</li> <li>Identify use cases for the Microsoft Purview governance portal</li> <li>Implement data classification of sensitive information by using the Microsoft Purview governance portal</li> <li>Plan and implement dynamic mask</li> <li>Implement transparent data encryption?</li> <li>Recommend when to use Azure SQL Database Always Encrypted</li> </ul> <h3>11 - Plan, implement, and manage governance for security</h3> <ul> <li>Create, assign, and interpret security policies and initiatives in Azure Policy</li> <li>Configure security settings by using Azure Blueprint</li> <li>Deploy secure infrastructures by using a landing zone</li> <li>Create and configure an Azure Key Vault</li> <li>Recommend when to use a dedicated Hardware Security Module (HSM)</li> <li>Configure access to Key Vault, including vault access policies and Azure Role Based Access Control</li> <li>Manage certificates, secrets, and keys</li> <li>Configure key rotation</li> <li>Configure backup and recovery of certificates, secrets, and keys</li> </ul> <h3>12 - Manage security posture by using Microsoft Defender for Cloud</h3> <ul> <li>Implement Microsoft Defender for Cloud</li> <li>Identify and remediate security risks by using the Microsoft Defender for Cloud Secure Score and Inventory</li> <li>Assess compliance against security frameworks and Microsoft Defender for Cloud</li> <li>Add industry and regulatory standards to Microsoft Defender for Cloud</li> <li>Add custom initiatives to Microsoft Defender for Cloud</li> <li>Connect hybrid cloud and multicloud environments to Microsoft Defender for Cloud</li> <li>Identify and monitor external assets by using Microsoft Defender External Attack Surface Management</li> </ul> <h3>13 - Configure and manage threat protection by using Microsoft Defender for Cloud</h3> <ul> <li>Enable workload protection services in Microsoft Defender for Cloud, including Microsoft Defender for Storage, Databases, Containers, App Service, Key Vault, Resource Manager, and DNS</li> <li>Configure Microsoft Defender for Servers</li> <li>Configure Microsoft Defender for Azure SQL Database</li> <li>Manage and respond to security alerts in Microsoft Defender for Cloud</li> <li>Configure workflow automation by using Microsoft Defender for Cloud</li> <li>Evaluate vulnerability scans from Microsoft Defender for Server</li> </ul> <h3>14 - Configure and manage security monitoring and automation solutions</h3> <ul> <li>Monitor security events by using Azure Monitor</li> <li>Configure data connectors in Microsoft Sentinel</li> <li>Create and customize analytics rules in Microsoft Sentinel</li> <li>Configure automation in Microsoft Sentinel</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AZ-500T00 Microsoft Azure Security Technologies training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AZ-500T00 Microsoft Azure Security Technologies course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Microsoft AZ-900

Microsoft AZ-104

Microsoft Azure

Microsoft AZ-303

Microsoft AZ-700

AZ-500T00 Microsoft Azure Security Technologies

Redhill

<h3><b>OpenSSL for engineers training course description</b></h3>
        <p>
      A hands on course covering OpenSSL. The course
focusses on the use of OpenSSL from the command
line as opposed to using its extensive libraries.
Certificate authorities are configured along with key
generation, HTTPS and a SSL VPN. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe OpenSSL.</li>
                          <li>Use OpenSSL.</li>
                          <li>Describe and implement:</li>
																										<li>Explain how the various technologies involved in an
OpenSSL work.</li>
                 
                  </ul>
        <h5>
        <b>OpenSSL for engineers training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network personnel.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP security foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>OpenSSL for engineers training course contents</b></h3>
				<ul>	<li>What is OpenSSL? </li><p>
What is SSL? SSL versions, TLS, TLS negotiation, TLS authentication, What is OpenSSL, Command line tool, SSL library. OpenSSH, OpenVPN.
<br /><span>Hands on</span> TLS packet analysis.

</p><li>Getting started with OpenSSL </li><p>
Downloading, source code, packages, installing, versions, configuration, openssl command. Cipher suite selection.
<br /><span>Hands on</span> Encrypting a file with openssl.

</p><li>Public and private keys </li><p>
Algorithms, creating keys, public keys, private keys, encrypting the private key.
<br /><span>Hands on</span> Encrypting a file with keys.

</p><li>Digital signatures </li><p>
Creating signatures, checking validity of signatures, Self signing SSL certificates. Viewing certificates. Certificate files. Converting between formats.
<br /><span>Hands on</span> Securing a web server with HTTPS.

</p><li>Simple PKI with OpenSSL </li><p>
Root CA, signing CA, configuration files, Certificate signing requests. Email certificates, TLS server certificates.
<br /><span>Hands on</span> Implementing a simple PKI with OpenSSL.
</p>
				</ul>

Systems & Network Training

Network Engineer

Definitive OpenSSL for engineers

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security for engineers

<h3><b>SIP security training course description</b></h3>
        <p>
        A hands-on course covering SIP security. It is assumed that delegates already know SIP as this course focuses purely on the security issues in SIP IP telephony networks. Hands-on practicals follow each major theory session and include use of various SIP security tools such as vomit, sipp, sipsak and sivus amongst others.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Secure SIP networks</li>
					<li>Use various SIP security tools</li>
                  </ul>
				
        <h5><b>SIP security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff working with SIP.<br />
                 Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>SIP security training course contents</b></h3>
				<ul>	<li>SIP review</li><p>
SIP infrastructure and entities, example SIP session.
<br /><span>Hands on</span> Simple SIP network with and without
authentication.
					</p><li>SIP security attacks</li><p>
 DOS attacks, infrastructure attacks, eavesdropping,
spoofing, replay, message integrity. <br /><span>Hands on</span> Basic
SIP packet capture, infrastructure attacks.
</p><li>SIP tools</li><p>
 SIP packet creation: Sivus, SIPsak, PROTOS, SFTF,
SIP bomber, SIPp, Seagull, Nastysip. SIP packet
generators: SIPNess, NetDude. Monitoring:
Wireshark, Cain &amp; Abel, Vomit, Oreka, VoiPong.
Scripts and tools: SIP-Fun, Skora.net, kphone-ddos,
sip-scan, sip-kill, sip-redirectrtp. Health of different
tools. <br /><span>Hands on</span> Generating SIP packets, rebuilding
conversations from captured packets, password
cracking.
</p><li>VPNs and SIP</li><p>
 IPSec, AH, ESP, transport mode, tunnel mode, Pre
Shared Keys, Public keys. <br /><span>Hands on</span> SIP calls over
IPSec.
</p><li>Secure SIP signaling</li><p>
 SIP relationship with HTTP, Deprecated HTTP 1.0
basic authentication, HTTP 1.1 Digest authentication,
S/MIME, SIPS, SIPS URI, TLS, DTLS, PKI
infrastructures. <br /><span>Hands on</span> SIP with TLS.
</p><li>Secure media streams</li><p>
 SRTP, features, packet format, default encryption,
default authentication, key distribution. S/MIME,
MIKEY, SDP security descriptions. SIP security
agreements. <br /><span>Hands on</span> Analysing SRTP packets.
</p><li>Firewalls</li><p>
 NAT traversal. Impact of firewall on infrastructure
attacks. TLS and firewalls. SIP specific firewalls.
<br /><span>Hands on</span> SIP calls through a firewall. 

</p>
				</ul>

SIP security for engineers

<strong>This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.</strong>
        <p>This course is all about securing websites with SSL/TLS certificates. We start by exploring the basics of symmetric encryption algorithms such as AES, asymmetric encryption (RSA), and hashing protocols (MD5 and SHA). We will also explain the fundamentals of computer networks and TCP/IP stacks; for that, we will use the Wireshark traffic analyzer. 
You will learn about the structure of SSL/TLS certificates. You will also understand why CAs (Certificate Authorities) are needed and how the chain of trust is built. 
We will perform multiple practice activities such as buying a domain and configuring DNS settings, using the Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt; then with the help of OpenSSL, we'll generate RSA keys and self-signed certificates, we'll secure WordPress with Apache using SSL/TLS certificates, and create a CSR (Certificate Signing Request) via OpenSSL and submit it to the CA server. We will configure Cloudflare for your domain and set up different SSL operation modes, install and configure NGINX web servers for SSL/TLS certificates, migrate from HTTP to HTTPS, and redirect all traffic using HTTP 301 redirect from HTTP to HTTPS. 
By the end of this course, you will become a guru of SSL and TLS encryption and will be able to easily obtain and install SSL certificates on your web servers.</p>
        <h2>What You Will Learn</h2><p>Learn how to install SSL/TLS certificate on web servers<br>Differentiate between HTTP and HTTPS<br>Secure WordPress with Apache using SSL/TLS certificates<br>Understand what a CA is and how the chain of trust is built<br>Install and configure an NGINX web server for SSL/TLS encryption<br>Redirect all traffic using HTTP 301 redirect from HTTP to HTTPS</p>
        <h2>Audience</h2><p>This course is for anyone who wants to learn SSL via real-life projects. This course will also be beneficial for website owners, DevOps engineers, web developers, network engineers, and JavaScript developers.</p>
        <h2>Approach</h2><p>In this course, all practice exercises are performed on a real domain with real hosting. When you've completed the course, you'll have production-ready solutions with HTTPS set up and HTTP-to-HTTPS redirection.</p>
        <h2>Key Features</h2><p>Use Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt * With the help of OpenSSL, generate RSA keys and self-signed certificates * Configure Cloudflare for your domain and set up different SSL modes of operations</p>
        
        <h2>About the Author</h2><h3>Bogdan Stashchuk</h3><p>Bogdan Stashchuk has over 20 years of experience as a software engineering instructor. He excels at breaking down complex topics into easy-to-follow steps. His courses are designed with hands-on exercises, ensuring that learners can actively participate and apply what they learn. From start to finish, students can follow along and complete tasks just as Bogdan demonstrates in his lectures. He also includes challenging assignments with detailed solutions. This approach helps learners understand and remember the material long after they've completed the course. Through his dedication and expertise, Bogdan ensures a valuable and effective learning experience for everyone.</p>
        <h2>Course Outline</h2><h4>1. Introduction</h4><p></p><br><h4>2. Introduction to HTTPS and TLS</h4><p></p><br><h4>3. Encryption and Hashing Overview</h4><p></p><br><h4>4. RSA, Certificates, and Chain of Trust</h4><p></p><br><h4>5. SSL, TLS, and HTTPS</h4><p></p><br><h4>6. Launching TLS Secured Website with Free Domain and Hosting</h4><p></p><br><h4>7. Custom Domain with Free Hosting</h4><p></p><br><h4>8. Free TLS Certificate (Let's Encrypt) on Paid Hosting</h4><p></p><br><h4>9. Cloudflare with Free TLS Certificate</h4><p></p><br><h4>10. Configuring NGINX Web Server and Installing TLS Certificate</h4><p></p><br><h4>11. Creating a Self-Signed Certificate Using OpenSSL</h4><p></p><br><h4>12. Getting and Installing a Custom Certificate</h4><p></p><br><h4>13. Cleanup</h4><p></p>

Online Course Creation

Basic Security Training (BST)

This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.

SSL Complete Guide 2021: HTTP to HTTPS

<h3><b>Securing UNIX systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure UNIX accounts.</li>
					              <li>Secure UNIX file systems.</li>
                   <li>Secure UNIX access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing UNIX systems course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing UNIX systems course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing UNIX systems

<h3><b>Securing Linux systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure Linux accounts.</li>
					              <li>Secure Linux file systems.</li>
                   <li>Secure Linux access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing Linux systems training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing Linux systems training course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing Linux systems

<h3><b>Definitive 802.1X training course description</b></h3>
        <p>
        A hands-on training course concentrating solely on 802.1X. Hands on sessions follow major chapters to reinforce the theory.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Describe 802.1X.</li>
                   		 <li>Explain how 802.1X works</li>
                   		 <li>Configure 802.1X</li>
                   		 <li>Troubleshoot 802.1X.</li>
                  </ul>
				
        <h5><b>Definitive 802.1X training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network staff.<br />
                    Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Definitive 802.1X training course contents</b></h3>
				<ul>	<li>Introduction</li><p>
What is 802.1X? Authentication access, 802.3,
802.11. IEEE, 802, 802.1X-2001, 802.1X-2010.
				</p><li>Architecture</li><p>
Supplicant, Authenticator, Authentication server,
EAP, EAPOL, RADIUS, Diameter.
</p><li>Port configuration</li><p>
802.1X in a switch environment.
<br /><span>Hands on</span> Configuring 802.1X.
</p><li>How it works</li><p>
Controlled ports, uncontrolled ports.
Authentication flow chart, Initialisation, initiation,
negotiation, authentication.
<br /><span>Hands on</span> 802.1X packet analysis.
</p><li>802.1X and 802.11</li><p>
WiFi, WiFi security.
<br /><span>Hands on</span> 802.1X WiFi port access.
</p><li>EAP</li><p>
Extensible Authentication Protocol, RFC 3748,
RFC 5247. EAP methods: Weak, MD5, LEAP,
Strong: TTLS, TLS, FAST. Encapsulation:
802.1X, PEAP, RADIUS, Diameter, PPP.
</p><li>802.1X accounting</li><p>
RADIUS, accounting messages, 802.1X
accounting AV pairs.
</p><li>8021.X and VLANS</li><p>
VLANs, Guest VLAN, restricted VLAN, voice
VLAN.
<br /><span>Hands on</span> VLAN assignments with 802.1X.

</p>
				</ul>

Definitive 802.1X for engineers

<h3><b>Network forensics training course description</b></h3>
        <p>
   This course studies network forensics-monitoring and
analysis of network traffic for information gathering,
intrusion detection and legal evidence. We focus on the
technical aspects of network forensics rather than other
skills such as incident response procedures etc.. Hands
on sessions follow all the major sections.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Recognise network forensic data sources.</li>
	<li>Perform network forensics using:<br />
		Wireshark<br />
                    NetFlow<br />
			Log analysis<br />
		
		
</li>
           <li>Describe issues such as encryption.</li>         
                  </ul>
        <h5>
        <b>Network forensics training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network and/or security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Network forensics training course contents</b></h3>
	<ul>				
					
<li>What is network forensics?</li><p>
What it is, host vs network forensics, purposes,
legal implications, network devices, network data
sources, investigation tools. <br /><span> Hands on </span> whois, DNS
queries.
					
</p><li>Host side network forensics</li><p>
Services, connections tools. <br /><span>Hands on</span> Windows
services, Linux daemons, netstat, ifoconfig/ipconfig,
ps and Process explorer, ntop, arp, resource
monitor.
</p><li>Packet capture and analysis</li><p>
Network forensics with Wireshark, Taps,
NetworkMiner. <br /><span>Hands on</span> Performing Network
Traffic Analysis using NetworkMiner and Wireshark.
</p><li>Attacks</li><p>
DOS attacks, SYN floods, vulnerability exploits,
ARP and DNS poisoning, application attacks, DNS
ANY requests, buffer overflow attacks, SQL
injection attack, attack evasion with fragmentation.
<br /><span>Hands on</span> Detecting scans, using nmap, identifying
attack tools.
</p><li>Calculating location</li><p>
Timezones, whois, traceroute, geolocation. Wifi
positioning. <br /><span>Hands on</span> Wireshark with GeoIP
lookup.
</p><li>Data collection</li><p>
NetFlow, sflow, logging, splunk, splunk patterns,
GRR. HTTP proxies. <br /><span>Hands on</span> NetFlow
configuration, NetFlow analysis.
</p><li>The role of IDS, firewalls and logs</li><p>
Host based vs network based, IDS detection styles,
IDS architectures, alerting. Snort. syslog-ng.
Microsoft log parser. <br /><span>Hands on</span> syslog, Windows
Event viewer.
</p><li>Correlation</li><p>
Time synchronisation, capture times, log
aggregation and management, timelines. <br /><span>Hands on</span>
Wireshark conversations.
</p><li>Other considerations</li><p>
Tunnelling, encryption, cloud computing, TOR.
<br /><span>Hands on</span> TLS handshake in Wireshark.
</p>
	</ul>

Definitive network forensics for engineers

<h3><b>Security+ training course description</b></h3>
        <p>
   A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
                    <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
                  </ul>
        <h5>
        <b>Security+ training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those wishing to pass the Security+ exam.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Security+ training course contents</b></h3>
				<ul>	<li>General security concepts</li><p>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					</p><li>Communication security</li><p>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	</p><li>Infrastructure security</li><p>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	</p><li>Cryptography basics</li><p>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	</p><li>Operational/Organisation security</li><p>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 
</p>
				</ul>

54 TLS courses delivered Online

Salesforce Design and Build Integration Solutions (ARC101)

By Nexus Human

VMware NSX-T Data Center for Intrinsic Security [V3.2]

By Nexus Human

SWSA v3.0-Securing the Web with Cisco Web Security Appliance

By Nexus Human

Architecting Hybrid Cloud Infrastructure with Anthos

By Nexus Human

VMware NSX for Intrinsic Security [V4.x]

By Nexus Human

Cisco ASA Firewall Training

By Janets

Cyber Security for Absolute Beginners - 2022 Edition - Part 02

By Packt

CWS-322 Citrix Virtual Apps and Desktops 7 Advanced Configuration and WEM Administration

By Nexus Human

CISSP®️ Certification Domain 4 - Communication and Network Security Video Boot Camp for 2022

By Packt

CompTIA Security+ Certification SY0-601: The Total Course

By Packt