Packt

Nomad

Cloud Computing

Learn to operate Nomad to deploy and manage applications and services across multiple environments, including on-premises, cloud, and hybrid. Learn from the expert who will guide you through lectures, demonstrations, and real-world scenarios, giving you the skills and knowledge you need to succeed with Nomad HashiCorp skillsets.

Getting Started with HashiCorp Nomad

General Admission

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Tier 1 Operators, administrators, and architects for VMware Horizon</p>Overview<p>By the end of the course, you should be able to meet the following objectives:<br />Recognize the features and benefits of VMware Horizon<br />Define a use case for your virtual desktop and application infrastructure<br />Use vSphere to create VMs to be used as desktops for VMware Horizon<br />Create and optimize Windows VMs to create VMware Horizon desktops<br />Install and Configure Horizon Agent on a VMware Horizon desktop<br />Configure, manage, and entitle desktop pools of full VMs<br />Configure and manage the VMware Horizon Client systems and connect the client to a VMware Horizon desktop<br />Configure, manage, and entitle pools of instant-clone desktops<br />Create and use Remote Desktop Services (RDS) desktops and application pools<br />Monitor the VMware Horizon environment using the VMware Horizon Console Dashboard and Horizon Help Desk Tool<br />Identify VMware Horizon Connection Server installation, architecture, and requirements<br />Describe the authentication and certificate options for the VMware Horizon environment<br />Recognize the integration process and benefits of Workspace ONE Accessâ¢ and Horizon 8<br />Compare the remote display protocols that are available in VMware Horizon<br />Describe the 3D rendering options available in Horizon 8<br />Discuss scalability options available in Horizon 8<br />Describe different security options for the Horizon environment</p><p>This five-day course gives you the hands-on skills to deliver virtual desktops and applications through a single virtual desktop infrastructure platform. You build on your skills in configuring and managing VMware HorizonÂ© 8 through a combination of lecture and hands-on labs. You learn how to configure and deploy pools of virtual machines and how to provide a customized desktop environment to end-users. Additionally, you learn how to install and configure a virtual desktop infrastructure platform. You learn how to install and configure VMware HorizonÂ© Connection Server?, VMware Unified Access Gateway?, how to configure a load balancer for use with Horizon, and how to establish Cloud Pod Architecture.</p></div><div id="course-pills-2"><h4>Course Introduction</h4><ul><li>Introductions and course logistics</li><li>Course objectives</li></ul><h4>Introduction to VMware Horizon</h4><ul><li>Recognize the features and benefits of Horizon</li><li>Describe the conceptual and logical architecture of Horizon</li></ul><h4>Introduction to Use Case</h4><ul><li>Convert customer requirements to use-case attributes</li><li>Define a use case for your virtual desktop and application infrastructure</li></ul><h4>vSphere for VMware Horizon</h4><ul><li>Explain basic virtualization concepts</li><li>Use VMware vSphereÂ© Client? to access your VMware vCenter System and VMware ESXi? hosts</li><li>Create a Windows virtual machine using vSphere</li></ul><h4>Create Windows Desktops</h4><ul><li>Outline the steps to install Horizon Agent on Windows virtual machines</li><li>Install Horizon Agent on a Windows virtual Machine</li><li>Optimize and prepare Windows virtual machines to set up Horizon desktop VMs</li></ul><h4>Create Linux Desktops</h4><ul><li>Create a Linux VM for Horizon</li><li>Install Horizon Agent on a Linux virtual machine</li><li>Optimize and prepare Linux virtual machines to set up Horizon desktop VMs</li></ul><h4>Creating and Managing Desktop Pools</h4><ul><li>Identify the steps to set up a template for desktop pool deployment</li><li>List the steps to add desktops to the VMware HorizonÂ© Connection Server? inventory</li><li>Compare dedicated-assignment and floating-assignment pools</li><li>Outline the steps to create an automated pool</li><li>Define user entitlement</li><li>Explain the hierarchy of global, pool-level, and user-level policies</li></ul><h4>VMware Horizon Client Options</h4><ul><li>Describe the different clients and their benefits</li><li>Access the Horizon desktop using various Horizon clients and HTML</li><li>Configure integrated printing, USB redirection, and the shared folders option</li><li>Configure session collaboration and media optimization for Microsoft Teams</li></ul><h4>Creating and Managing Instant-Clone Desktop Pools</h4><ul><li>List the advantages of instant clones</li><li>Explain the provisioning technology used for instant clone desktop pools</li><li>Set up an automated pool of instant clones</li><li>Push updated images to instant clone desktop pools</li></ul><h4>Creating RDS Desktop and Application Pools</h4><ul><li>Explain the difference between an RDS desktop pool and an automated pool</li><li>Compare and contrast an RDS session host pool, a farm, and an application pool</li><li>Create an RDS desktop pool and an application pool</li><li>Access RDS desktops and application from Horizon Client</li><li>Use the instant clone technology to automate the build-out of Remote Desktop Session Host farms</li><li>Configure load-balancing for RDSHs on a farm</li></ul><h4>Monitoring VMware Horizon</h4><ul><li>Monitor the status of the Horizon components using the Horizon Administrator console dashboard</li><li>Monitor desktop sessions using the HelpDesk tool</li><li>Monitor the performance of the remote desktop using the Horizon Performance Tracker</li></ul><h4>Horizon Connection Server</h4><ul><li>Recognize the VMware Horizon reference architecture</li><li>Identify the Horizon Connection Server supported features</li><li>Identify the recommended system requirements for Horizon Connection Server</li><li>Configure the Horizon event database</li><li>Outline the steps for the initial configuration of Horizon Connection Server</li><li>Discuss the AD LDS database as a critical {an important component?} component of the Horizon Connection Server installation</li></ul><h4>Horizon Protocols</h4><ul><li>Compare the remote display protocols that are available in VMware Horizon</li><li>Describe the BLAST Display Protocol Codecs</li><li>Summarize the BLAST Codec options</li><li>List the ideal applications for each BLAST codec</li><li>Describe the BLAST and PCoIP ADMX GPO common configurations</li></ul><h4>Graphics in Horizon</h4><ul><li>Describe the 3D rendering options available in Horizon 8</li><li>Compare vSGA and vDGA</li><li>List the steps to configure graphics cards for use in a Horizon environment</li></ul><h4>Securing Connections: Network</h4><ul><li>Compare tunnels and direct connections for client access to desktops</li><li>Discuss the benefits of using Unified Access Gateway</li><li>List the Unified Access Gateway firewall rules</li><li>Configure TLS certificates in Horizon</li></ul><h4>Securing Connections: Authentication</h4><ul><li>Compare the authentication options that Horizon Connection Server supports</li><li>Restrict access to the Horizon remote desktops using restricted entitlements</li><li>Describe the smart card authentication methods that Horizon Connection Server supports</li><li>Explain the purpose of permissions, roles, and privileges in VMware Horizon</li><li>Create custom roles</li></ul><h4>Horizon Scalability</h4><ul><li>Describe the purpose of a replica connection server</li><li>Explain how multiple Horizon Connection Server instances in a pod maintain synchronization</li><li>List the steps to configure graphics cards for use in a Horizon environment</li><li>Configure a load balancer for use in a Horizon environment</li><li>Explain Horizon Cloud Pod Architecture LDAP replication.</li><li>Explain Horizon Cloud Pod Architecture scalability options</li></ul><h4>Horizon Cloud and Universal Broker</h4><ul><li>Recognize the features and benefits of Horizon Cloud Service</li><li>Use Universal broker to connect to a Horizon Cloud instance</li><li>Configure and pair the Horizon Cloud Connector appliance with Horizon Connection Server</li></ul><h4>Workspace ONE Access and Virtual Application Management</h4><ul><li>Recognize the features and benefits of Workspace ONE Access</li><li>Explain identity management in Workspace ONE Access</li><li>Explain access management in Workspace ONE Access</li><li>Describe the requirements to install and configure True SSO in a Horizon environment</li><li>Describe the Workspace ONE Access directory integration</li><li>Deploy virtual applications with Workspace services</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br />Notes<p>Delivery by TDSynex, Exit Certified and New Horizons an VMware Authorised Training Centre (VATC)</p><p>Nexus Humans VMware Horizon: Deploy and Manage [V8.8] training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the VMware Horizon: Deploy and Manage [V8.8] course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Nexus Human

VMware Vsphere

vSphere

Microsoft Virtual Academy (MVA)

Remote Desktop Software

VMware Horizon: Deploy and Manage [V8.8]

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p>Security engineers<br />Security administrators<br />Security architects<br />Operations engineers<br />Network engineers<br />Network administrators<br />Network or security technicians<br />Network managers<br />System designers<br />Cisco integrators and partners</p>Overview<p>After taking this course, you should be able to:<br />Describe and administer the Cisco Email Security Appliance (ESA)<br />Control sender and recipient domains<br />Control spam with Talos SenderBase and anti-spam<br />Use anti-virus and outbreak filters<br />Use mail policies<br />Use content filters<br />Use message filters to enforce email policies<br />Prevent data loss<br />Perform LDAP queries<br />Authenticate Simple Mail Transfer Protocol (SMTP) sessions<br />Authenticate email<br />Encrypt email<br />Use system quarantines and delivery methods<br />Perform centralized management using clusters<br />Test and troubleshoot</p><p>This course shows you how to deploy and use CiscoÂ© Email Security Appliance to establish protection for your email systems against phishing, business email compromise, and ransomware, and to help streamline email security policy management. This hands-on course provides you with the knowledge and skills to implement, troubleshoot, and administer Cisco Email Security Appliance, including key capabilities such as advanced malware protection, spam blocking, anti-virus protection, outbreak filtering, encryption, quarantines, and data loss prevention.<br />This course helps you prepare to take the exam, Securing Email with Cisco Email Security Appliance (300-720 SESA).</p></div><div id="course-pills-2"><h4>Describing the Cisco Email Security Appliance</h4><ul><li>Cisco Email Security Appliance Overview</li><li>Technology Use Case</li><li>Cisco Email Security Appliance Data Sheet</li><li>SMTP Overview</li><li>Email Pipeline Overview</li><li>Installation Scenarios</li><li>Initial Cisco Email Security Appliance Configuration</li><li>Centralizing Services on a Cisco</li></ul><h4>Administering the Cisco Email Security Appliance</h4><ul><li>Distributing Administrative Tasks</li><li>System Administration Managing and Monitoring Using the Command Line Interface (CLI)</li><li>Other Tasks in the GUI</li><li>Advanced Network Configuration</li><li>Using Email Security Monitor</li><li>Tracking Messages</li><li>Logging</li></ul><h4>Controlling Sender and Recipient Domains</h4><ul><li>Public and Private Listeners</li><li>Configuring the Gateway to Receive Email</li><li>Host Access Table Overview</li><li>Recipient Access Table Overview</li><li>Configuring Routing and Delivery Features</li></ul><h4>Controlling Spam with Talos SenderBase and Anti-Spam</h4><ul><li>SenderBase Overview</li><li>Anti-Spam</li><li>Managing Graymail</li><li>Protecting Against Malicious or Undesirable URLs</li><li>File Reputation Filtering and File Analysis</li><li>Bounce Verification</li></ul><h4>Using Anti-Virus and Outbreak Filters</h4><ul><li>Anti-Virus Scanning Overview</li><li>Sophos Anti-Virus Filtering McAfee Anti-Virus Filtering</li><li>Configuring the Appliance to Scan for Viruses</li><li>Outbreak Filters</li><li>How the Outbreak Filters Feature Works Managing Outbreak Filters</li></ul><h4>Using Mail Policies</h4><ul><li>Email Security Manager Overview </li><li>Mail Policies Overview</li><li>Handling Incoming and Outgoing Messages Differently </li><li>Matching Users to a Mail Policy Message Splintering</li><li>Configuring Mail Policies</li></ul><h4>Using Content Filters</h4><ul><li>Content Filters Overview</li><li>Content Filter Conditions</li><li>Content Filter Actions</li><li>Filter Messages Based on Content</li><li>Text Resources Overview</li><li>Using and Testing the Content Dictionaries Filter Rules</li><li>Understanding Text Resources</li><li>Text Resource Management</li><li>Using Text Resources</li></ul><h4> Using Message Filters to Enforce Email Policies </h4><ul><li>Message Filters Overview</li><li>Components of a Message Filter</li><li>Message Filter Processing</li><li>Message Filter Rules </li><li>Message Filter Actions</li><li>Attachment Scanning</li><li>Examples of Attachment Scanning Message Filters</li><li>Using the CLI to Manage Message Filters</li><li>Message Filter Examples</li><li>Configuring Scan Behavior</li></ul><h4>Preventing Data Loss</h4><ul><li>Overview of the Data Loss Prevention (DLP) Scanning Process</li><li>Setting Up Data Loss Prevention</li><li>Policies for Data Loss Prevention </li><li>Message Actions</li><li>Updating the DLP Engine and Content Matching Classifiers</li></ul><h4>Using LDAP</h4><ul><li>Overview of LDAP </li><li>Working with LDAP</li><li>Using LDAP Queries</li><li>Authenticating End-Users of the Spam Quarantine</li><li>Configuring External LDAP Authentication for Users</li><li>Testing Servers and Queries</li><li>Using LDAP for Directory Harvest Attack Prevention</li><li>Spam Quarantine Alias Consolidation Queries</li><li>Validating Recipients Using an SMTP Server</li></ul><h4>SMTP Session Authentication</h4><ul><li>Configuring AsyncOS for SMTP Authentication</li><li>Authenticating SMTP Sessions Using Client Certificates</li><li>Checking the Validity of a Client Certificate</li><li>Authenticating User Using LDAP Directory</li><li>Authenticating SMTP Connection Over Transport Layer Security (TLS) Using a Client Certificate</li><li>Establishing a TLS Connection from the Appliance</li><li>Updating a List of Revoked Certificates</li></ul><h4>Email Authentication</h4><ul><li>Email Authentication Overview</li><li>Configuring DomainKeys and DomainKeys Identified Mail (DKIM) Signing</li><li>Verifying Incoming Messages Using DKIM</li><li>Overview of Sender Policy Framework (SPF) and SIDF Veri?cation</li><li>Domain-based Message Authentication Reporting and Conformance (DMARC) Verification</li><li>Forged Email Detection</li></ul><h4>Email Encryption</h4><ul><li>Overview of Cisco Email Encryption</li><li>Encrypting Messages</li><li>Determining Which Messages to Encrypt</li><li>Inserting Encryption Headers into Messages</li><li>Encrypting Communication with Other Message Transfer Agents (MTAs) </li><li>Working with Certificates </li><li>Managing Lists of Certificate Authorities</li><li>Enabling TLS on a Listener?s Host Access Table (HAT)</li><li>Enabling TLS and Certi?cate Verification on Delivery</li><li>Secure/Multipurpose Internet Mail Extensions (S/MIME) Security Services</li></ul><h4>Using System Quarantines and Delivery Methods</h4><ul><li>Describing Quarantines</li><li>Spam Quarantine</li><li>Setting Up the Centralized Spam Quarantine</li><li>Using Safelists and Blocklists to Control Email Delivery Based on Sender</li><li>Configuring Spam Management Features for End Users </li><li>Managing Messages in the Spam Quarantine</li><li>Policy, Virus, and Outbreak Quarantines </li><li>Managing Policy, Virus, and Outbreak Quarantines </li><li>Working with Messages in Policy, Virus, or Outbreak Quarantines</li><li>Delivery Methods</li></ul><h4>Centralized Management Using Clusters</h4><ul><li>Overview of Centralized Management Using Clusters</li><li>Cluster Organization</li><li>Creating and Joining a Cluster </li><li>Managing Clusters</li><li>Cluster Communication</li><li>Loading a Configuration in Clustered Appliances</li><li>Best Practices</li></ul><h4>Testing and Troubleshooting</h4><ul><li>Debugging Mail Flow Using Test Messages: Trace</li><li>Using the Listener to Test the Appliance</li><li>Troubleshooting the Network</li><li>Troubleshooting the Listener</li><li>Troubleshooting Email Delivery</li><li>Troubleshooting Performance </li><li>Web Interface Appearance and Rendering Issues</li><li>Responding to Alerts</li><li>Troubleshooting Hardware Issues </li><li>Working with Technical Support</li></ul><h4>References</h4><ul><li>Model Specifications for Large Enterprises </li><li>Model Specifications for Midsize Enterprises and Small-to-Midsize Enterprises or Branch O?ces</li><li>Cisco Email Security Appliance Model Specifications for Virtual Appliances</li></ul></div>

IT Security

Certificate in Information Security Management Principles (CISMP)

Certified Cloud Security Professional (CCSP)

Cyber Security

Security Awareness

Information Security Awareness

Cisco Securing Email with Cisco Email Security Appliance v3.1 (SESA)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Linux system administrators, site reliability engineers, and other IT professionals with some Ansible experience who are interested in learning how to manage and automate the deployment, configuration, and operation of key network services included with Red Hat Enterprise Linux 8.</p>Overview<p>Provide key network services using software included with Red Hat Enterprise Linux 8, including DNS with Unbound and BIND9, DHCP and DHCPv6, client e-mail transmission, printing service, NFS and SMB protocol file sharing, SQL database service with MariaDB, and web services using Apache HTTPD, nginx, Varnish, and HAProxy.     Configure advanced networking for server use cases, including device teaming.     Use Red Hat Ansible Engine to automate the manual deployment and configuration tasks covered in this course.</p><p>Learn how to configure, manage, and scale key services used in the data center  Red Hat Services Management and Automation (RH358) is designed for IT professionals with some experience managing LinuxÂ© systems and want to learn more about how to manage and deploy network services included with Red HatÂ© Enterprise Linux which are particularly important in the modern IT data center. You will learn how to install, configure, and manage basic configurations of these services manually, and then use Red Hat AnsibleÂ© Engine to automate your work in a scalable, repeatable manner.  This course is based on Red Hat Ansible Engine 2.9 and Red Hat Enterprise Linux 8.1.</p></div><div id="course-pills-2"><h3>1 - Manage network services</h3> <ul> <li>Discuss and review key tools and skills needed to manage network services.</li> </ul> <h3>2 - Configure link aggregation</h3> <ul> <li>Improve the redundancy or throughput of network connections of servers by configuring Linux network teaming between multiple network interfaces.</li> </ul> <h3>3 - Manage DNS and DNS servers</h3> <ul> <li>Explain the operation of DNS service, troubleshoot DNS issues, and configure servers to act as a DNS caching nameserver or as an authoritative name server.</li> </ul> <h3>4 - Manage DHCP and IP address assignment</h3> <ul> <li>Explain and configure services used for IPv4 and IPv6 address assignment including DHCP, DHCPv6, and SLAAC.</li> </ul> <h3>5 - Manage printers and printing files</h3> <ul> <li>Configure systems to print to a network printer that supports IPP Everywhere, as well as manage existing printer queues.</li> </ul> <h3>6 - Configure email transmission</h3> <ul> <li>Discuss how mail servers operate, then configure a server to use system tools and Postfix to send email messages through an outbound mail relay.</li> </ul> <h3>7 - Configure MariaDB SQL databases</h3> <ul> <li>Discuss the basic operation of SQL-based relational databases, perform basic SQL queries for troubleshooting, and be able to set up a simple MariaDB database service.</li> </ul> <h3>8 - Configure web servers</h3> <ul> <li>Provide web content from Apache HTTPD or Nginx web servers, then configure them with virtual hosts and TLS-based encryption.</li> </ul> <h3>9 - Optimize web server traffic</h3> <ul> <li>Improve performance of your web servers by using Varnish to cache static content being served and HAProxy to terminate TLS connections and balance load between servers.</li> </ul> <h3>10 - Provide file-based network storage</h3> <ul> <li>Deliver simple file-based network shares to clients using the NFS and SMB protocols.</li> </ul> <h3>11 - Access block-based network storage</h3> <ul> <li>Configure iSCSI initiators on your servers to access block-based storage devices provided by network storage arrays or Ceph storage clusters.</li> </ul></div>

RHCE

Linux Administration

LPIC-1:Linux Administrator

Operating Systems & Services

IT Networking Fundamentals

Ansible

Red Hat Services Management and Automation (RH358)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed for technical professionals who require the skills to administer IBM MQ.</p>Overview<p>After completing this course, you should be able to:<br />Describe the IBM MQ deployment options<br />Create and manage queue managers, queues, and channels<br />Use the IBM MQ sample programs and utilities to test the IBM MQ network<br />Configure distributed queuing<br />Configure MQ client connections to a queue manager<br />Define and administer a queue manager cluster<br />Administer Java Message Service (JMS) in MQ<br />Implement basic queue manager restart and recovery procedures<br />Use IBM MQ troubleshooting tools to identify the cause of a problem in the IBM MQ network<br />Manage IBM MQ security<br />Monitor the activities and performance of an IBM MQ system</p><p>This course is also available as self-paced virtual (e-learning) course IBM MQ V9.1 System Administration (ZM156G). This option does not require any travel.This course teaches you how to customize, operate, administer, and monitor IBM MQ on-premises on distributed operating systems. The course covers configuration, day-to-day administration, problem recovery, security management, and performance monitoring. In addition to the instructor-led lectures, the hands-on exercises provide practical experience with distributed queuing, working with MQ clients, and implementing clusters, publish/subscribe messaging. You also learn how to implement authorization, authentication, and encryption, and you learn how to monitor performance.</p></div><div id="course-pills-2"><h4>Introducing IBM MQ Exercise</h4><ul><li>Getting started with IBM MQ</li></ul><h4>Working with IBM MQ administration tools Exercise</h4><ul><li>Working with IBM MQ administration tools</li></ul><h4>Configuring distributed queuing Exercise</h4><ul><li>Implementing distributed queuing</li></ul><h4>Managing clients and client connections Exercise</h4><ul><li>Connecting an IBM MQ client Advanced IBM MQ client features</li></ul><h4>Working with queue manager clusters Exercise</h4><ul><li>Implementing a basic cluster</li></ul><h4>Publish/subscribe messaging Exercise</h4><ul><li>Configuring publish/subscribe message queuing</li></ul><h4>Implementing basic security in IBM MQ Exercise</h4><ul><li>Controlling access to IBM MQ</li></ul><h4>Securing IBM MQ channels with TLS Exercise</h4><ul><li>Securing channels with TLS Authenticating channels and connections</li></ul><h4>Exercise</h4><ul><li>Implementing connection authentication Supporting JMS with IBM MQ Diagnosing problems</li><li>Running an IBM MQ trace Backing up and restoring IBM MQ messages and object definitions</li><li>Using a media image to restore a queue</li><li>Backing up and restoring IBM MQ object definitions High availability Monitoring and configuring IBM MQ for performance</li><li>Monitoring IBM MQ for performance</li><li>Monitoring resources with the IBM MQ Console</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans WM156G IBM MQ V9.1 System Administration (using Windows for labs) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the WM156G IBM MQ V9.1 System Administration (using Windows for labs) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Microsoft AZ-900

IBM MQ

Manager Training

Trainers Course

WM156G IBM MQ V9.1 System Administration (using Windows for labs)

<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
					<div>
			<div></div>
		</div>
				</div>
				</div>
				<div>
				<div>
			
				</div>
				<div>
				<div>
					<div><p>Would you like to pursue a career as a professional network security analyst? In the digital era, cyberattacks pose a threat to data. Our Cisco ASA Firewall Training with Step-by-Step Lab Workbook course will take you through lessons that will equip you with the skills to protect data from attackers.</p><p>This course begins by teaching you about network security terminology. From lectures one to five, you will learn about security pillars like confidentiality, integrity, and availability. Moreover, you will get insights into the fundamentals of firewall technologies. Lesson five will give you a brief idea of the Cisco ASA Firewall. From lessons six to nine, you will learn about 'Install Cisco ASAv Firewall in GNS3', 'Install Cisco ASAv Firewall on EVE-NG' and 'Install Cisco ASAv Firewall on VMWare Workstation'.</p><p>From lectures eleven to thirty-three, you will learn in detail about routing and access control. In lecture eighteen, you will learn about routing and static routing. You will explore dynamic protocols like RIP, OSPF, and EIGRP. You will gain mastery of NAT from the learning of lectures 36-43 and also introduced to static, dynamic, and identity NAT here. Advanced topics like transparent firewalls, ASDM walkthroughs, redundancy, and security contexts are covered in lessons 45-lesson 60.</p><p>In lesson 52, you will become familiar with the fundamental concepts of cryptography technologies and understand encryption techniques. The next lesson focuses on explaining symmetric and asymmetric encryption. When you move to lesson 55, you will discover the concepts of VPN. Lesson 58 of this course will help you understand SSL/TLS. This course ends with a focus on verifying NAT-T on routers and a client-based remote access VPN lab.</p><p>This high-quality course will help you achieve your dream of becoming a network analyst.</p></div>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</div></section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
			<h2><b> Learning outcome</b></h2>		</div>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Deep understanding of network security terminology</span>
									</li>
								<li>
											<span>
													</span>
										<span>Gain proficiency in the Cisco ASA Firewall</span>
									</li>
								<li>
											<span>
													</span>
										<span>Develop expertise in ACL configuration</span>
									</li>
								<li>
											<span>
													</span>
										<span>Learn Network Address Translation and Port Address Translation</span>
									</li>
								<li>
											<span>
													</span>
										<span>Acquire skills in VPN technologies and Cryptography</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
					</div>
				</div>
				<div>
				<div>
					
			</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
			<h2> <b>Why should I take this course?</b></h2>		</div>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Increase expertise in network security</span>
									</li>
								<li>
											<span>
													</span>
										<span>Get a certificate which is internationally recognised</span>
									</li>
								<li>
											<span>
													</span>
										<span>Self-learning pace</span>
									</li>
								<li>
											<span>
													</span>
										<span>Add skills to your resume to increase its value</span>
									</li>
								<li>
											<span>
													</span>
										<span>Well-structure course content</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
			<h2> <b>Career Path</b></h2>		</div>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Network Security Analyst</span>
									</li>
								<li>
											<span>
													</span>
										<span>Firewall Administrator</span>
									</li>
								<li>
											<span>
													</span>
										<span>Penetration Tester </span>
									</li>
								<li>
											<span>
													</span>
										<span>Network Engineer</span>
									</li>
								<li>
											<span>
													</span>
										<span>Cyber Security Consultant</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
			<h2> <b>Requirements</b></h2>		</div>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Basic academic knowledge</span>
									</li>
								<li>
											<span>
													</span>
										<span>Passionate about network security</span>
									</li>
								<li>
											<span>
													</span>
										<span>Fast internet connection</span>
									</li>
								<li>
											<span>
													</span>
										<span>Smartphone/PC/Laptop</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>

Skill Up

Cisco Certified Network Associate (CCNA)

Certified in Cybersecurity (CC)

Cisco Certified Network Professional certification (CCNP)

Network & Security

Cisco Certified Internetwork Expert (CCIE)

Build shields with CISCO ASA Firewall skills and survive the cyberattacks. Learn Cisco ASA Firewall Basic Configuration Commands, Introduction to Routing & Static Routing.

Cisco ASA Firewall Training with Step-by-Step Lab Workbook

HashiCorp Vault

The course will provide a comprehensive overview of Consul and its capabilities, including deploying a single data center, registering services using service discovery, and accessing Consul Key/Value (KV). It is designed for individuals who possess basic terminal skills and have an understanding of application and data center/cloud networking architectures for running applications.

HashiCorp Certified - Consul Associate Course

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations' networks.</p>Overview<p>Deploy the appropriate operation mode for your network.<br />Use the GUI and CLI for administration.<br />Identify the characteristics of the Fortinet security fabric.<br />Control network access to configured networks using firewall policies.<br />Apply port forwarding, source NAT, and destination NAT.<br />Authenticate users using firewall policies.<br />Understand encryption functions and certificates.<br />Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies.<br />Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites.<br />Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports.<br />Fight hacking and denial of service (DoS).<br />Defend against data leaks by identifying files with sensitive data, and block them from leaving your private network.<br />Offer an SSL VPN for secure access to your private network.<br />Implement a dial-up IPsec VPN tunnel between FortiGate and FortiClient.<br />Collect and interpret log entries.</p><p>In this three-day course, you will learn how to use basic FortiGate features, including security profiles.</p></div><div id="course-pills-2"><h4>Course Outline</h4><ul><li>Module 1. Introduction to FortiGate and the Security Fabric</li><li>Module 2. Firewall Policies</li><li>Module 3. Network Address Translation (NAT)</li><li>Module 4. Firewall Authentication</li><li>Module 5. Logging and Monitoring</li><li>Module 6. Certificate Operations</li><li>Module 7. Web Filtering</li><li>Module 8. Application Control</li><li>Module 9. Antivirus</li><li>Module 10. Intrusion Prevention and Denial of Service</li><li>Module 11. SSL VPN</li><li>Module 12. Dial-Up IPsec VPN</li><li>Module 13. Data Leak Prevention (DLP)</li></ul></div>

Basic Security Training (BST)

Cyber Security Foundation

CompTIA Security+

FortiGate Security

<strong>This course covers the best practices required for AWS Solutions Architect and AWS SysOps Administrator. Explore real-time 3-tier architecture addressing security, high availability, scalability, and resource optimization. Basic knowledge of Linux and a desire to adopt cloud models are all you need to get started.</strong>
        <p>Amazon provides on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis. This course focuses on the best practices to be followed as an AWS solutions architect and AWS SysOps administrator.

You will look at the top 25 AWS services such as EC2, VPC, Lambda, Route 53, Glacier, CloudFront, RDS, DynamoDB, IAM, API Gateway, CloudWatch, Trusted Adviser, EFS, SNS, Lightsail, Certificate Manager, KMS, S3, CloudTrail, Systems Manager, Inspector, Secrets Manager, CloudFormation, Elastic Beanstalk, and Cost Explorer services.

This course follows a system-driven approach to explain these AWS services, the architecture view for every specific service, and real-time use cases with practical implementation. You will see how we can deploy these resources in the AWS cloud and provide logical relationships between each resource to have a production-ready environment.

By the end of this course, you will have learned to plan, design, and deploy the infrastructure in the AWS cloud. You will start managing and supporting the infrastructure in the AWS cloud with the best efforts to minimize downtime from a business perspective. You will have learned the top 25 AWS services and adopted the best practices to be followed when deploying the infrastructure in AWS, addressing security, high availability, and scalability solutions for the application.</p>
        <h2>What You Will Learn</h2><p>Get introduced to the IaaS, PaaS, and SaaS service models <br>Look at EC2 basics to advance - virtual servers in the AWS cloud <br>Monitor AWS resources and applications performance <br>Manage user access, encryption keys, AWS services, and resources <br>Create and manage resources with cloud formation templates <br>Explore the real-time 3-tier architecture</p>
        <h2>Audience</h2><p>This course is designed for beginner system administrators who want to explore cloud technologies and individuals who want career growth in AWS cloud technologies.<br><br>This will also be beneficial to AWS beginners who want to experience real-time AWS infrastructure with a hands-on approach.<br><br>The course focuses on expertise-level learning in AWS top 25 services with real-time projects. To gain the most out of this course, you should have basic knowledge of Linux and a desire to adopt the Cloud Model.</p>
        <h2>Approach</h2><p>This is a well-structured and comprehensive course keeping beginners in mind. The course follows a step-by-step, system-driven, and hands-on approach, covering the aspects of security, high availability, scalability, resource, and cost optimization best practices for AWS cloud architects.</p>
        <h2>Key Features</h2><p>A comprehensive course along with hands-on practical lab  * Real-time AWS project architecture along with use cases with lab practices  * Deep dive into the architecture view for each AWS service</p>
        
        <h2>About the Author</h2><h3>Valaxy Technologies</h3><p>Valaxy Technologies is recognized as one of the top Cloud and DevOps trainers. A.R. Shankar is the owner, founder, and one of the many instructors at Valaxy Technologies. While he has worked with various technologies in his career, he specializes in Cloud and DevOps. 

Valaxy Technologies has exponentially grown ever since its inception in 2013. The instructors at Valaxy Technologies have trained over 100,000 global learners. </p>
        <h2>Course Outline</h2><h4>1. AWS Tutorial | Course Introduction</h4><p></p><br><h4>2. Cloud Computing Basics - Introducing IaaS, PaaS & SaaS Service Models</h4><p></p><br><h4>3. Pre-Requisites - Key Skills Required Before Get Started with AWS</h4><p></p><br><h4>4. AWS Global Infrastructure</h4><p></p><br><h4>5. EC2 Basics- Virtual Servers in AWS Cloud</h4><p></p><br><h4>6. Networking Basics - Basics of Network Topology and IP address classes</h4><p></p><br><h4>7. VPC - Configure Custom Virtual Private Cloud in the AWS Cloud</h4><p></p><br><h4>8. EC2 Advanced - Virtual Servers in AWS Cloud</h4><p></p><br><h4>9. EBS Volumes - Block Level Storage in the AWS Cloud</h4><p></p><br><h4>10. Cloud Watch Basics - Monitor AWS Resources & Applications Performance</h4><p></p><br><h4>11. Simple Notification Service</h4><p></p><br><h4>12. Certificate Manager - Provision, Manage & Deploy SSL/TLS Certificates</h4><p></p><br><h4>13. Route 53  - Scalable DNS and Domain Registration</h4><p></p><br><h4>14. Load Balancing - High Availability Solution for the Applications & Servers</h4><p></p><br><h4>15. Auto Scaling - Scale EC2 instances Proportion to Application Load</h4><p></p><br><h4>16. S3 - Scalable Object Storage in the AWS Cloud</h4><p></p><br><h4>17. IAM - Manage User Access and Encryption Keys</h4><p></p><br><h4>18. AWS CLI - Manage AWS Services & Resources through AWS CLI</h4><p></p><br><h4>19. Key Management Service - Generate & Manage AWS Encryption Keys</h4><p></p><br><h4>20. EFS - Managed Network File Storage for EC2</h4><p></p><br><h4>21. S3 Glacier - Data Archival Solution in the AWS Cloud</h4><p></p><br><h4>22. Cloud Watch Advanced - Monitor AWS Resources & Applications Performance</h4><p></p><br><h4>23. Cloud Front - Global Content Delivery Network</h4><p></p><br><h4>24. Cloud Trail - Track IAM user activity & API Usage</h4><p></p><br><h4>25. Lambda - Run Code without Thinking About Code | Serverless Architecture</h4><p></p><br><h4>26. RDS </h4><p></p><br><h4>27. DynamoDB</h4><p></p><br><h4>28. API Gateway - Build, Deploy & Manage APIs</h4><p></p><br><h4>29. Elastic Beanstalk</h4><p></p><br><h4>30. Cloud Formation - Create & Manager resources with Cloud Formation Templates</h4><p></p><br><h4>31. Systems Manager - Session Manager, Run Command, Parameter Store, Patch Manager</h4><p></p><br><h4>32. Secrets Manager - Rotate, Manage & Retrieve Secret through their life cycle</h4><p></p><br><h4>33. Inspector - Analyze Application Security & Report</h4><p></p><br><h4>34. LightSail - Launch & Manage Virtual Private Servers</h4><p></p><br><h4>35. AWS Limitations</h4><p></p><br><h4>36. AWS Cost Explorer</h4><p></p><br><h4>37. AWS Support</h4><p></p><br><h4>38. AWS Trusted Advisor</h4><p></p><br><h4>39. AWS Project - Explore Realtime 3-Tier Architecture!</h4><p></p><br><h4>40. AWS Project - Realtime 3-Tier Architecture LAB</h4><p></p><br><h4>41. AWS Cloud Practitioner - Foundations  Mock Exam</h4><p></p>

This course covers the best practices required for AWS Solutions Architect and AWS SysOps Administrator. Explore real-time 3-tier architecture addressing security, high availability, scalability, and resource optimization. Basic knowledge of Linux and a desire to adopt cloud models are all you need to get started.

AWS Tutorial: AWS Solutions Architect and SysOps Administrator

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations' networks should attend this course. You should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.</p>Overview<p>After completing this course, the successful student should be able to:<br />Deploy the appropriate operation mode for your network<br />Use the GUI and CLI for administration<br />Control network access to configured networks using firewall policies<br />Apply port forwarding, source NAT, and destination NAT<br />Authenticate users using firewall policies<br />Understand encryption functions and certificates<br />Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies<br />Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites<br />Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports<br />Fight hacking and denial of service (DoS)<br />Collect and interpret log entries<br />Identify the characteristics of the Fortinet Security Fabric</p><p>In this three-day course, you will learn how to use the most common FortiGate features, including security profiles. In interactive labs, you will explore firewall policies, the Fortinet Security Fabric, user authentication, and how to protect your network using security profiles, such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide you with a solid understanding of how to implement basic network security. Product Version FortiOS 7.2</p></div><div id="course-pills-2"><h4>Course Outline </h4><ul><li>1. Introduction and Initial Configuration</li><li>2. Firewall Policies</li><li>3. Network Address Translation</li><li>4. Firewall Authentication</li><li>5. Logging and Monitoring</li><li>6. Certificate Operations</li><li>7. Web Filtering</li><li>8. Application Control</li><li>9. Antivirus</li><li>10. Intrusion Prevention and Denial of Service</li><li>11. Security Fabric</li></ul></div>

FortiGate Security 7.2

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.</p><p></p><p></p><p>This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization?s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.</p><p></p>Prerequisites<p></p><li>AZ-104T00 - Microsoft Azure Administrator</li>  <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li>  <li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li>  <li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li>  <li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li><p></p></div><div id="course-pills-2"><h3>1 - Manage identities in Microsoft Entra ID</h3> <ul> <li>Secure users in Microsoft Entra ID</li> <li>Secure groups in Microsoft Entra ID</li> <li>Recommend when to use external identities</li> <li>Secure external identities</li> <li>Implement Microsoft Entra Identity protection</li> </ul> <h3>2 - Manage authentication by using Microsoft Entra ID</h3> <ul> <li>Configure Microsoft Entra Verified ID</li> <li>Implement multifactor authentication (MFA)</li> <li>Implement passwordless authentication</li> <li>Implement password protection</li> <li>Implement single sign-on (SSO)</li> <li>Integrate single sign-on (SSO) and identity providers</li> <li>Recommend and enforce modern authentication protocols </li> </ul> <h3>3 - Manage authorization by using Microsoft Entra ID</h3> <ul> <li>Configure Azure role permissions for management groups, subscriptions, resource groups, and resources</li> <li>Assign built-in roles in Microsoft Entra ID</li> <li>Assign built-in roles in Azure</li> <li>Create and assign a custom role in Microsoft Entra ID</li> <li>Implement and manage Microsoft Entra Permissions Management</li> <li>Configure Microsoft Entra Privileged Identity Management </li> <li>Configure role management and access reviews by using Microsoft Entra Identity Governance</li> <li>Implement Conditional Access policies</li> </ul> <h3>4 - Manage application access in Microsoft Entra ID</h3> <ul> <li>Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants</li> <li>Manage app registrations in Microsoft Entra ID</li> <li>Configure app registration permission scopes</li> <li>Manage app registration permission consent</li> <li>Manage and use service principals</li> <li>Manage managed identities for Azure resources</li> <li>Recommend when to use and configure a Microsoft Entra Application Proxy, including authentication</li> </ul> <h3>5 - Plan and implement security for virtual networks</h3> <ul> <li>Plan and implement Network Security Groups (NSGs) and Application Security Groups (ASGs)</li> <li>Plan and implement User-Defined Routes (UDRs)</li> <li>Plan and implement Virtual Network peering or gateway</li> <li>Plan and implement Virtual Wide Area Network, including secured virtual hub</li> <li>Secure VPN connectivity, including point-to-site and site-to-site</li> <li>Implement encryption over ExpressRoute</li> <li>Configure firewall settings on PaaS resources</li> <li>Monitor network security by using Network Watcher, including NSG flow logging</li> </ul> <h3>6 - Plan and implement security for private access to Azure resources</h3> <ul> <li>Plan and implement virtual network Service Endpoints</li> <li>Plan and implement Private Endpoints</li> <li>Plan and implement Private Link services</li> <li>Plan and implement network integration for Azure App Service and Azure Functions</li> <li>Plan and implement network security configurations for an App Service Environment (ASE)</li> <li>Plan and implement network security configurations for an Azure SQL Managed Instance</li> </ul> <h3>7 - Plan and implement security for public access to Azure resources</h3> <ul> <li>Plan and implement Transport Layer Security (TLS) to applications, including Azure App Service and API Management</li> <li>Plan, implement, and manage an Azure Firewall, Azure Firewall Manager and firewall policies</li> <li>Plan and implement an Azure Application Gateway</li> <li>Plan and implement an Azure Front Door, including Content Delivery Network (CDN)</li> <li>Plan and implement a Web Application Firewall (WAF)</li> <li>Recommend when to use Azure DDoS Protection Standard</li> </ul> <h3>8 - Plan and implement advanced security for compute</h3> <ul> <li>Plan and implement remote access to public endpoints, Azure Bastion and just-in-time (JIT) virtual machine (VM) access</li> <li>Configure network isolation for Azure Kubernetes Service (AKS)</li> <li>Secure and monitor AKS</li> <li>Configure authentication for AKS</li> <li>Configure security for Azure Container Instances (ACIs)</li> <li>Configure security for Azure Container Apps (ACAs)</li> <li>Manage access to Azure Container Registry (ACR)</li> <li>Configure disk encryption, Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption</li> <li>Recommend security configurations for Azure API Management</li> </ul> <h3>9 - Plan and implement security for storage</h3> <ul> <li>Configure access control for storage accounts</li> <li>Manage life cycle for storage account access keys</li> <li>Select and configure an appropriate method for access to Azure Files</li> <li>Select and configure an appropriate method for access to Azure Blob Storage</li> <li>Select and configure an appropriate method for access to Azure Tables</li> <li>Select and configure an appropriate method for access to Azure Queues</li> <li>Select and configure appropriate methods for protecting against data security threats, including soft delete, backups, versioning, and immutable storage</li> <li>Configure Bring your own key (BYOK)</li> <li>Enable double encryption at the Azure Storage infrastructure level</li> </ul> <h3>10 - Plan and implement security for Azure SQL Database and Azure SQL Managed Instance</h3> <ul> <li>Enable database authentication by using Microsoft Entra ID</li> <li>Enable and monitor database audit</li> <li>Identify use cases for the Microsoft Purview governance portal</li> <li>Implement data classification of sensitive information by using the Microsoft Purview governance portal</li> <li>Plan and implement dynamic mask</li> <li>Implement transparent data encryption?</li> <li>Recommend when to use Azure SQL Database Always Encrypted</li> </ul> <h3>11 - Plan, implement, and manage governance for security</h3> <ul> <li>Create, assign, and interpret security policies and initiatives in Azure Policy</li> <li>Configure security settings by using Azure Blueprint</li> <li>Deploy secure infrastructures by using a landing zone</li> <li>Create and configure an Azure Key Vault</li> <li>Recommend when to use a dedicated Hardware Security Module (HSM)</li> <li>Configure access to Key Vault, including vault access policies and Azure Role Based Access Control</li> <li>Manage certificates, secrets, and keys</li> <li>Configure key rotation</li> <li>Configure backup and recovery of certificates, secrets, and keys</li> </ul> <h3>12 - Manage security posture by using Microsoft Defender for Cloud</h3> <ul> <li>Implement Microsoft Defender for Cloud</li> <li>Identify and remediate security risks by using the Microsoft Defender for Cloud Secure Score and Inventory</li> <li>Assess compliance against security frameworks and Microsoft Defender for Cloud</li> <li>Add industry and regulatory standards to Microsoft Defender for Cloud</li> <li>Add custom initiatives to Microsoft Defender for Cloud</li> <li>Connect hybrid cloud and multicloud environments to Microsoft Defender for Cloud</li> <li>Identify and monitor external assets by using Microsoft Defender External Attack Surface Management</li> </ul> <h3>13 - Configure and manage threat protection by using Microsoft Defender for Cloud</h3> <ul> <li>Enable workload protection services in Microsoft Defender for Cloud, including Microsoft Defender for Storage, Databases, Containers, App Service, Key Vault, Resource Manager, and DNS</li> <li>Configure Microsoft Defender for Servers</li> <li>Configure Microsoft Defender for Azure SQL Database</li> <li>Manage and respond to security alerts in Microsoft Defender for Cloud</li> <li>Configure workflow automation by using Microsoft Defender for Cloud</li> <li>Evaluate vulnerability scans from Microsoft Defender for Server</li> </ul> <h3>14 - Configure and manage security monitoring and automation solutions</h3> <ul> <li>Monitor security events by using Azure Monitor</li> <li>Configure data connectors in Microsoft Sentinel</li> <li>Create and customize analytics rules in Microsoft Sentinel</li> <li>Configure automation in Microsoft Sentinel</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AZ-500T00 Microsoft Azure Security Technologies training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AZ-500T00 Microsoft Azure Security Technologies course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Microsoft AZ-104

Microsoft Azure

Microsoft AZ-303

Microsoft AZ-700

AZ-500T00 Microsoft Azure Security Technologies

Redhill

<h3><b>OpenSSL for engineers training course description</b></h3>
        <p>
      A hands on course covering OpenSSL. The course
focusses on the use of OpenSSL from the command
line as opposed to using its extensive libraries.
Certificate authorities are configured along with key
generation, HTTPS and a SSL VPN. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe OpenSSL.</li>
                          <li>Use OpenSSL.</li>
                          <li>Describe and implement:</li>
																										<li>Explain how the various technologies involved in an
OpenSSL work.</li>
                 
                  </ul>
        <h5>
        <b>OpenSSL for engineers training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network personnel.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP security foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>OpenSSL for engineers training course contents</b></h3>
				<ul>	<li>What is OpenSSL? </li><p>
What is SSL? SSL versions, TLS, TLS negotiation, TLS authentication, What is OpenSSL, Command line tool, SSL library. OpenSSH, OpenVPN.
<br /><span>Hands on</span> TLS packet analysis.

</p><li>Getting started with OpenSSL </li><p>
Downloading, source code, packages, installing, versions, configuration, openssl command. Cipher suite selection.
<br /><span>Hands on</span> Encrypting a file with openssl.

</p><li>Public and private keys </li><p>
Algorithms, creating keys, public keys, private keys, encrypting the private key.
<br /><span>Hands on</span> Encrypting a file with keys.

</p><li>Digital signatures </li><p>
Creating signatures, checking validity of signatures, Self signing SSL certificates. Viewing certificates. Certificate files. Converting between formats.
<br /><span>Hands on</span> Securing a web server with HTTPS.

</p><li>Simple PKI with OpenSSL </li><p>
Root CA, signing CA, configuration files, Certificate signing requests. Email certificates, TLS server certificates.
<br /><span>Hands on</span> Implementing a simple PKI with OpenSSL.
</p>
				</ul>

Systems & Network Training

Network Engineer

Definitive OpenSSL for engineers

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security for engineers

<h3><b>SIP security training course description</b></h3>
        <p>
        A hands-on course covering SIP security. It is assumed that delegates already know SIP as this course focuses purely on the security issues in SIP IP telephony networks. Hands-on practicals follow each major theory session and include use of various SIP security tools such as vomit, sipp, sipsak and sivus amongst others.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Secure SIP networks</li>
					<li>Use various SIP security tools</li>
                  </ul>
				
        <h5><b>SIP security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff working with SIP.<br />
                 Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>SIP security training course contents</b></h3>
				<ul>	<li>SIP review</li><p>
SIP infrastructure and entities, example SIP session.
<br /><span>Hands on</span> Simple SIP network with and without
authentication.
					</p><li>SIP security attacks</li><p>
 DOS attacks, infrastructure attacks, eavesdropping,
spoofing, replay, message integrity. <br /><span>Hands on</span> Basic
SIP packet capture, infrastructure attacks.
</p><li>SIP tools</li><p>
 SIP packet creation: Sivus, SIPsak, PROTOS, SFTF,
SIP bomber, SIPp, Seagull, Nastysip. SIP packet
generators: SIPNess, NetDude. Monitoring:
Wireshark, Cain &amp; Abel, Vomit, Oreka, VoiPong.
Scripts and tools: SIP-Fun, Skora.net, kphone-ddos,
sip-scan, sip-kill, sip-redirectrtp. Health of different
tools. <br /><span>Hands on</span> Generating SIP packets, rebuilding
conversations from captured packets, password
cracking.
</p><li>VPNs and SIP</li><p>
 IPSec, AH, ESP, transport mode, tunnel mode, Pre
Shared Keys, Public keys. <br /><span>Hands on</span> SIP calls over
IPSec.
</p><li>Secure SIP signaling</li><p>
 SIP relationship with HTTP, Deprecated HTTP 1.0
basic authentication, HTTP 1.1 Digest authentication,
S/MIME, SIPS, SIPS URI, TLS, DTLS, PKI
infrastructures. <br /><span>Hands on</span> SIP with TLS.
</p><li>Secure media streams</li><p>
 SRTP, features, packet format, default encryption,
default authentication, key distribution. S/MIME,
MIKEY, SDP security descriptions. SIP security
agreements. <br /><span>Hands on</span> Analysing SRTP packets.
</p><li>Firewalls</li><p>
 NAT traversal. Impact of firewall on infrastructure
attacks. TLS and firewalls. SIP specific firewalls.
<br /><span>Hands on</span> SIP calls through a firewall. 

</p>
				</ul>

SIP security for engineers

<strong>This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.</strong>
        <p>This course is all about securing websites with SSL/TLS certificates. We start by exploring the basics of symmetric encryption algorithms such as AES, asymmetric encryption (RSA), and hashing protocols (MD5 and SHA). We will also explain the fundamentals of computer networks and TCP/IP stacks; for that, we will use the Wireshark traffic analyzer. 
You will learn about the structure of SSL/TLS certificates. You will also understand why CAs (Certificate Authorities) are needed and how the chain of trust is built. 
We will perform multiple practice activities such as buying a domain and configuring DNS settings, using the Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt; then with the help of OpenSSL, we'll generate RSA keys and self-signed certificates, we'll secure WordPress with Apache using SSL/TLS certificates, and create a CSR (Certificate Signing Request) via OpenSSL and submit it to the CA server. We will configure Cloudflare for your domain and set up different SSL operation modes, install and configure NGINX web servers for SSL/TLS certificates, migrate from HTTP to HTTPS, and redirect all traffic using HTTP 301 redirect from HTTP to HTTPS. 
By the end of this course, you will become a guru of SSL and TLS encryption and will be able to easily obtain and install SSL certificates on your web servers.</p>
        <h2>What You Will Learn</h2><p>Learn how to install SSL/TLS certificate on web servers<br>Differentiate between HTTP and HTTPS<br>Secure WordPress with Apache using SSL/TLS certificates<br>Understand what a CA is and how the chain of trust is built<br>Install and configure an NGINX web server for SSL/TLS encryption<br>Redirect all traffic using HTTP 301 redirect from HTTP to HTTPS</p>
        <h2>Audience</h2><p>This course is for anyone who wants to learn SSL via real-life projects. This course will also be beneficial for website owners, DevOps engineers, web developers, network engineers, and JavaScript developers.</p>
        <h2>Approach</h2><p>In this course, all practice exercises are performed on a real domain with real hosting. When you've completed the course, you'll have production-ready solutions with HTTPS set up and HTTP-to-HTTPS redirection.</p>
        <h2>Key Features</h2><p>Use Certbot ACME client to automatically obtain a free SSL certificate from Let's Encrypt * With the help of OpenSSL, generate RSA keys and self-signed certificates * Configure Cloudflare for your domain and set up different SSL modes of operations</p>
        
        <h2>About the Author</h2><h3>Bogdan Stashchuk</h3><p>Bogdan Stashchuk has over 20 years of experience as a software engineering instructor. He excels at breaking down complex topics into easy-to-follow steps. His courses are designed with hands-on exercises, ensuring that learners can actively participate and apply what they learn. From start to finish, students can follow along and complete tasks just as Bogdan demonstrates in his lectures. He also includes challenging assignments with detailed solutions. This approach helps learners understand and remember the material long after they've completed the course. Through his dedication and expertise, Bogdan ensures a valuable and effective learning experience for everyone.</p>
        <h2>Course Outline</h2><h4>1. Introduction</h4><p></p><br><h4>2. Introduction to HTTPS and TLS</h4><p></p><br><h4>3. Encryption and Hashing Overview</h4><p></p><br><h4>4. RSA, Certificates, and Chain of Trust</h4><p></p><br><h4>5. SSL, TLS, and HTTPS</h4><p></p><br><h4>6. Launching TLS Secured Website with Free Domain and Hosting</h4><p></p><br><h4>7. Custom Domain with Free Hosting</h4><p></p><br><h4>8. Free TLS Certificate (Let's Encrypt) on Paid Hosting</h4><p></p><br><h4>9. Cloudflare with Free TLS Certificate</h4><p></p><br><h4>10. Configuring NGINX Web Server and Installing TLS Certificate</h4><p></p><br><h4>11. Creating a Self-Signed Certificate Using OpenSSL</h4><p></p><br><h4>12. Getting and Installing a Custom Certificate</h4><p></p><br><h4>13. Cleanup</h4><p></p>

Online Course Creation

IT Certifications

This course will teach you everything from scratch right from simple setups to complex solutions. If you want to master SSL and HTTPS in-depth, this course is for you! 
No prior knowledge of computer networks, encryption, or configuring web servers is required.

SSL Complete Guide 2021: HTTP to HTTPS

<h3><b>Securing UNIX systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure UNIX accounts.</li>
					              <li>Secure UNIX file systems.</li>
                   <li>Secure UNIX access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing UNIX systems course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing UNIX systems course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing UNIX systems

<h3><b>Securing Linux systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure Linux accounts.</li>
					              <li>Secure Linux file systems.</li>
                   <li>Secure Linux access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing Linux systems training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing Linux systems training course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing Linux systems

<h3><b>Definitive 802.1X training course description</b></h3>
        <p>
        A hands-on training course concentrating solely on 802.1X. Hands on sessions follow major chapters to reinforce the theory.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          <li>Describe 802.1X.</li>
                   		 <li>Explain how 802.1X works</li>
                   		 <li>Configure 802.1X</li>
                   		 <li>Troubleshoot 802.1X.</li>
                  </ul>
				
        <h5><b>Definitive 802.1X training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network staff.<br />
                    Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>SIP for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Definitive 802.1X training course contents</b></h3>
				<ul>	<li>Introduction</li><p>
What is 802.1X? Authentication access, 802.3,
802.11. IEEE, 802, 802.1X-2001, 802.1X-2010.
				</p><li>Architecture</li><p>
Supplicant, Authenticator, Authentication server,
EAP, EAPOL, RADIUS, Diameter.
</p><li>Port configuration</li><p>
802.1X in a switch environment.
<br /><span>Hands on</span> Configuring 802.1X.
</p><li>How it works</li><p>
Controlled ports, uncontrolled ports.
Authentication flow chart, Initialisation, initiation,
negotiation, authentication.
<br /><span>Hands on</span> 802.1X packet analysis.
</p><li>802.1X and 802.11</li><p>
WiFi, WiFi security.
<br /><span>Hands on</span> 802.1X WiFi port access.
</p><li>EAP</li><p>
Extensible Authentication Protocol, RFC 3748,
RFC 5247. EAP methods: Weak, MD5, LEAP,
Strong: TTLS, TLS, FAST. Encapsulation:
802.1X, PEAP, RADIUS, Diameter, PPP.
</p><li>802.1X accounting</li><p>
RADIUS, accounting messages, 802.1X
accounting AV pairs.
</p><li>8021.X and VLANS</li><p>
VLANs, Guest VLAN, restricted VLAN, voice
VLAN.
<br /><span>Hands on</span> VLAN assignments with 802.1X.

</p>
				</ul>

Definitive 802.1X for engineers

<h3><b>Network forensics training course description</b></h3>
        <p>
   This course studies network forensics-monitoring and
analysis of network traffic for information gathering,
intrusion detection and legal evidence. We focus on the
technical aspects of network forensics rather than other
skills such as incident response procedures etc.. Hands
on sessions follow all the major sections.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Recognise network forensic data sources.</li>
	<li>Perform network forensics using:<br />
		Wireshark<br />
                    NetFlow<br />
			Log analysis<br />
		
		
</li>
           <li>Describe issues such as encryption.</li>         
                  </ul>
        <h5>
        <b>Network forensics training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network and/or security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Network forensics training course contents</b></h3>
	<ul>				
					
<li>What is network forensics?</li><p>
What it is, host vs network forensics, purposes,
legal implications, network devices, network data
sources, investigation tools. <br /><span> Hands on </span> whois, DNS
queries.
					
</p><li>Host side network forensics</li><p>
Services, connections tools. <br /><span>Hands on</span> Windows
services, Linux daemons, netstat, ifoconfig/ipconfig,
ps and Process explorer, ntop, arp, resource
monitor.
</p><li>Packet capture and analysis</li><p>
Network forensics with Wireshark, Taps,
NetworkMiner. <br /><span>Hands on</span> Performing Network
Traffic Analysis using NetworkMiner and Wireshark.
</p><li>Attacks</li><p>
DOS attacks, SYN floods, vulnerability exploits,
ARP and DNS poisoning, application attacks, DNS
ANY requests, buffer overflow attacks, SQL
injection attack, attack evasion with fragmentation.
<br /><span>Hands on</span> Detecting scans, using nmap, identifying
attack tools.
</p><li>Calculating location</li><p>
Timezones, whois, traceroute, geolocation. Wifi
positioning. <br /><span>Hands on</span> Wireshark with GeoIP
lookup.
</p><li>Data collection</li><p>
NetFlow, sflow, logging, splunk, splunk patterns,
GRR. HTTP proxies. <br /><span>Hands on</span> NetFlow
configuration, NetFlow analysis.
</p><li>The role of IDS, firewalls and logs</li><p>
Host based vs network based, IDS detection styles,
IDS architectures, alerting. Snort. syslog-ng.
Microsoft log parser. <br /><span>Hands on</span> syslog, Windows
Event viewer.
</p><li>Correlation</li><p>
Time synchronisation, capture times, log
aggregation and management, timelines. <br /><span>Hands on</span>
Wireshark conversations.
</p><li>Other considerations</li><p>
Tunnelling, encryption, cloud computing, TOR.
<br /><span>Hands on</span> TLS handshake in Wireshark.
</p>
	</ul>

Definitive network forensics for engineers

<h3><b>Security+ training course description</b></h3>
        <p>
   A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
                    <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
                  </ul>
        <h5>
        <b>Security+ training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those wishing to pass the Security+ exam.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Security+ training course contents</b></h3>
				<ul>	<li>General security concepts</li><p>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					</p><li>Communication security</li><p>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	</p><li>Infrastructure security</li><p>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	</p><li>Cryptography basics</li><p>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	</p><li>Operational/Organisation security</li><p>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 
</p>
				</ul>

54 TLS courses

Getting Started with HashiCorp Nomad

By Packt

VMware Horizon: Deploy and Manage [V8.8]

By Nexus Human

Cisco Securing Email with Cisco Email Security Appliance v3.1 (SESA)

By Nexus Human

Red Hat Services Management and Automation (RH358)

By Nexus Human

WM156G IBM MQ V9.1 System Administration (using Windows for labs)

By Nexus Human

Cisco ASA Firewall Training with Step-by-Step Lab Workbook

By Skill Up

HashiCorp Certified - Consul Associate Course

By Packt

FortiGate Security

By Nexus Human

AWS Tutorial: AWS Solutions Architect and SysOps Administrator

By Packt

FortiGate Security 7.2

By Nexus Human

Search By Location