Definitive Firewalls for engineers

Description

A technical hands on training course covering firewall technologies. This focuses on the whys and hows of firewall technology rather than looking at manufacturer specific issues.

What will you learn

Firewalls training course details

Technical staff wanting to learn about Filrewalls including:
Technical network staff.
Technical security staff.

IP security foundation for engineers

2 days

Security review, what is a firewall? What do
firewalls do? Firewall benefits, concepts.
Hands on
Configuring the network to be used in later labs,
launching various attacks on a target.

Packet filtering, SPI, Proxy, Personal. Software
firewalls, hardware firewalls, blade based firewalls,
personal firewalls, which firewall should you use?
Firewall products.
Hands on Configuring a simple
firewall.

Things to filter in the IP header, stateless vs.
stateful filtering. ACLs. Advantages of packet
filtering.
Hands on Configuring packet filtering
firewalls.

Stateful algorithms, packet-by-packet inspection,
application content filtering, tracks, special
handling (fragments, IP options), sessions with
TCP and UDP. Firewall hacking detection: SYN
attacks, SSL, SSH interception.
Hands on Stateful
packet inspection firewalls.

Circuit level, application level, SOCKS. Proxy
firewall advantages and disadvantages.
Hands on
Proxy firewalls.

The role of personal firewalls, Windows XP,
Zonealarm.
Hands on Configuring a personal
firewall.

Home based, small office, enterprise, service
provider, what is a DMZ? DMZ architectures,
bastion hosts, multi DMZ. Virtual firewalls,
transparent firewalls. Dual firewall design, high
availability, load balancing, VRRP.
Hands on
Resilient firewall architecture.

VPNs, IPsec. Firewall configuration of VPNs,
integration of dedicated VPN devices and
firewalls.
Hands on IPSec VPN configuration.

Configuration checklist, testing procedure,
monitoring firewalls, logging, syslog.
Hands on
Testing firewalls.