Network Security Expert (TNSE)

Network Security Expert (TNSE)

Overview

Troika NSE is expert integrated program for graduates / engineers who are targeting network / information security as carrier growth path. This Security workshop program is aligned specifically to the job role of Network Security specialists / consultants & Engineer who are responsible for day to day administration and Security management of various technologies i.e. Firewall, IPS, SSL VPN’s, load balancers, Web Security gateways & WAN optimization solutions etc…

NSE module has been fully customized and is in line with security industry requirements. Understanding and hands-on workshop on Security functions i.e. Firewall, NAT, authentication, failover, IPSec VPN & SSL VPN will enable candidates to appear for Checkpoint , juniper, Palo alto and F5 certification exams.

Troika NSE Prerequisites

• Graduation / B-tech / Post graduation

Key Technologies to be Covered

• Security – Basic overview on various technical controls, Firewall, IPS, Load balancers, forward & reverse proxies, two factor authentication.
• Firewall – Checkpoint and Palo Alto networks
• Intrusion prevention system (IPS) – Palo Alto / IBM ISS
• Site-2-site and remote access IPsec VPN – Check point & Palo alto
• Firewall Cluster / Failover – Checkpoint and Palo Alto networks
• Secure socket layer VPN – Checkpoint and Palo Alto networks
• End point security SSL module / NAC (network access control)
• Web Security gateways – Palo Alto next genertion
• Application Load balancers – Array Networks / F5 Networks
• WAN optimization – Riverbed / Array Networks

Course Outline

• Basics – Understating on networking concepts i.e. OSI mode, IP addressing, routing, switching, VLANS, protocols i.e. DNS, DHCP, Active directory, ARP protocol, HTTP, FTP, advance TCP concepts, various security technical controls, type of threats I.e. virus, worms, phishing, pharming and mitigation techniques.
• Firewall architecture – Understating on firewall architecture and deployment scenarios – Juniper Netscreen& checkpoint firewall
• Security policy & NAT – Understating access control policies, policy designing and implementation on rule base on firewalls
• User authentication – Integration with AD / LDAP for user and group based policy enforcement.
• IPsec VPN basics – Understating on IKE phase-1 & phase-2, ESP & AH protocol, Transport mode, tunnel mode operation
• IPsec VPN implementation – Implementation and troubleshooting of site-2-site VPN using pre-shared key and certificates..
• Clustering – Basics of cluster technology, high availability and load balancing topologies. Firewall implementation in active-standby and active-active mode
• Troubleshooting – Understanding and troubleshooting network/ apps issues using diagnostic tools i.e. tcpdump, ethereal, snoop, fw monitors etc.
• Virtualization – basics on virtualization technology / contexts, Delegate management, resource allocation, implementation of virtual firewall and SSL VPN instances.
• SSL VPN – Understating on basic SSL connection, SSL messages and SSL features and network
  deployment scenarios.
• SSL VPN implementation – SSL portal, resource publishing, AD integration, End point security / NAC for end point compliance, role based access control
• NIPS – Understanding of IPS architectural, detection techniques, deployment scenarios, designing aspects and implementation details.
• NIPS Implementation – Network and application threat mitigation using IPS policies, signature fine-tuning, and event correlation
• Web Security – Understating on forward proxy, reverse proxy, transparent proxy and caching concepts, various deployment scenarios and architectural details
• Web Security Implementation – Policy designing and implementation of web security gateway, integration with AD for User and group based policy, real-time monitoring, logging and reporting module configuration.Web Security Implementation – Policy designing and implementation of web security gateway, integration
  with AD for User and group based policy, real-time monitoring, logging and reporting module configuration.
• Application load balancer & WAN opt – Understating on application delivery concepts – Link and server load balancer, deployment scenarios, basics on HTTP 1.0/1.1, SSL protocol, CIFS, network caching, de duplication , TCP and application acceleration