Redhill

<h3><b>Advanced TCP/IP training course description</b></h3>
   <p>An intensive advanced TCP/IP course focusing on the details of the protocols according to the RFCs. This course is designed to go into the technical details of the protocols and is not for those that are new to TCP/IP. A particular focus is on TCP and performance. Those more interested in routing protocols should see our Definitive IP routing for engineers course. It is expected that delegates are totally familiar with configuration addressing. Hands on sessions consist of protocol analysis using Wireshark.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
       <li>Analyse packets and protocols in detail.</li>
              <li>Troubleshoot networks using Wireshark.</li>
              <li>Find performance problems using Wireshark.</li>
              <li>Perform network forensics.</li>
                  </ul>
        <h5><b>Advanced TCP/IP training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Advanced technical staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP Foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Advanced TCP/IP training course contents</b></h3>
				<ul>	<li>IP</li><p>
Fragmentation and MTU issues, Path MTU
discovery, Geolocation, unusual IP addresses,
forwarding broadcasts, DiffServ, DSCP, ECN,
assured and expedited forwarding. TTL usage in
traceroute, Protocol field. Sanitising IP addresses
in trace files. Wireshark and checksum errors.
</p><li>IPv6</li><p>
The header. Extension headers. Traffic class and
flow labels. Tunnelling. IPv6 and fragmentation.
</p><li>ARP</li><p>
Requests, responses, gratuitous ARP, Proxy ARP,
ARP poisoning.
</p><li>ICMP</li><p>
ping, Round Trip Times, ICMP redirect, ICMP
router advertisement and solicitation, Time
Exceeded, Destination unreachable. ICMPv6:
Similarity to ICMPv4, Neighbor discovery and the
replacement of ARP. MLD.
</p><li>First hop redundancy</li><p>
ICMP discovery, HSRP, VRRP, GLBP.
</p><li>IGMP</li><p>
Multicast overview, multicast architecture,
multicast addresses, IGMP v1, IGMPv2, IGMPv3.
</p><li>UDP</li><p>
Use in broadcasts and multicasts. Port numbers.
</p><li>TCP</li><p>
Connections, RST, FIN, sequence numbering,
packet loss recovery, Fast recovery, RTO timeout,
SACK, TCP flow control, receive window,
congestion window, van Jacobsen, nagle, delayed
ACKs, PSH, URG, TCP options, MSS, Window
scaling, TCP timestamps. Congestion notification.
<br /><span>Hands on</span> Troubleshooting with sequence
numbers, Wireshark IO and TCP graphs to
analyse performance. Window size issues.
</p><li>DHCP</li><p>
DHCP header. Relationship to BOOTP. Discover,
offer, request, decline, ACK, release. Lease,
renewal and rebind times. Relay agents. DHCPv6
</p><li>DNS</li><p>
Names and addresses, Resource Records,
queries, responses, problems. MDNS.
</p><li>HTTP</li><p>
Requests, methods, request modifiers, response
codes. HTTPS. SSL, TLS. Proxies. <br /><span>Hands on</span>
Redirects, recreating pages from packets.
</p><li>FTP</li><p>
Commands, responses, passive/active mode.
</p><li>Email</li><p>
SMTP, POP3, IMAP, commands responses.
</p><li>Voice and Video</li><p>
RTP, RTCP, SIP. IP PBXs. Traffic flows. <br /><span>Hands on</span> Voice playback.
</p><li>SNMP</li><p>
MIBs, GET, TRAP, polling.
</p><li>Performance</li><p>
Baselining, high latency, Wireshark and timings,
packet loss, redirections, small packets,
congestion, name resolution.
</p><li>Security</li><p>
Network forensics, scanning and discovery,
suspect traffic. IPsec, SSH.

</p>
				</ul>

Systems & Network Training

Network & Security

Network Engineer

Advanced TCP/IP

General Admission

<h3><b>LTE Architecture and Protocols course description</b></h3>
      <p> This course provides a comprehensive tour of the LTE
architecture along with services provided and the
protocols used.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
			
                  <li>Describe the overall architecture of LTE.</li>
																				<li>Explain the information flows through LTE.</li>
                    <li>Describe the LTE security.</li>
                    <li>Describe LTE mobility management.</li> 
                    <li>Recognise the next steps for LTE.</li>
                  </ul>
        <h5>
        <b>LTE Architecture and Protocols course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working with LTE.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Mobile communications demystified
							</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>LTE Architecture and Protocols course contents</b></h3>
      <ul>
				<li>Introduction </li><p>
History, LTE key features. The 4G ITU process. The LTE 3GPP specifications. Specifications.

</p><li>System Architecture </li><p>
LTE hardware architecture. UE architecture and capabilities. E-UTRAN and eNB. EPC, MME functions, SGW, PGW and PCRF. System interfaces and protocol stacks. Example information flows. Dedicated and default bearers. EMM, ECM, RRC state diagrams.

</p><li>Radio transmission and reception </li><p>
OFDMA, SC-FDMA, MIMO antennas. Air interface protocol stack. Logical, transport and physical channels. Frame and slot structure, the resource grid. Resource element mapping of the physical channels and signals. Cell acquisition, data transmission and random access. MAC, RLC, PDCP protocols. LTE spectrum allocation.

</p><li>Power-on procedures </li><p>
Network and cell selection. RRC connection establishment. Attach procedure, including IP address allocation and default bearer activation. LTE detach procedure.

</p><li>Security in LTE networks </li><p>
LTE security features, identity confidentiality, ciphering and integrity protection. Architecture of network access security in LTE. Secure key hierarchy. Authentication and key agreement procedure. Security mode command procedure. Network domain security architecture. Security associations using IKE and IPSec.

</p><li>Mobility management </li><p>
RRC_IDLE, RRC_CONNECTED. Cell reselection, tracking area updates. Measurement reporting. X2 and S1 based handovers. Interoperation with UMTS, GSM and non-3GPP technologies such as cdma2000.

</p><li>QoS, policy control and charging </li><p>
QoS in LTE, EPS bearers, service data flows and packet flows. The architecture and signalling procedures for policy and charging control. Data transport using GPRS, differentiated services and MPLS. Offline and online charging in LTE.

</p><li>Delivery of voice and text messages over LTE </li><p>
Difficulties and solutions for Voice over LTE. Architecture and call setup procedures for circuit switched fallback. Architecture, protocols and call setup procedures in IP multimedia subsystem.

</p><li>Enhancements in release 9 </li><p>
LTE location services. Multimedia broadcast / multicast service and MBSFN. Cell selection, commercial mobile alert service.

</p><li>LTE Advanced and release 10 </li><p>
Impact of carrier aggregation on LTE air interface. Enhanced MIMO processing on uplink and downlink. Relaying. Release 11 and beyond.

</p><li>OAM and self organising networks </li><p>
Operation, administration, maintenance and provisioning for LTE. Self-configuration of base station parameters. Fractional frequency re-use, inter-cell interference co-ordination. Self-optimisation of base station procedures. Self-healing to detect and recover from faults.</p>
      </ul>

LTE Architecture and Protocols

<h3><b>WANs training course description</b></h3> 
				<p>A concise overview course covering Wide Area Networks with particular emphasis on the WAN options available including the use of the Internet.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
        <li>Choose and evaluate WAN technologies.</li>
					<li>Recognise the role of service providers.</li>
                    <li>Describe the benefits of VPNs.</li>
                    <li>Describe how the Internet can be used as a WAN.</li>
                    <li>Describe the equipment needed to connect LANS to WANS.</li>
                    <li>List the speeds of various WAN technologies.</li>
                  </ul>
       
        <h5>
        <b>WANs training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone, although the course is particularly aimed at non-technical personnel needing some knowledge of WANS.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Network fundamentals</p>
              
							<li><b>Duration</b></li>
							
              <p>1 day
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>WANs training course contents</b></h3>
      <ul>
				<li>WANS</li><p>
WAN architecture, Common WAN terms, Core vs
access, service providers, relationship with 7 layer
model, WAN equipment, how to choose a WAN.
				</p><li>Layer 1</li><p>
Copper, phone lines, fibre, coaxial, satellite,
wireless. Cabling to the building, CPE cabling,
interfaces.
</p><li>Layer 2</li><p>
Dial up vs. Dedicated vs. packet switched networks
and when to use them. Packet switching vs. circuit
switching. Point to point and point to multipoint.
</p><li>Dialup access technologies</li><p>
Modems, ISDN, BRI, PRI.
</p><li>Access with dedicated lines</li><p>
XDSL, leased lines.
</p><li>WAN services</li><p>
X.25, SMDS, Frame Relay, CIR, ATM, Internet,
MANS, dark fibre and other services.
				</p><li>Case study: Selecting WAN technologies.</li><p>
</p><li>Service provider technologies</li><p>
MPLS, SDH, WDM, DWDM.
</p><li>Routers</li><p>
Network addressing, default gateways, routing
tables, routing protocols.
</p><li>Internet architecture</li><p>
Service providers, ISPs, private peering, public
peering, core WANs in the Internet.
</p><li>VPNs</li><p>
Private networks, public networks, What are
VPNs?, benefits of VPNs, tunnelling, encryption,
IPSec.</p><li>Case study: Specifying WAN connectivity.</li><p>


</p>
      </ul>

WANs demystified

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p>This course benefits individuals responsible for implementing, monitoring, and troubleshooting Juniper security components.</p>Overview<p>After successfully completing this course, you should be able to:<br />Demonstrate understanding of concepts covered in the prerequisite Juniper Security courses.<br />Describe the various forms of security supported by the Junos OS.<br />Describe the Juniper Connected Security model.<br />Describe Junos security handling at Layer 2 versus Layer 3.<br />Implement next generation Layer 2 security features.<br />Demonstrate understanding of Logical Systems (LSYS).<br />Demonstrate understanding of Tenant Systems (TSYS).<br />Implement virtual routing instances in a security setting.<br />Describe and configure route sharing between routing instances using logical tunnel interfaces.<br />Describe and discuss Juniper ATP and its function in the network.<br />Describe and implement Juniper Connected Security with Policy Enforcer in a network.<br />Describe firewall filters use on a security device.<br />Implement firewall filters to route traffic.<br />Explain how to troubleshoot zone problems.<br />Describe the tools available to troubleshoot SRX Series devices.<br />Describe and implement IPsec VPN in a hub-and-spoke model.<br />Describe the PKI infrastructure.<br />Implement certificates to build an ADVPN network.<br />Describe using NAT, CoS and routing protocols over IPsec VPNs.<br />Implement NAT and routing protocols over an IPsec VPN.<br />Describe the logs and troubleshooting methodologies to fix IPsec VPNs.<br />Implement working IPsec VPNs when given configuration that are broken.<br />Describe Incident Reporting with Juniper ATP On-Prem device.<br />Configure mitigation response to prevent spread of malware.<br />Explain SecIntel uses and when to use them.<br />Describe the systems that work with SecIntel.<br />Describe and implement advanced NAT options on the SRX Series devices.<br />Explain DNS doctoring and when to use it.<br />Describe NAT troubleshooting logs and techniques.</p><p>This four-day course, designed to build off the current Juniper Security (JSEC) offering, delves deeper into Junos security, next-generation security features, and ATP supporting software.</p></div><div id="course-pills-2"><h4>Chapter 1: Course Introduction</h4><ul><li>Course Introduction</li></ul><h4>Chapter 2: Junos Layer 2 Packet Handling and Security Features</h4><ul><li>Transparent Mode Security</li><li>Secure Wire</li><li>Layer 2 Next Generation Ethernet Switching</li><li>MACsec</li><li>Lab 1: Implementing Layer 2 Security</li></ul><h4>Chapter 3: Firewall Filters</h4><ul><li>Using Firewall Filters to Troubleshoot</li><li>Routing Instances</li><li>Filter-Based Forwarding</li><li>Lab 2: Implementing Firewall Filters</li></ul><h4>Chapter 4: Troubleshooting Zones and Policies</h4><ul><li>General Troubleshooting for Junos Devices</li><li>Troubleshooting Tools</li><li>Troubleshooting Zones and Policies</li><li>Zone and Policy Case Studies</li><li>Lab 3: Troubleshooting Zones and Policies</li></ul><h4>Chapter 5: Hub-and-Spoke VPN</h4><ul><li>Overview</li><li>Configuration and Monitoring</li><li>Lab 4: Implementing Hub-and-Spoke VPNs</li></ul><h4>Chapter 6: Advanced NAT</h4><ul><li>Configuring Persistent NAT</li><li>Demonstrate DNS doctoring</li><li>Configure IPv6 NAT operations</li><li>Troubleshooting NAT</li><li>Lab 5: Implementing Advanced NAT Features</li></ul><h4>Chapter 7: Logical and Tenant Systems</h4><ul><li>Overview</li><li>Administrative Roles</li><li>Differences Between LSYS and TSYS</li><li>Configuring LSYS</li><li>Configuring TSYS</li><li>Lab 6: Implementing TSYS</li></ul><h4>Chapter 8: PKI and ADVPNs</h4><ul><li>PKI Overview</li><li>PKI Configuration</li><li>ADVPN Overview</li><li>ADVPN Configuration and Monitoring</li><li>Lab 7: Implementing ADVPNs</li></ul><h4>Chapter 9: Advanced IPsec</h4><ul><li>NAT with IPsec</li><li>Class of Service with IPsec</li><li>Best Practices</li><li>Routing OSPF over VPNs</li><li>Lab 8: Implementing Advanced IPsec Solutions</li></ul><h4>Chapter 10: Troubleshooting IPsec</h4><ul><li>IPsec Troubleshooting Overview</li><li>Troubleshooting IKE Phase 1 and 2</li><li>IPsec Logging</li><li>IPsec Case Studies</li><li>Lab 9: Troubleshooting IPsec</li></ul><h4>Chapter 11: Juniper Connected Security</h4><ul><li>Security Models</li><li>Enforcement on Every Network Device</li></ul><h4>Chapter 12: SecIntel</h4><ul><li>Security Feed</li><li>Encrypted Traffic Analysis</li><li>Use Cases for SecIntel</li><li>Lab 10: Implementing SecIntel</li><li></li></ul><h4>Chapter 13:Advanced Juniper ATP On-Prem</h4><ul><li>Collectors</li><li>Private Mode</li><li>Incident Response</li><li>Deployment Models</li><li>Lab 11: Implementing Advanced ATP On-Prem</li></ul><h4>Chapter 14: Automated Threat Mitigation</h4><ul><li>Identify and Mitigate Malware Threats</li><li>Automate Security Mitigation</li><li>Lab 12: Identifying and Mitigation of Threats</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AJSEC - Advanced Junos Security training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AJSEC - Advanced Junos Security course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Nexus Human

Juniper

IT Security

Basic Security Training (BST)

CompTIA Network+

CompTIA Security+

AJSEC - Advanced Junos Security

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Students who need to know how to implement and manage Cisco ASA 5500-X.</p>Overview<p>Upon successful completion of this course, students should be able to do the following:? Technology and features of the Cisco ASA? Cisco ASA product family? How ASAs protect network devices from attacks? Bootstrap the security appliance? Prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM)? Launch and navigate ASDM? Essential security appliance configuration using ASDM and the command-line interface (CLI)? Configure dynamic and static address translations? Configure access policy based on ACLs? Use object groups to simplify ACL complexity and maintenance? Use the Modular Policy Framework to provide unique policies to specific data flows? Handle advanced protocols with application inspection? Troubleshoot with syslog and tcp ping? Configure the ASA to work with Cisco Secure ACS 5.2 for RADIUS-based AAA of VPNs? Implement site-to-site IPsec VPN? Implement remote access IPsec and SSL VPNs using the Cisco AnyConnect 3.0 Secure Mobility Client? Work with the 5.x Legacy Cisco IPsec VPN client and Anyconnect VPN client? Deploy clientless SSL VPN access, including smart tunnels, plug-ins, and web-type ACLs? Configure access control policies to implement your security policy across all classes of VPN? Configure Active/Standby failover for both firewall and VPN high availability</p><p>Student will gain the essential skills required to configure, maintain, and operate Cisco ASA 5500-X Series Adaptive Security Appliances based on ASA Software v9.x.</p></div><div id="course-pills-2"><h4>Cisco ASA Essentials</h4><ul><li>? Lesson 1: Evaluating Cisco ASA Technologies</li><li>? Lesson 2: Identifying Cisco ASA Families</li><li></li></ul><h4>Basic Connectivity and Device Management</h4><ul><li>? Lesson 1: Preparing the Cisco ASA for Network Integration</li><li>? Lesson 2: Managing Basic Cisco ASA Network Settings</li><li>? Lesson 3: Configuring Cisco ASA Device Management Features</li></ul><h4>Network Integration</h4><ul><li>? Lesson 1: Configuring Cisco ASA NAT Features</li><li>? Lesson 2: Configuring Cisco ASA Basic Access Control Features</li></ul><h4>Cisco ASA Policy Control</h4><ul><li>? Lesson 1: Cisco ASA Modular Policy Framework</li><li>? Lesson 2: Configuring Cisco ASA Connection Policy</li></ul><h4>Cisco ASA VPN Architecture and Common Components</h4><ul><li>? Lesson 1: Implementing Profiles, Group Policies, and User Policies</li><li>? Lesson 2: Implementing PKI Services</li></ul><h4>Cisco ASA Clientless Remote Access SSL VPN Solutions</h4><ul><li>? Lesson 1: Deploying Basic Clientless VPN Solutions</li><li>? Lesson 2: Deploying Advanced Application Access for Clientless SSL VPNs</li></ul><h4>Cisco AnyConnect Remote Access SSL Solutions</h4><ul><li>? Lesson 1: Deploying a Basic Cisco AnyConnect Full-Tunnel SSL VPN Solution</li></ul><h4>Cisco ASA Remote Access IPsec VPNs</h4><ul><li>? Lesson 1: Deploying Cisco Remote Access VPN Clients</li><li>? Lesson 2: Deploying Basic Cisco Remote Access IPsec VPN Solutions</li><li></li></ul><h4>Cisco ASA Site-to-Site IPsec VPN Solutions</h4><ul><li>? Lesson 1: Deploying Basic Site-to-Site IPsec VPNs</li><li>? Lesson 2: Deploying Advanced Site-to-Site IPsec VPNs</li><li></li></ul><h4>Cisco ASA High Availability and Virtualization</h4><ul><li>? Lesson 1: Configuring Cisco ASA Active/Standby High Availability</li></ul><h4>Labs</h4><ul><li>Lab 1: Prepare the ASA for Administration</li><li>Lab 2: Fundamental ASA Configuration</li><li>Lab 3: Network Address Translation (NAT)</li><li>Lab 4: Basic Access Control</li><li>Lab 5: Basic Protocol Inspection</li><li>Lab 6: Licensing, ACS, and Public CA</li><li>Lab 7: Basic Clientless SSL VPN</li><li>Lab 8: Clientless SSL VPN - Thin Apps</li><li>Lab 9: Basic AnyConnect Full Tunnel SSL VPN</li><li>Lab 10: Remote Access IPSec VPN</li><li>Lab 11: IPSec Site-to-Site VPN</li><li>Lab 12: Active/Standby Failover</li></ul></div>

Cisco Certified Network Associate (CCNA)

AWS Certification

Cisco Certified Entry Networking Technician (CCENT)

Cisco Certified Internetwork Expert (CCIE)

AWS Certified Solutions Architect

Cisco ASA Essentials (ASAE)

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>Operators of Juniper Networks security solutions, including network engineers, administrators, support personnel, and resellers.</p>Overview<p>Identify high-level security challenges in today's networks.<br />Identify products that are incorporated into the Juniper Connected Security solution.<br />Explain the value of implementing security solutions.<br />Explain how Juniper Connected Security solves the cyber security challenges of the future.<br />Explain the SRX Series devices and the added capabilities that next-generation firewalls provide.<br />Explain traffic flows through the SRX Series devices.<br />List the different security objects and how to create them.<br />Describe interface types and perform basic interface configuration tasks.<br />Describe the initial configuration for an SRX Series device.<br />Explain security zones.<br />Describe screens and their use.<br />Explain address objects.<br />Describe services and their use.<br />Describe the purpose for security policies on an SRX Series device.<br />Describe zone-based policies.<br />Describe global policies and their use.<br />Explain unified security policies.<br />Configure unified security policies with the J-Web user interface.<br />Describe IDP signatures.<br />Configure an IDP policy using predefined templates with the J-Web user interface.<br />Describe the use and configuration of the integrated user firewall feature.<br />Describe the UTM security services<br />List the available UTM services on the SRX Series device.<br />Configure UTM filtering on a security policy with the J-Web user interface.<br />Explain Sky ATP's use in security.<br />Describe how Sky ATP and SRX Series devices operate together in blocking threats.<br />Describe NAT and why it is used.<br />Explain source NAT and when to use it.<br />Explain destination NAT and when to use it.<br />Explain static NAT and its uses.<br />Describe the operation and configuration the different types of NAT.<br />Identify various types of VPNs.<br />Describe IPsec VPNs and their functionality.<br />Describe how IPsec VPNs are established.<br />Describe IPsec traffic processing.<br />Configure IPsec VPNs with the J-Web user interface.<br />Describe and configure proxy IDs and traffic selectors with the J-Web user interface.<br />Monitor IPsec VPNs with the J-Web user interface.<br />Describe the J-Web monitoring features.<br />Explain the J-Web reporting features.<br />Describe the Sky Enterprise service and how it can save resources.<br />Explain the functionality of Junos Space Security Director.</p><p>This course is designed to provide students with the foundational knowledge required to work with SRX Series devices. This course will use the J-Web user interface to introduce students to the Junos operating system.</p></div><div id="course-pills-2"><h4>Module 1: COURSE INTRODUCTION</h4><ul><li>COURSE INTRODUCTION</li></ul><h4>Module 2: Juniper Security Concept</h4><ul><li>Security Challenges</li><li>Security Design Overview</li><li>Juniper Connected Security</li></ul><h4>Module 3: Juniper Connected Security ? SRX Series Devices</h4><ul><li>Connected Security</li><li>Interfaces</li><li>Initial Configuration</li><li>LAB 1: Initial Configuration</li></ul><h4>Module 4: Security Objects</h4><ul><li>Security Zone Objects</li><li>Security Screen Objects</li><li>Security Address Objects</li><li>Security Services Objects</li><li>LAB 2: Creating Security Objects with J-Web</li></ul><h4>Module 5: Security Policies</h4><ul><li>Security Policy Overview</li><li>Zone-Based Policies</li><li>Global Security Policies</li><li>Application Firewall with Unified Security Policies</li><li>LAB 3: Creating Security Policies with J-Web</li></ul><h4>Module 6: Security Services ? IDP and User Firewall</h4><ul><li>IDP Security Services</li><li>Integrated User Firewall</li><li>LAB 4: Adding IDP and User Firewall Security Services to Security Policies</li></ul><h4>Module 7: Security Services ? UTM</h4><ul><li>Content Filtering</li><li>Web Filtering</li><li>Antivirus</li><li>Antispam</li><li>LAB 5: Adding UTM Security Services to Security Policies</li></ul><h4>Module 8: Juniper Connected Security ? Sky AT</h4><ul><li>Sky ATP Overview</li><li>Blocking Threats</li><li>Lab 6: Demonstrating Sky ATP</li></ul><h4>Module 9: Network Address Translation</h4><ul><li>NAT Overview</li><li>Source NAT</li><li>Destination NAT</li><li>Static NAT</li><li>Lab 7: Implementing Network Address Translation</li></ul><h4>Module 10: IPsec VPN Concepts</h4><ul><li>VPN Types</li><li>Secure VPN Requirements</li><li>IPsec Tunnel Establishment</li><li>IPsec Traffic Processing</li></ul><h4>Module 11: Site-to-Site VPNs</h4><ul><li>IPsec Configuration</li><li>IPsec Site-to-Site Tunne</li><li>Lab 8: Implementing Site-to-Site IPsec VPNs</li></ul><h4>Module 12: Monitoring and Reporting</h4><ul><li>J-Web monitoring options</li><li>J-Web Reporting options</li><li>Lab 9: Using Monitoring and Reporting</li><li>Appendix A: SRX Series Hardware</li><li>Appendix D: Sky Enterprise Services</li><li>Appendix B: Virtual SRX</li><li>Appendix EJunos Space Security Director</li><li>Appendix CCLI Prime</li></ul></div>

Cyber Security

IJSEC - Introduction to Juniper Security

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>Networking and security professionals involved in the design, implementation, and administration of a network infrastructure using FortiGate appliances.</p>Overview<p>Analyze a FortiGate's route table.<br />Route packets using policy-based and static routes for multi-path and load balanced deployments.<br />Configure SD-WAN to load balance traffic between multiple WAN links effectively.<br />Inspect traffic transparently, forwarding as a Layer 2 device.<br />Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs).<br />Establish an IPsec VPN tunnel between two FortiGate appliances.<br />Compare policy-based to route-based IPsec VPN.<br />Implement a meshed or partially redundant VPN.<br />Diagnose failed IKE exchanges.<br />Offer Fortinet Single Sign On (FSSO) access to network services, integrated with Microsoft Active Directory.<br />Deploy FortiGate devices as an HA cluster for fault tolerance and high performance.<br />Deploy implicit and explicit proxy with firewall policies, authentication, and caching.<br />Diagnose and correct common problems.</p><p>In this two-day course, you will learn how to use advanced FortiGate networking and security.</p></div><div id="course-pills-2"><h4>Course Outline</h4><ul><li>Module 1. Routing</li><li>Module 2. Software-Defined WAN (SD-WAN)</li><li>Module 3. Layer 2 Switching</li><li>Module 4. Virtual Domains</li><li>Module 5. Site-to-Site IPsec VPN</li><li>Module 6. Fortinet Single Sign-On (FSSO)</li><li>Module 7. High Availability (HA)</li><li>Module 8. Web Proxy</li><li>Module 9. Diagnostics</li></ul></div>

IT Networking Fundamentals

FortiGate Infrastructure

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>This course is intended for network engineers, network support personnel, and reseller support.</p>Overview<p>After successfully completing this course, you should be able to:Configure LAN-to-LAN IP Security (IPsec) VPNs in various configurations. Configure VPN redundancy. Configure dynamic routing using IPsec VPNs. Configure remote access IPsec connectivity including group Internet Key Exchange (IKE) and shared IKE. Configure generic routing encapsulation (GRE) tunnels.</p><p>This intermediate-level course focuses on the wide range of options available when configuring virtual private networks (VPNs) using Juniper Networks firewall/VPN products. Students attending the course will learn these various deployments through detailed lectures and hands-on lab exercises.</p></div><div id="course-pills-2"><h4>Chapter 1: Course Introduction</h4><h4>Chapter 2: ScreenOS VPN Basics Review </h4><ul><li>VPN Review </li><li>Verifying Operations </li><li>VPN Monitor </li><li>Lab: VPN Review </li></ul><h4>Chapter 3: VPN Variations </h4><ul><li>Dynamic Peers </li><li>Transparent Mode </li><li>Overlapping Addresses </li><li>Lab: VPN Variations </li></ul><h4>Chapter 4: Hub-and-Spoke VPNs</h4><ul><li>Concepts </li><li>Policy-Based Hub-and-Spoke VPNs </li><li>Route-Based Hub-and-Spoke VPNs with No Policy and NHTB </li><li>Route-Based Hub-and_Spoke VPNS with Policy </li><li>Centralized Control Hub-and-Spoke VPNs </li><li>ACVPNs </li><li>Lab: Hub-and-Spoke VPNs </li></ul><h4>Chapter 5: Routing over VPNs </h4><ul><li>Routing Overview </li><li>Configuring RIP </li><li>Configuring OSPF </li><li>Case Studies </li><li>Lab: Dynamic Routing </li></ul><h4>Chapter 6: Using Certificates </h4><ul><li>Concepts and Terminology </li><li>Configuring Certificates and Certificate Support </li><li>Configuring VPNs with Certificates </li><li>Lab: Using Certificates </li></ul><h4>Chapter 7: Redundant VPN Gateways (Optional) </h4><ul><li>Redundant VPN Gateways </li><li>Other Options </li><li>Demonstration: Redundant VPN Gateways </li></ul><h4>Chapter 8: Generic Routing Encapsulation (Optional) </h4><ul><li>Configuring GRE </li></ul><h4>Chapter 9: Dial-Up IPsec VPNs (Optional) </h4><ul><li>Basic Dial-Up Configuration </li><li>Group IKE ID </li><li>XAUTH and Shared IKE ID </li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Advanced Juniper Networks VPN Implementations training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Advanced Juniper Networks VPN Implementations course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Cisco Certified Network Professional certification (CCNP)

Trainers Course

Advanced Juniper Networks VPN Implementations

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>Networking and security professionals involved in the design, implementation, and administration of a network infrastructure using FortiGate devices should attend this course. This course assumes knowledge of basic FortiGate fundamentals. You should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.</p>Overview<p>After completing this course, the successful student should be able to: Analyze a FortiGate route table<br />Route packets using policy-based and static routes for multipath and load-balanced deployments<br />Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)<br />Understand the fundamentals and benefits of using ZTNA<br />Offer an SSL VPN for secure access to your private network<br />Establish an IPsec VPN tunnel between two FortiGate devices<br />Implement a meshed or partially redundant VPN<br />Diagnose failed IKE exchanges<br />Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)<br />Deploy FortiGate devices as an HA cluster for fault tolerance and high performance<br />Diagnose and correct common problems</p><p>In this two-day course, you will learn how to use the most common FortiGate networking and infrastructure features. Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, redundant infrastructure, virtual domains (VDOMs), zero trust network access (ZTNA), SSL VPN, site-to-site IPsec VPN, single sign-on (SSO), and diagnostics.</p></div><div id="course-pills-2"><h4>Course Outline </h4><ul><li>1. Routing</li><li>2. Virtual Domains</li><li>3. Fortinet Single Sign-On</li><li>4. ZTNA</li><li>5. SSL VPN</li><li>6. IPsec VPN</li><li>7. High Availability</li><li>8. Diagnostics</li></ul></div>

FortiGate Infrastructure 7.2

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is intended for networking and security professionals involved in the administration and support of a security infrastructure using FortiGate appliances.</p>Overview<p>Monitor traffic passing through FortiGate<br />Optimize FortiGate memory usage<br />Diagnose using FortiGate tools such as the built-in sniffer and ''diagnose debug flow'' command<br />Monitor statistics for user traffic, traffic shaping, user authentication, IPsec, web proxy, BGP, OSPF and HA<br />Troubleshoot issues with conserve mode, high CPU, firewall policies, session helpers, user authentication, *IPsec, FortiGuard, UTM inspection, explicit web proxy, routing, and HA<br />Describe the processing flow of FortiGate packet inspection<br />Configure FortiGate for external BGP and OSPF</p><p>This 3-day class provides more in-depth work with FortiGate infrastructure and architecture, combined with enhanced troubleshooting methods and tools to isolate and fix the most common issues in networks with FortiGate devices.</p></div><div id="course-pills-2"><h4>Module 1: Security Fabric</h4><ul><li>Configuring the Security Fabric</li><li>Troubleshooting: Security Fabric</li><li>Physical and logical topology views</li></ul><h4>Module 2: FortiOS Architecture</h4><ul><li>System information</li></ul><h4>Module 3: System Troubleshooting</h4><ul><li>Crash Logs</li></ul><h4>Module 4: Traffic and Session Monitoring</h4><ul><li>Exploring the session table</li><li>Troubleshooting: Connectivity issues</li></ul><h4>Module 5: Routing</h4><ul><li>Failover of existing sessions</li><li>Troubleshooting: Routing</li></ul><h4>Module 6: FortiGuard</h4><ul><li>Troubleshooting: Local FDS issue</li><li>Troubleshooting: Rating lookups</li></ul><h4>Module 7: Central Management</h4><ul><li>FortiManager and registration</li></ul><h4>Module 8: OSPF</h4><ul><li>Configuring OSPF</li><li>Troubleshooting: OSPF</li></ul><h4>Module 9: Web Filtering and Antivirus</h4><ul><li>Configuring Web Filtering and AV</li><li>Troubleshooting: Web Filetering</li><li>Troubleshooting: Antivirus</li></ul><h4>Module 10: IPS</h4><ul><li>Configuring IPS</li><li>IPS custom signatures</li></ul><h4>Module 11: BGP</h4><ul><li>Configuring BGP</li><li>Troubleshooting: BGHP neighbor</li><li>Troubleshooting: BGP routing</li><li>Configuring prefix lists</li></ul><h4>Module 12: IPsec</h4><ul><li>Troubleshooting: IPsec</li><li>VPN Manager</li></ul><h4>Module 13: Auto Discovery VPN</h4><ul><li>Configuring ADVPN and IBGP</li><li>Troubleshooting: OSPF and BGP'</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Enterprise Firewall (NSE 7) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Enterprise Firewall (NSE 7) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Further Offshore Emergency Training (FOET)

Cyber Security Foundation

Enterprise Firewall (NSE 7)

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>This course is for Azure Security Engineers who are planning to take the associated certification exam, or who are performing security tasks in their day-to-day job. This course would also be helpful to an engineer that wants to specialize in providing security for Azure-based digital platforms and play an integral role in protecting an organization's data.</p><p></p><p></p><p>This course provides IT Security Professionals with the knowledge and skills needed to implement security controls, maintain an organization?s security posture, and identify and remediate security vulnerabilities. This course includes security for identity and access, platform protection, data and applications, and security operations.</p><p></p>Prerequisites<p></p><li>AZ-104T00 - Microsoft Azure Administrator</li>  <li>Security best practices and industry security requirements such as defense in depth, least privileged access, role-based access control, multi-factor authentication, shared responsibility, and zero trust model.</li>  <li>Be familiar with security protocols such as Virtual Private Networks (VPN), Internet Security Protocol (IPSec), Secure Socket Layer (SSL), disk and data encryption methods.</li>  <li>Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.</li>  <li>Have experience with Windows and Linux operating systems and scripting languages. Course labs may use PowerShell and the CLI.</li><p></p></div><div id="course-pills-2"><h3>1 - Manage identities in Microsoft Entra ID</h3> <ul> <li>Secure users in Microsoft Entra ID</li> <li>Secure groups in Microsoft Entra ID</li> <li>Recommend when to use external identities</li> <li>Secure external identities</li> <li>Implement Microsoft Entra Identity protection</li> </ul> <h3>2 - Manage authentication by using Microsoft Entra ID</h3> <ul> <li>Configure Microsoft Entra Verified ID</li> <li>Implement multifactor authentication (MFA)</li> <li>Implement passwordless authentication</li> <li>Implement password protection</li> <li>Implement single sign-on (SSO)</li> <li>Integrate single sign-on (SSO) and identity providers</li> <li>Recommend and enforce modern authentication protocols </li> </ul> <h3>3 - Manage authorization by using Microsoft Entra ID</h3> <ul> <li>Configure Azure role permissions for management groups, subscriptions, resource groups, and resources</li> <li>Assign built-in roles in Microsoft Entra ID</li> <li>Assign built-in roles in Azure</li> <li>Create and assign a custom role in Microsoft Entra ID</li> <li>Implement and manage Microsoft Entra Permissions Management</li> <li>Configure Microsoft Entra Privileged Identity Management </li> <li>Configure role management and access reviews by using Microsoft Entra Identity Governance</li> <li>Implement Conditional Access policies</li> </ul> <h3>4 - Manage application access in Microsoft Entra ID</h3> <ul> <li>Manage access to enterprise applications in Microsoft Entra ID, including OAuth permission grants</li> <li>Manage app registrations in Microsoft Entra ID</li> <li>Configure app registration permission scopes</li> <li>Manage app registration permission consent</li> <li>Manage and use service principals</li> <li>Manage managed identities for Azure resources</li> <li>Recommend when to use and configure a Microsoft Entra Application Proxy, including authentication</li> </ul> <h3>5 - Plan and implement security for virtual networks</h3> <ul> <li>Plan and implement Network Security Groups (NSGs) and Application Security Groups (ASGs)</li> <li>Plan and implement User-Defined Routes (UDRs)</li> <li>Plan and implement Virtual Network peering or gateway</li> <li>Plan and implement Virtual Wide Area Network, including secured virtual hub</li> <li>Secure VPN connectivity, including point-to-site and site-to-site</li> <li>Implement encryption over ExpressRoute</li> <li>Configure firewall settings on PaaS resources</li> <li>Monitor network security by using Network Watcher, including NSG flow logging</li> </ul> <h3>6 - Plan and implement security for private access to Azure resources</h3> <ul> <li>Plan and implement virtual network Service Endpoints</li> <li>Plan and implement Private Endpoints</li> <li>Plan and implement Private Link services</li> <li>Plan and implement network integration for Azure App Service and Azure Functions</li> <li>Plan and implement network security configurations for an App Service Environment (ASE)</li> <li>Plan and implement network security configurations for an Azure SQL Managed Instance</li> </ul> <h3>7 - Plan and implement security for public access to Azure resources</h3> <ul> <li>Plan and implement Transport Layer Security (TLS) to applications, including Azure App Service and API Management</li> <li>Plan, implement, and manage an Azure Firewall, Azure Firewall Manager and firewall policies</li> <li>Plan and implement an Azure Application Gateway</li> <li>Plan and implement an Azure Front Door, including Content Delivery Network (CDN)</li> <li>Plan and implement a Web Application Firewall (WAF)</li> <li>Recommend when to use Azure DDoS Protection Standard</li> </ul> <h3>8 - Plan and implement advanced security for compute</h3> <ul> <li>Plan and implement remote access to public endpoints, Azure Bastion and just-in-time (JIT) virtual machine (VM) access</li> <li>Configure network isolation for Azure Kubernetes Service (AKS)</li> <li>Secure and monitor AKS</li> <li>Configure authentication for AKS</li> <li>Configure security for Azure Container Instances (ACIs)</li> <li>Configure security for Azure Container Apps (ACAs)</li> <li>Manage access to Azure Container Registry (ACR)</li> <li>Configure disk encryption, Azure Disk Encryption (ADE), encryption as host, and confidential disk encryption</li> <li>Recommend security configurations for Azure API Management</li> </ul> <h3>9 - Plan and implement security for storage</h3> <ul> <li>Configure access control for storage accounts</li> <li>Manage life cycle for storage account access keys</li> <li>Select and configure an appropriate method for access to Azure Files</li> <li>Select and configure an appropriate method for access to Azure Blob Storage</li> <li>Select and configure an appropriate method for access to Azure Tables</li> <li>Select and configure an appropriate method for access to Azure Queues</li> <li>Select and configure appropriate methods for protecting against data security threats, including soft delete, backups, versioning, and immutable storage</li> <li>Configure Bring your own key (BYOK)</li> <li>Enable double encryption at the Azure Storage infrastructure level</li> </ul> <h3>10 - Plan and implement security for Azure SQL Database and Azure SQL Managed Instance</h3> <ul> <li>Enable database authentication by using Microsoft Entra ID</li> <li>Enable and monitor database audit</li> <li>Identify use cases for the Microsoft Purview governance portal</li> <li>Implement data classification of sensitive information by using the Microsoft Purview governance portal</li> <li>Plan and implement dynamic mask</li> <li>Implement transparent data encryption?</li> <li>Recommend when to use Azure SQL Database Always Encrypted</li> </ul> <h3>11 - Plan, implement, and manage governance for security</h3> <ul> <li>Create, assign, and interpret security policies and initiatives in Azure Policy</li> <li>Configure security settings by using Azure Blueprint</li> <li>Deploy secure infrastructures by using a landing zone</li> <li>Create and configure an Azure Key Vault</li> <li>Recommend when to use a dedicated Hardware Security Module (HSM)</li> <li>Configure access to Key Vault, including vault access policies and Azure Role Based Access Control</li> <li>Manage certificates, secrets, and keys</li> <li>Configure key rotation</li> <li>Configure backup and recovery of certificates, secrets, and keys</li> </ul> <h3>12 - Manage security posture by using Microsoft Defender for Cloud</h3> <ul> <li>Implement Microsoft Defender for Cloud</li> <li>Identify and remediate security risks by using the Microsoft Defender for Cloud Secure Score and Inventory</li> <li>Assess compliance against security frameworks and Microsoft Defender for Cloud</li> <li>Add industry and regulatory standards to Microsoft Defender for Cloud</li> <li>Add custom initiatives to Microsoft Defender for Cloud</li> <li>Connect hybrid cloud and multicloud environments to Microsoft Defender for Cloud</li> <li>Identify and monitor external assets by using Microsoft Defender External Attack Surface Management</li> </ul> <h3>13 - Configure and manage threat protection by using Microsoft Defender for Cloud</h3> <ul> <li>Enable workload protection services in Microsoft Defender for Cloud, including Microsoft Defender for Storage, Databases, Containers, App Service, Key Vault, Resource Manager, and DNS</li> <li>Configure Microsoft Defender for Servers</li> <li>Configure Microsoft Defender for Azure SQL Database</li> <li>Manage and respond to security alerts in Microsoft Defender for Cloud</li> <li>Configure workflow automation by using Microsoft Defender for Cloud</li> <li>Evaluate vulnerability scans from Microsoft Defender for Server</li> </ul> <h3>14 - Configure and manage security monitoring and automation solutions</h3> <ul> <li>Monitor security events by using Azure Monitor</li> <li>Configure data connectors in Microsoft Sentinel</li> <li>Create and customize analytics rules in Microsoft Sentinel</li> <li>Configure automation in Microsoft Sentinel</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AZ-500T00 Microsoft Azure Security Technologies training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AZ-500T00 Microsoft Azure Security Technologies course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Microsoft AZ-900

Microsoft AZ-104

Microsoft Azure

Microsoft AZ-303

Microsoft AZ-700

AZ-500T00 Microsoft Azure Security Technologies

<h3><b>IPsec training course description</b></h3>
        <p>
    This hands on course focuses on IPsec VPNs. Rather
than focusing on one implementation this course
concentrates on the technologies and protocols of
IPsec. Starting with an overview of the complete IPsec
architecture the course then moves onto ESP packet
analysis along with encryption and authentication
provided. IKEv1 and IKEv2 are both covered in detail.
Having covered IPsec with pre shared keys the course
then moves onto IPsec with certificates followed by
IPsec issues. The course is vendor neutral with hands
on with both Cisco and Microsoft implementations.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Explain how IPsec works.</li>
																				<li>Explain the role of AH, ESP and IKE.</li>
                     <li>Configure IPsec.</li>
                    <li>Troubleshoot IPsec.</li>
                  </ul>
        <h5>
        <b>IPsec training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff working with IPsec. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Definitive IP VPNs for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>IPsec training course contents</b></h3>
				<ul>	<li>What is IPsec?</li><p>
How to spell IPsec, IPsec is IP security,
confidentiality, integrity, authenticity, replay
protection, what is a VPN? Network layer security,
IPsec and IPv4, IPsec and IPv6, the suite of
protocols, the standard, IPsec RFCs, IPsec
history. <br /><span>Hands on</span> Analysis of 'normal' IP packets.
</p><li>IPsec architecture</li><p>
The IPsec protocols, AH vs ESP, Why two
headers? transport mode, tunnel mode, Remote
access VPNs, site to site VPNs, security
associations, SA database, Security Parameters
Index, implementations: Host tack, Bump in the
Stack, Bump in the Wire. <br /><span>Hands on</span> Configuring
IPsec.
</p><li>AH</li><p>
What AH does, the stack, The AH header, What is
authenticated? Device authentication. AH in
transport mode, AH in tunnel mode. <br /><span>Hands on</span> AH
packet analysis.
</p><li>ESP</li><p>
What ESP does, the ESP header, ESP in
transport mode, ESP in tunnel mode, ESP and
SA, ESP and SPI. <br /><span>Hands on</span> ESP packet
analysis, policy configuration.
</p><li>IPsec encryption</li><p>
IPsec is a framework, standard algorithms, ESP
keys, the role of IKE, key lifetimes, how IKE
generates the keys, DES, 3DES, AES, cipher
block chaining, counter mode, other encryption.
<br /><span>Hands on</span> Encryption configuration.
</p><li>IPsec authentication</li><p>
Authentication types, IPsec authentication,
Authentication algorithms: MD5, keyed SHA-1,
HMAC-MD5, HMAC-SHA-1, HMAC-RIPEMD,
other authentication algorithms. <br /><span>Hands on</span>
Authentication configuration.
</p><li>IKE</li><p>
Internet Key Exchange, IKE and the SAD, the two
phase negotiation, ISAKMP, ISAKMP header, pre
shared keys, digital signatures, public key
encryption, Diffie Hellman, proposals, counter
proposals, nonces, identities, phase 1 negotiation:
main mode, aggressive mode, base mode. Phase
2 negotiation: quick mode, new group mode.
<br /><span>Hands on</span> IKE packet analysis.
</p><li>More IKE</li><p>
PFS, IKE and dynamic addresses, XAUTH, hybrid
authentication, CRACK, ULA, PIC. User level
authentication. IKE renegotiation, heartbeats.
<br /><span>Hands on</span> Troubleshooting IPsec.
</p><li>IKEv2</li><p>
The IKEv2 exchange, IKE_SA_INIT, IKE_AUTH,
CREATE_CHILD_SA, IKEv2 packets, the
informational exchange. Comparing IKev1 vs IKE
v2. <br /><span>Hands on</span> IKEv2 configuration and analysis.
</p><li>PKI</li><p>
What is PKI?, Digital certificates, Certificate
authorities, CA servers, RA, VA, certificates, CA
hierarchy, CRLs, certificate formats. <br /><span>Hands on</span>
installing and configuring certificate servers.
</p><li>IPsec issues</li><p>
NAT, IPsec overhead and fragmentation.
</p><li>Summary</li><p>
IPsec strengths and weaknesses. Where to get
further information.
</p>
				</ul>

Total IPsec for engineers

<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>

				</div>
				<div>
				<div>
					<div><p><span>To build a successful career in the internet IP field, one must thoroughly be skilled in all of it's functions. IPSEC is a highly popular protocol used for setting up encrypted connections between devices. A professional certificate in IPSEC will not only boost your CV but also your career in the IT field enormously, have both by joining our Mikrotik with IPSEC VPN Tunnel</span><b> </b><span>course. </span></p><p><span>The Mikrotik with IPSEC VPN Tunnel</span><b> </b><span>course is a self-paced course developed by the industry experts to give you the basic and necessary knowledge of IPSEC and how it works with VPN. It will provide both practical and theoretical understanding of IPSEC by covering essential topics of it such as IPSEC definition, its modes of communication, its types of encryption, </span><span>encryption protocols, IPSEC negotiation process along with many other features of IPSEC.</span></p><p><span>The Mikrotik with IPSEC VPN Tunnel</span><b> </b><span>course</span> <span>is a 26 modules course with an access validity of one year to the materials. With available experienced tutor support, we issue certificates after the completion of the course. </span></p><p><span>Enroll now and explore the world of IPSEC. </span></p></div>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
					<div>
																					</div>
				</div>
				</div>
				<div>
				<h2>Learning outcome</h2>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Gain an understanding of VPN and IPSEC</span>
									</li>
								<li>
											<span>
													</span>
										<span>Get acquainted with IPSEC authentication</span>
									</li>
								<li>
											<span>
													</span>
										<span>Learn about AH vs ESP IPSEC negotiation protocols</span>
									</li>
								<li>
											<span>
													</span>
										<span>Understand IPSEC Data Transfer</span>
									</li>
								<li>
											<span>
													</span>
										<span>Learn about the difference between IKEv1 and IKEv2</span>
									</li>
								<li>
											<span>
													</span>
										<span>Be able to create certificates for remote access IPSEC</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
						</div>
			</div>
		</div>
				<div>
			<div>
					<div>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<div>
					<div>
																					</div>
				</div>
				</div>
				<div>
				<h2>Requirements</h2>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>No formal qualifications required, anyone from any academic background can take this course.</span>
									</li>
								<li>
											<span>
													</span>
										<span>Access to any internet-enabled smart device.</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<section>
						<div>
				<div>
				<div>
			<div>
					<div>
				<div>
				<h2>Why should I take this course?</h2>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>8+ hours of on-demand video lectures and downloadable resources.</span>
									</li>
								<li>
											<span>
													</span>
										<span>Affordable premium-quality E-learning content, you can learn at your own pace.</span>
									</li>
								<li>
											<span>
													</span>
										<span>You will receive a completion certificate upon completing the course.</span>
									</li>
								<li>
											<span>
													</span>
										<span>Internationally recognized Accredited Qualification will boost up your resume.</span>
									</li>
								<li>
											<span>
													</span>
										<span>You will learn the researched and proven approach adopted by successful salespeople to transform their careers.</span>
									</li>
								<li>
											<span>
													</span>
										<span>You will be able to incorporate various practical sales techniques successfully and understand your customers better.</span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>
				<div>
				<h2>Who is This Course for</h2>
				</div>
				<div>
				<div>
					<ul>
							<li>
											<span>
													</span>
										<span>Individuals interested in IT protocols </span>
									</li>
								<li>
											<span>
													</span>
										<span>Students</span>
									</li>
								<li>
											<span>
													</span>
										<span>People who want to improve their IPSEC skills</span>
									</li>
								<li>
											<span>
													</span>
										<span>People who want to pursue a career in IT protocol field </span>
									</li>
						</ul>
				</div>
				</div>
						</div>
			</div>
		</div>
						</div>
			</div>
		</section>

Skill Up

IT Certifications

Certificate in Information Security Management Principles (CISMP)

Engineering Construction Industry Training (ECITB)

IPsec

Profitably set up, manage and optimize professional retargeting campaigns and explore retargeting ads with the Retargeting Ads Guide

Mikrotik with IPSEC VPN Tunnel

<div>
							<div>
					<div>
			<div>
							<div>
						<div>
				<div>
					</div>
				</div>
				<div>
				<div>
					<div><p>The comprehensive IPSEC VPN Tunnel with MikroTik has been designed by industry experts to provide learners with everything they need to enhance their skills and knowledge in their chosen area of study. Enrol on the IPSEC VPN Tunnel with MikroTik today, and learn from the very best the industry has to offer!</p></div>
				</div>
				</div>
						</div>
					</div>
		</div>
								</div>
					</div><div>
							<div>
					<div>
			<div>
							<div>
						<div>
				<div>
					<div><p>This best selling IPSEC VPN Tunnel with MikroTik has been developed by industry professionals and has already been completed by hundreds of satisfied students. This in-depth IPSEC VPN Tunnel with MikroTik is suitable for anyone who wants to build their professional skill set and improve their expert knowledge.</p><p>The IPSEC VPN Tunnel with MikroTik is CPD-accredited, so you can be confident you're completing a quality training course which will boost your CV and enhance your career potential. The IPSEC VPN Tunnel with MikroTik is made up of several information-packed modules which break down each topic into bite-sized chunks to ensure you understand and retain everything you learn.</p><p>After successfully completing the IPSEC VPN Tunnel with MikroTik, you will be awarded a certificate of completion  as proof of your new skills. If you are looking to pursue a new career and want to build your professional skills to excel in your chosen field, the certificate of completion from the IPSEC VPN Tunnel with MikroTik will help you stand out from the crowd. You can also validate your certification on our website.</p><p>We know that you are busy and that time is precious, so we have designed the IPSEC VPN Tunnel with MikroTik to be completed at your own pace, whether that's part-time or full-time. Get full course access upon registration and access the course materials from anywhere in the world, at any time, from any internet-enabled device. </p><p>Our experienced tutors are here to support you through the entire learning process and answer any queries you may have via email.</p></div>
				</div>
				</div>
						</div>
					</div>
		</div>
								</div>
					</div>

Course Cloud

Certificate in Education & Training (CET)

IPSEC VPN Tunnel with MikroTik

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is intended for network engineers, support personnel, reseller support, and others responsible for implementing Juniper Networks ScreenOS firewall products.</p>Overview<p>After successfully completing this course, you should be able to:Explain the Juniper Networks security architecture.Configure administrative access and options.Back up and restore configuration and ScreenOS files.Configure a ScreenOS device in transparent, route, Network Address Translation (NAT), and IP version 6 (IPv6) modes.Discuss the applications of multiple virtual routers.Configure the Juniper Networks firewall to permit and deny traffic based on user defined policies.Configure advanced policy options.Identify and configure network designs for various types of network address translation.Configure policy-based and route-based VPN tunnels.</p><p>This course is the first in the ScreenOS curriculum. It is a course that focuses on configuration of the ScreenOS firewall/virtual private network (VPN) products in a variety of situations, including basic administrative access, routing, firewall policies and policy options, address translation, and VPN implementations. The course combines both lecture and labs, with significant time allocated for hands-on experience. Students completing this course should be confident in their ability to configure Juniper Networks firewall/VPN products in a wide range of installations.</p></div><div id="course-pills-2"><h4>Chapter 1:  Course Introduction</h4><h4>Chapter 2: ScreenOS Concepts, Terminology, and Platforms</h4><h4>Chapter 3:  Initial Connectivity</h4><ul><li>Lab 1: Initial Configuration</li></ul><h4>Chapter 4: Device Management</h4><ul><li>Lab 2: Device Administration</li></ul><h4>Chapter 5:  Layer 3 Operations</h4><ul><li>Lab 3: Layer 3 Operations</li></ul><h4>Chapter 6: Basic Policy Configuration</h4><ul><li>Lab 4: Basic Policy Configuration</li></ul><h4>Chapter 7: Policy Options</h4><ul><li>Lab 5: Policy Options</li></ul><h4>Chapter 8: Address Translation</h4><ul><li>Lab 6: Address Translation</li></ul><h4>Chapter 9: VPN Concepts</h4><h4>Chapter 10: Policy-Based VPNs</h4><ul><li>Lab 7: Policy-Based VPNs</li></ul><h4>Chapter 11: Route-Based VPNs</h4><ul><li>Lab 8: Route-Based VPNs</li></ul><h4>Chapter 12: IPv6</h4><ul><li>Lab 9: IPv6</li></ul><h4>Appendix A: Additional Features</h4><h4>Appendix B: Transparent Mode</h4><ul><li>Lab 10: Transparent Mode (Optional)</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Configuring Juniper Networks Firewall/IPSec VPN Products training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Configuring Juniper Networks Firewall/IPSec VPN Products course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Configuring Juniper Networks Firewall/IPSec VPN Products

<h3><b>Networking Microsoft Systems course description</b></h3>
      <p>A hands-on course covering the network aspects of Microsoft systems. The course progresses from basic TCP/IP tools and configuration settings through to advanced security considerations finishing with an overview of Exchange and IIS. Hands on sessions are based on a choice of Windows Server 2003 or Windows 2000 server and Windows XP or Windows 2000 professional. Customised versions with other Microsoft platforms are also available. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
	<li>Design networks with consideration for Microsoft issues such as logons.</li>
					<li>Design, configure and troubleshoot TCP/IP, DNS, WINS and DHCP.</li>
                    <li>Configure security features such as PKI and IPSec.</li>
                    <li>Describe the Windows TCP/IP implementation details.</li>
                  </ul>
        <h5>
        <b>Networking Microsoft Systems course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working with Microsoft systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
							<p>TCP/IP foundation for engineers<br />
                    Supporting Windows ( XP or 2000 or 2003)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Networking Microsoft Systems course contents</b></h3>
      <ul>
				<li>Configuring network cards </li><p>
PnP, resources, Ethernet cards, wireless cards, dial up networking, other cards, Ethernet settings, layer 2 QoS.

</p><li>Configuring and supporting IP </li><p>
Basic IP settings, advanced IP settings, advanced TCP settings, DrTCP and registry settings, security  
</p><li>DHCP </li><p>
DHCP server, authorising the DHCP service, DHCP client, DHCP relays, Address pools, options, lease duration's, Integrating with DNS.

</p><li>Microsoft networking overview </li><p>
Workgroups and domains, Domain controllers, the logon process in a network, the role of Active Directory, synchronisation, protocol stacks and bindings.

</p><li>Accessing file and print resources </li><p>
Shared folders, permissions, network printers, browsing, NetBIOS, SMB.

</p><li>WINS </li><p>
Servers, clients, Client registration, renewing and releasing of names. NetBIOS node types.

</p><li>DNS1	 </li><p>
Overview, Primary and secondary servers, DDNS, zones, resource records.

</p><li>The browser service </li><p>
Master, backup and other browser roles, elections, announcements, recovery from failure, Inter subnet browsing.

</p><li>TCP/IP implementation details </li><p>
Dead gateway detection, Multi homing, multicasting, MTU path discovery, registry settings, QOS and RSVP, Windows as a router, performance implications of Microsoft services.

</p><li>Internet Access </li><p>
Options, NAT, Firewall capabilities and Proxy server, Internet Authentication Service.

</p><li>Remote Access </li><p>
Installing, RAS servers. RAS process, protocols

</p><li>Security: PKI </li><p>
PPTP, L2TP, What is IPSec, configuring IPSec.

</p><li>Security: VPNs </li><p>
PPTP, L2TP, What is IPSec, configuring IPSec.

</p><li>Other Microsoft networking services &amp; tools </li><p>
Netmeeting, instant messaging, white boarding, document collaboration, video conferencing Microsoft Exchange, IIS, Directory replication, SNMP, Net Monitor, integration with other platforms.
</p>
      </ul>

Networking Microsoft Systems

<h3><b>Definitive VPNs training course description</b></h3>
        <p>
   A hands on course covering VPNs from the basics of
benefits and Internet vs. Intranet VPNs through to
detailed analysis of the technologies involved in 
VPNs. All the major VPN protocols are covered
including PPPoE, L2TP, SSL, IPsec and dynamic
VPNs. MPLS L3 VPNs are also covered.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Describe what a VPN is and explain the
difference between different VPN types.</li>
					<li>Recognise the design and implementation issues
involved in implementing a VPN.</li>
                    <li>Explain how the various technologies involved in a
VPN work.</li>
					<li>Describe and implement:
L2TP, IPsec, SSL, MPLS L3 VPNs.</li>
                    <li>Evaluate VPN technologies.</li>
                  </ul>
        <h5>
        <b>Definitive VPNs training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network personnel.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP Security foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Definitive VPNs training course contents</b></h3>
				<ul>	<li>VPN overview</li><p>
What is a VPN? What is an IP VPN? VPNs vs.
Private Data Networks, Internet VPNs, Intranet
VPNs, Remote access VPNs, Site to site VPNs,
VPN benefits and disadvantages.
					</p><li>VPN Tunnelling</li><p>
VPN components, VPN tunnels, tunnel sources,
tunnel end points, hardware based VPNs, Firewall
based VPNs, software based VPNs, tunnelling
topologies, tunnelling protocols, which tunnelling
protocol should you use? requirements of tunnels.
</p><li>VPN security components</li><p>
Critical VPN security requirements, Encryption
and authentication, Diffie Hellman, DES, 3DES,
RSA, PKI, Ca server types, pre shared keys
versus certificates, Enrolling with a CA, RADIUS
in VPNs.
</p><li>PPP</li><p>
Encapsulation, operation, authentication.
<br /><span>Hands on</span> Setting up PPPoE and analysing PPP
packets.
</p><li>PPTP</li><p>
Overview, Components, How it works, control and
data connections, GRE. <br /><span>Hands on</span> Building a
PPTP VPN.
</p><li>L2TP</li><p>
Overview, components, how it works, security,
packet authentication, L2TP/IPSec, L2TP/PPP,
Layer 2 versus layer 3 tunnelling. <br /><span>Hands on</span>
Implementing a L2TP tunnel.
</p><li>IPSec</li><p>
AH, HMAC, ESP, transport and tunnel modes,
Security Association, use of encryption and
authentication algorithms, manual vs automated
key exchange, NAT and other issues. <br /><span>Hands on</span>
Implementing an IPSec VPN.
</p><li>Intranet VPNs</li><p>
Headers, architecture, label switching, LDP,
MPLS VPNs.
</p><li>VPN products and services</li><p>
PE and CPE, management, various VPN
products.
</p><li>VPN issues and architectures</li><p>
VPN architectures: terminate VPN before/on/
after/in parallel with firewall, resilience issues,
VRRP, performance issues, QoS and VPNs. 
documentation. 
</p>
				</ul>

Definitive VPNs for engineers

<h3><b>Network design training course description</b></h3>
        <p>  This course provides you with the knowledge needed to
perform the design of a network infrastructure that
supports desired network solutions to achieve effective
performance, scalability, and availability. We recognise
that the role of design does not normally require hands
on skills but hands on sessions are used to reinforce the
theory not to teach configuration or troubleshooting.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
         <li>Create HA enterprise network designs.</li>
                  <li>Develop optimum Layer 3 designs.</li>
                  <li>Design effective modern WAN and data center
networks.</li>
                  <li>Develop effective migration approaches to IPv6.</li>
                  <li>Create effective network security designs.</li>
               							 </ul>
        <h5>
        <b>Network design training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone involved with network design.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP Foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Network design training course contents</b></h3>
      
				<h6><b>Part I Reliable, resilient enterprise L2/3 network design</b></h6>
         <b>Optimal Enterprise Campus Design:</b><br />Enterprise campus
				design principles, hierarchy, modularity, flexibility, resiliency.<br />
				<b>EIGRP design:</b> <br />EIGRP Design, Should you use EIGRP?<br />
				<b>OSPF design:</b><br /> OSPF scalability designs, OSPF area design,
OSPF Full-Mesh Design, OSPF Hub-and-Spoke Design, OSPF convergence design and optimization techniques.
				<br /><b>IS-IS Design:</b><br />The protocol, IS-IS hierarchical architecture,
IS-IS vs OSPF, IS-IS Deep Dive, IS-IS Design Considerations.
				<br /><b>BGP design:</b><br />BGP overview, Designing Scalable iBGP
Networks, BGP Route Reflector Design, Enhancing the Design
of BGP Policies with BGP Communities, Case Study:
Designing Enterprise wide BGP Policies Using BGP
Communities, BGP Load-Sharing Design.<br />
<h6><b>Part II Enterprise IPv6 Design Considerations</b></h6>
				<b>IPv6 Design Considerations in the Enterprise:</b><br /> IPv6
Deployment and Design Considerations, Considerations for
Migration to IPv6 Design, IPv6 Transition Mechanisms, Final
Thoughts on IPv6 Transition Mechanisms.
				<br /><b>Challenges of the Transition to IPv6:</b><br /> IPv6 Services, Link
Layer Security Considerations.
		<h6><b>Part III Modern Enterprise Wide-Area Networks Design</b></h6>
		<b>Service Provider-Managed VPNs:</b> <br />Choosing Your WAN
Connection, Layer 3 MPLS VPNs, Case Study: MPLS VPN
Routing Propagation, Layer 2 MPLS VPN Services.
		<br /><b>Enterprise-Managed WANs:</b><br /> Enterprise-Managed VPNs,
GRE, Multipoint GRE, Point-to-Point and Multipoint GRE,
IPsec, IPsec and dynamic VTI, DMVPN, Case Study: EIGRP
DMVPN, DMVPN and Redundancy, Case Study: MPLS/VPN
over GRE/DMVPN, SSL VPN.
		<br /><b>Enterprise WAN Resiliency Design:</b><br /> WAN Remote-Site
Overview, MPLS L3 WAN Design Models, Common L2 WAN
Design Models, Common VPN WAN Design Models, 3G/4G
VPN Design Models, Remote Site Using Local Internet,
Remote-Site LAN, Case Study: Redundancy and Connectivity,
NGWAN, SDWAN, and IWAN Solution Overview, IWAN
Design Overview, Enterprise WAN and Access Management.
		
<h6><b>Part IV Enterprise Data Center Designs</b></h6>
		<b>Multitier Data Center Designs:</b><br /> Case Study: Small Data
Centers (Connecting Servers to an Enterprise LAN), Case
Study: Two-Tier Data Center Network Architecture, Case
Study: Three-Tier Data Center Network Architecture.<br />
		<b>Trends and Techniques to Design Modern Data Centers:</b><br />
The Need for a New Network Architecture, Limitations of
Current Networking Technology, Modern Data Center Design
Techniques and Architectures, Multitenant Data Center.
		<br /><b>SDN:</b> <br />SDN characteristics, How SDN addresses current
Networking Limitations, SDN Architecture Components, SDN
Network Virtualization overlays.
		<br /><b>Data Center Connections:</b><br />Data Center Traffic Flows, The
Need for DCI, IP Address Mobility, Case Study: Dark Fiber
DCI, Pseudowire DCI.
				<h6><b>Part V Design QoS for Optimized User Experience</b></h6>
	<b>QoS Overview:</b><br />QoS Overview, IntServ versus DiffServ,
Classification and Marking, Policers and Shapers, Policing
Tools: Single-Rate Three-Color Marker, Policing Tools: TwoRate Three-Color Marker, Queuing Tools, Dropping Tools.
	<b>QoS design principles and best practices:</b><br /> QoS overview,
classification and marking design principles, policing and
remarking design principles, queuing design principles,
dropping design principles, Per-Hop behavior queue design
principles, RFC 4594 QoS Recommendation, QoS Strategy
Models. Campus QoS, WAN QoS, Data Center QoS.<br />
	<b>MPLS VPN QoS Design:</b><br /> The Need for QoS in MPLS VPN,
Layer 2 Private WAN QoS Administration, Fully Meshed
MPLS VPN QoS Administration, MPLS DiffServ Tunneling
Modes, Sample MPLS VPN QoS Roles.
	<br /><b>IPsec VPN QoS Design:</b><br /> The Need for QoS in IPsec VPN,
VPN Use Cases and Their QoS Models, IPsec Refresher,
Encryption and Classification: Order of Operations, MTU
Considerations, DMVPN QoS Considerations.
	<h6><b>Part VI IP Multicast Design</b></h6>
	<b>Enterprise IP Multicast Design:</b><br /> How Does IP Multicast
Work? Multicast Protocols, Multicast Forwarding and RPF
Check, Multicast Protocol Basics, PIM-SM Overview, Multicast
Routing Table, Basic SSM Concepts, Bidirectional PIM. RP
discovery, Anycast RP Features, MSDP.
	<h6><b>Part VII Designing Optimum Enterprise Network Security</b></h6>
	<b>Designing Security Services and Infrastructure Protection</b><br />
Network Security Zoning, Designing Infrastructure Protection.<br />
	<b>Designing firewall &amp; IPS solutions:</b><br /> Firewall architectures,
virtualized firewalls. Case Study: Application Tier separation,
Case Study: Firewalls in a Data Center, Case Study: Firewall
High Availability, IPS Architectures, Case Study: Secure
Campus Edge Design (Internet and Extranet Connectivity).
<br /><b>IP Multicast Security:</b><br /> Multicast Security Challenges,
Multicast Network Security Considerations.
	<br /><b>Designing Network Access Control Solutions:</b><br />IEEE
802.1X, EAP, 802.1X supplicants, 802.1X phased
deployment, Case Study: Authorization Options.
	<h6><b>Part VIII Design scenarios</b></h6>
	<b>Design Case Studies:</b><br /> 1: Enterprise Connectivity, 2:
Enterprise BGP with Internet Connectivity, 3: IPv6, 4: Data
Center Connectivity, 5: Resilient Enterprise WAN, 6: Secure
Enterprise Network, 7: QoS in the Enterprise Network.

Network design

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security for engineers

<h3><b>IP security training course description</b></h3>
        <p>
       Connection to the Internet is becoming an essential business tool. This course looks at firewalls, digital certificates, encryption and other essential topics for e-commerce sites. A generic course that looks at firewalls and VPNs. Hands on sessions include using hacking tools and configuring firewalls.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe: <br />
                    
                    	Basic security attacks<br />
                   		RADIUS<br />
                   		 SSL<br />
                   		IPSec<br />
		VPNs</li>
                        
					<li>Implement digital certificates</li>
					<li>Deploy firewalls to protect Web servers and users.</li>
                    <li>Secure Web servers and clients. </li>
                  </ul>
				
        <h5><b>IP security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network administrators.<br />
                    Network operators.<br />
                  Security auditors</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>IP security training course contents</b></h3>
				<ul>	<li>TCP/IP review</li><p>
Brief overview of the relevant headers. <br /><span>Hands on</span>
Download software for course, use analyser to
capture passwords on the wire.
					</p><li>Security review</li><p>
Policies, Types of security breach, denial of
service, data manipulation, data theft, data
destruction, security checklists, incident response.
</p><li>Security exploits</li><p>
The Internet worm, IP spoofing, SYN attack,
hijacking, Ping o' Deathâ¦ keeping up to date with
new threats. <br /><span>Hands on</span> Use a port scanning tool,
use a 'hacking' tool.
</p><li>Firewalls</li><p>
Products, Packet filtering, DMZ, content filtering,
stateful packet inspection, Proxies, firewall
architectures, Intrusion Detection Systems,
Viruses. <br /><span>Hands on</span> Set up a firewall and prevent
attacks.
</p><li>NAT</li><p>
NAT and PAT, Why use NAT, NAT-ALG, RSIP.
</p><li>Encryption</li><p>
Encryption keys, Encryption strengths, Secret key
vs Public key, algorithms, systems, SSL, SSH,
Public Key Infrastructures. <br /><span>Hands on</span> Run a
password-cracking program.
</p><li>Authentication</li><p>
Types of authentication, Securid, Biometrics,
PGP, Digital certificates, X.509 v3, Certificate
authorities, CRLs, PPP authentication, RADIUS.
<br /><span>Hands on</span> Using certificates.
</p><li>Web client and server security</li><p>
Cookies, browser certificates, censorship, PICS.
Operating system security, Web server user
authentication, Restricting access, Logging,
Securing CGI scripts. <br /><span>Hands on</span> Browser security.
</p><li>VPNs and IPSec</li><p>
What is a VPN, tunnelling, L2F, PPTP, L2TP,
IPSec, AH, ESP, transport mode, tunnel mode. 


</p>
				</ul>

62 IPsec courses delivered Online

Advanced TCP/IP

By Systems & Network Training

LTE Architecture and Protocols

By Systems & Network Training

WANs demystified

By Systems & Network Training

AJSEC - Advanced Junos Security

By Nexus Human

Cisco ASA Essentials (ASAE)

By Nexus Human

IJSEC - Introduction to Juniper Security

By Nexus Human

FortiGate Infrastructure

By Nexus Human

Advanced Juniper Networks VPN Implementations

By Nexus Human

FortiGate Infrastructure 7.2

By Nexus Human

Enterprise Firewall (NSE 7)

By Nexus Human