Course benefits
This industry-leading wireless LAN security course from LEVER Technology Group PLC provides a comprehensive, high-value hands-on practical coverage of
IEEE 802.11 Wireless LAN Security, passing on the necessary skills for implementing and managing wireless security in the enterprise using layer 2, layer 3 and layer 7 products from the industry's leading manufacturers.
The course incorporates 80% hands-on practical time, and helps delegates prepare for the Certified Wireless Security Professional (CWSP™) exam.
The course comprises 32 hours of instructor-led hands on learning, using the latest enterprise wireless LAN security products. The course addresses Wireless LAN Intrusion, Security Policy, and Security Solutions in detail.
What's included
This market-leading course from Planet3 Wireless Inc. and LEVER Technology Group PLC includes:
- 32 hours of expert Instructor-led tuition
- Advanced hands-on practical labs, working with enterprise-grade equipment from a range of vendors
- Official CWSP Self-Study Guide
- Official 400+ page CWSP Course Guide training materials
- Official CWSP Exam Preparation questions
- Additional unique course materials developed by LEVER
- 5-star lunches, refreshments, sodas, etc.
- State-of-the-art training environment and equipment
- Broadband Internet access, fax and telephony services available during your course
- Certificate following course completion
- Lifetime Post-Course Support
Hands-on Practicals
A major benefit for individuals that attend this course, and for their companies, is the hands-on access to the widest range of corporate-grade wireless hardware and security products in the UK. The course provides the perfect opportunity to assess leading products from a diverse range of vendors, including Fortress Technologies, Bluesocket or Vernier Networks, Colubris Networks, SnapGear, Cisco, Proxim, Symbol, Microsoft, WildPackets, Air Magnet, Funk Software, Meetinghouse, VanDyke, GFI, and more.
Objectives
On completing this course, delegates will be able to:
- Understand in-depth the vulnerabilities inherent in 802.11 wireless networks.
- Demonstrate the risks of Packet Analysis and MAC address Spoofing.
- Demonstrate the dangers of Rogue Hardware and Default Settings for WLAN equipment.
- Demonstrate the effects of RF Jamming and Data Flooding, and describe how to counter these threats.
- Demonstrate the susceptibility of wireless-enabled laptops to Peer attacks and corporate Information Theft.
- Demonstrate the risks posed by Wireless Hijacking and Denial of Service (DoS) attacks.
- Analyse 802.11 network operation using industry-leading protocol analysis tools.
- Employ WEP effectively in situations for which WEP is appropriate.
- Use EAP - Cisco Wireless (LEAP) for secure wireless networking.
- Upgrade current WLAN products and configure them to use Wi-Fi Protected Access (WPA) correctly.
- Employ 802.1x with EAP-TLS, EAP-TTLS or Protected EAP (PEAP) for secure, mutual authentication.
- Employ Cisco LEAP and 802.1x/EAP for secure Wireless bridge links.
- Employ VPN technologies for layered security in Wireless bridge links.
- Design and configure Access Point-based VPNs using PPTP, IPSec, VPN Pass-through and VPN Hopping.
- Configure and demonstrate VPN roaming across access points.
- Configure and demonstrate SSH2 Tunneling and Local Port Redirection for secure access to systems, applications and services.
- Employ Scalable Wireless VPN solutions using Industry-leading Layer 2 encryption gateways and the Advanced Encryption Standard (AES).
- Design and implement Layered Wireless Security using Enterprise Wireless Gateways from Bluesocket and Vernier Networks.
- Design and write Wireless Security Policy into the Coprorate IT Security Policy.
- Incorporate a diverse range of advanced, vendor-neutral security solutions into corporate wireless networks.
Hands-on practical labs
Our enhanced hands-on practical labs cover more exercises than other standard CWSP courses.
The course features an extensive range of sophisticated hands-on practical labs, accounting for up to 80% of the course time. These advanced WLAN security labs include:
The course features extensive hands-on practical labs, working with WLAN equipment from leading vendors, including Cisco Systems (Aironet), Proxim Inc, Symbol Technologies (Spectrum24), ORiNOCO (access points and client adapters), Colubris Networks (wireless VPN access points), Bluesocket (wireless gateways), Fortress Technologies (advanced encryption gateways), Funk Software (RADIUS servers), ZoomAir, Linksys, WildPackets Airopeek NX, AirMagnet, AirDefense, and much more.
- 802.11 packet and protocol analysis
- Packet Analysis and MAC address Spoofing
- The dangers of Rogue Hardware and Default Settings
- RF Jamming and Data Flooding
- Peer attacks, Information Theft
- Wireless Hijacking and DoS Attacks
- Employing WEP
- EAP - Cisco Wireless (LEAP)
- Employing Wi-Fi Protected Access (WPA)
- 802.1x and EAP-TTLS
- Wireless Bridging Security - Cisco LEAP
- Wireless Bridging Security - Layer 3 VPNs: PPTP, IPsec
- Access Point VPNs
- Roaming with Access Point VPNs: PPTP, IPSec, VPN Pass-through, VPN Hopping
- SSH2 Tunneling and Local Port Redirection
- Scalable Wireless VPN Solutions - Layer 2 encryption gateways and Advanced Encryption Standard (AES)
- Layered Wireless Security - Enterprise Wireless Gateways: Bluesocket, Vernier Networks.
Lifetime Post-Course Support
After completing their course with LEVER, every delegate receives lifetime post-training support from LEVER Technology Group PLC, to help apply the technologies and skills they have learned with us, to provide career-long support, and to ensure they are better equipped for their future roles in IT and networking.
Enhanced CWSP course
This official Planet3 Wireless Inc. certified course features additional modules developed exclusively by LEVER Technology Group PLC, to add even more valuable content and hands-on practical experience to the CWSP course.
In addition, our unique exam preparation checklist, included in the course fee, combined with the lifetime post-training support that every course attendee receives from LEVER Technology Group PLC, help to ensure that our delegates are better equipped for their role in the planning, design and support of secure wireless networks, and in their preparation for the CWSP exam.
Who should attend?
This course is designed for experienced networking professionals who wish to gain critical skills in wireless networking security, including how hackers attack networks and the measures that must be employed to prevent them from doing so.
This course is appropriate for:
- Systems and Network Administrators
- Systems and Network Engineers
- Systems and Network Analysts
- Technical Support and Implementation Engineers
- IT Security Professionals
- Technical Consultants Network Architects.
With the rapid increase in wireless LAN installations, all IT network and security professionals should now look to develop their knowledge and skills in wireless network security.
Completing CWSP Training and Certification is the clearest way to demonstrate competence in 802.11 wireless network security.
Certification
On successful completion of the course, delegates will be prepared for the CWSP Certification Exam (Exam #PW0-200).
Pre-requisites
Delegates should have acquired CWNA certification prior to attending this course.
|
Course 616: Content
All attendees receive hands-on practical experience configuring, testing and implementing a wide variety of Layer 2, and Layer 3 and Layer 7 wireless security solutions using hardware and software from the following vendors:
AirMagnet, AirDefense, BlueSocket, Colubris Networks, Cisco Systems, Fortress Technologies, Intermec, Funk Software, Microsoft, Proxim, Orinoco, Symbol Technologies, TamoSoft, Zoom Telephonics, SafeNet, SnapGear, System Tools, Van Dyke Software, WildPackets, IPSwitch, Young Design.
Risk Assessment
Assets to protect
Threats to protect against
Legal protection
Costs
Basic security measures
Threat analysis
Impact analysis
Threat Analysis and Hacking Methodology
Target profiling
Physical security
Social engineering
Wireless bridges
Packet analysis
Information theft
Malicious data insertion
Denial of Service (DoS)
Peer-to-peer hacking
Unauthorized control
Rudimentary security measures
SSID
MAC filters
Static WEP
Default configurations
Firmware upgrades
Physical security
Periodic inventory
Intermediate Security Measures
Rogue equipment
Cell sizing
Protocol filters
SNMP
Discovery protocols
Wireless segment configuration
Remove vulnerabilities
Client security
IP Services
Advanced Security Measures
Wireless security policy
Authentication and encryption
Wireless DMZ and VLANs
Audits
Traffic pattern analysis
Authenticated DHCP
|
Wireless LAN Auditing Tools
Discovery tools
Password crackers
Share enumerators
Network management and control
Wireless protocol analyzers
Manufacturer defaults
Password sniffers
Antennas and WLAN equipment
OS fingerprinting and port scanning
Application sniffers
Networking utilities
Network discovery and management
Hijacking users
RF Jamming and Data flooding tools
WEP crackers
Hardware and Software Solutions
RADIUS with AAA Support
RADIUS Details
Kerberos
Static and Dynamic WEP and TKIP
802.1x
Extensible Authentication Protocol (EAP)
VPNs
Encryption Schemes
Routers
Switch-Routers
Firewalls
MobileIP VPN Solutions
Enterprise Wireless Gateways
Switches, VLANs, and Hubs
SSH2 Tunneling and Port Redirection
Thin Client Solutions
Prevention and Countermeasures
802.1x
802.11i
TKIP
AES
Intrusion detection
US Federal and state laws
Implementation and Management
Design and implementation
Equipment configuration and placement
Interoperability and layering
Security management
|