|
Course arrangement
This course is delivered under a bespoke, hign-value consultancy-based training arrangement, with the content and hands-on practical workshops tailored to meet the specific needs of your organisation.
We cover a range of VPN products and technologies from leading manufacturers, including PPTP, L2TP, IPSec, IKE, and MPLS.
Hands-on Practical
The course incorporates hands-on practical sessions, working with products and equipment from a range of vendors, including Check Point, Cisco, Microsoft, SnapGear, Fortress Technologies, Colubris and more.
- Working with PPTP
- RADIUS Authentication, Authorisation and Accouning (AAA)
- Layer 2 Tunneling Protocol (L2TP)
- Client-to-Branch IPSec VPNs
- Branch-to-Branch IPSec VPNs
- IPSec Pass-through and NAT
- Securing wireless networks
- Firewalls and Packet Filtering
- Implementing Firewall Security Policies
On courses of 3 days and more, extensive hands-on ractical labs can be incorporated.
Bespoke Courses
Please call 0800 138 3030 to discuss your specific Security training requirements.
|
The roles of VPNs
Supporting remote users
Linking remote offices
Connecting business partners
Star and Mesh topologies
Trusted versus secure VPNs
Overview of VPN Technologies
Understanding VPNs layers 2 and 3
Tunnelling
Switching
MPLS
IPSec
Essential Security Principles
Authentication
Privacy
Data confidentiality
Data integrity
Essentials of cryptography
Remote Access Authentication
PPP, LCP, and NCP operation
PPP authentication methods: PAP, CHAP, MS-CHAP, EAP
Token-based authentication
SecurID
Biometrics
Kerberos
Remote Access Administration
RADIUS
TACACS+
Introduction to VPNs
VPN components
VPN concerns and solutions
Security Issues
Tunneling Protocols
Generic routing encapsulation
PPTP
PPTP, PPP and CHAP
MSCHAP, MSCHAPv2
L2F
L2TP
|
Cryptographic Protection - Hashing
MD5
SHA
HMAC integrity checking
One-time passwords
Cryptographic Protection - Encryption
Symmetric:
- DES
- 3-DES
- AES
- CBC mode and IVs
- Shared secrets
Asymmetric:
- Exchanging keys with Diffie-Hellman (DH)
- Public and private keys
- RSA
- ECC (Elliptic Curve Cryptosystem)
Secure IP (IPSec)
IPSec environment
AH and ESP
Security associations
IKE key management
Main mode
Aggressive mode
Quick mode
Diffie-Hellman Key Exchange
Xauth
Securing GRE with IPSec
Securing L2TP with IPSec
NAT and IPSec
UDP wrapping
SPI wrapping
Implementing VPNs
Employing VPN concentrators
Integrating firewalls
Access control
Using VPN-capable routers
Dedicated VPN hardware
Operating system support for VPN
VPN client software
Split tunnelling
VPN management
|