RHS342 Developing Red Hat Firewall Solutions
Course Description
The 2.6 version of the Linux kernel, with its extended network address translation and new stateful inspection capabilities have accelerated interest in, and adoption of, Red Hat Linux as an enterprise-ready firewall solution. Red Hat's RHCE curriculum provides an introduction to these capabilities.
What you will learn:
RHS342 builds on these skills and introduces new ones that will provide course participants with a more comprehensive understanding of firewalls, penetration, and intrusion detection using Red Hat Linux and other open source tools. The topics covered in this five-day class are listed on the course outline to the right.
Course Outline
- Firewalling Concepts
- Packetfilter (stateful)
- Application Level Gateways
- Firewall Architectures
- Screening Router
- Dual-homed Host
- DMZ
- VPN
- Implementing a Firewall using RHEL
- Stateful Firewalls using Red Hat Enterprise Linux and iptables
- Application-level Gateways using Squid and Postfix
- Firewall testing
- Testing the firewall using nmap
- Local Security
- Filesystem Security
- Auditing the system using Logwatch and Third Party tools
- VPN concepts and protocols
- CiPE
- IPSec
- Implementing a VPN using CiPE
- Implementing a VPN using IPSec
- Manual keyed connections using setkey
- Automatic keyed connections using racoon
- Using preshared keys for authentication
- Using X.509 certificates for authentication
- Administering connections using redhat-config-network
- Implementing VPNs using RHEL in heterogenuous networks
- Connecting to Windows 2000
Prerequisites:
- RH253 Red Hat Linux Networking and Security Administration, RH300 RHCE Rapid Track Course (and RHCE Exam), or RHCE certification or equivalent work experience is required for this course
- Course participants should already know the essential elements of how to configure the services covered, as this course will be focusing on more advanced topics from the outset.
- RHS333 Red Hat Enterprise Security: Network Services or a strong background in cryptographic technologies is also required.
Audience:
Network administrators, system administrators, consultants, and other IT professionals will benefit from the subjects covered in this course.
Class times:
-
5 days
- Start: 9:00am
- End: 4:30 to 5:00pm (depending on class progress)