Implementing NetScreen Security Gateways
Course No: EDU-NS-INSG
Length: 4 days
Cost: $3,000 (US) Schedule and Registration
Course Overview
Introduction to NetScreen Security Gateways (INSG) is the first course in the ScreenOS curriculum. It is a four-day instructor-led course that focuses on configuration of the NetScreen Firewall/VPN products in a variety of situations, including basic administrative access, routing, firewall policies and policy options, attack prevention features, address translation, and VPN implementations.
The course combines both lecture and labs, with significant time allocated for hands-on experience. Students completing this course should be confident in their ability to configure NetScreen Firewall/VPN products in a wide range of installations.
Target audience
Network engineers, support personnel, reseller support, and others responsible for implementing NetScreen products.
Prerequisites
This course assumes that students have basic networking knowledge and experience in the following areas:
- Ethernet
- Transparent Bridging
- TCP/IP Operations
- IP Addressing
- Routing
Course Contents
Security Concepts and Architecture
- Device functionality
- System architecture - interfaces, zones, virtual routers, virtual systems
- Device deployment
Administration
- Remote connectivity
- Securing administrative access
- External management/monitoring
- File management
Transparent Mode
- Layer 2 Operations
- Layer 2 Configuration
Layer 3 Operations
- Basic routing configuration
- Multiple virtual router deployments
- Interface-based NAT
Basic Policy Configuration
- Address books
- Services
- Groups
- Policy configuration
- Multi-cell policies
Policy Options
- Logging
- Counters
- Scheduling
- Authentication
Attack Prevention
- SCREEN functions
- URL Filtering
- Integrated Anti-Virus checking
- Deep Inspection
Address Translation Options
- Policy-based NAT source
- NAT destination
- MIP
- VIP
VPN Concepts
- What's a Tunnel?
- IPSec Overview
- Tunnel Establishment
- Data Flows
Policy-Based VPNs
- Configuration
- Verification
Route-Based VPNs
- Configuration
- Verification
NetScreen Remote Client
- Client Operations
- Client Configuration
- Device Configuration
