NET 261 Fundamentals of Network Security

Lecture Hours: 3
Lab Hours: 4
Credits: 5

Explains network security processes and equipment with a hands-on emphasis. Covers security policy design and management; security technologies, solutions and products; security appliance firewalls and secure router design; and AAA and VPN implementation. Intended for people currently employed in the computer industry or computer technology instructors.

Prerequisite: NET 154 with a grade of C or better; or current CCNA certification; or consent of instructor.
Student Learning Outcomes:

Describe the different types of network security vulnerabilities.
Propose how to design and manage a security policy.
Describe and select appropriate security technologies, products, and solutions.
Install, configure, and maintain an advanced security appliance firewall.
Implement AAA using Cisco routers and PIX security appliance firewalls.
Implement VPN using Cisco routers and PIX security appliance firewalls.
Design and implement a secure network.

Content Outline

Overview of Network Security
- What is Network Security?
- Key Elements of Network Security
- Goals of Network Security
- Weaknesses, Threats, and Hacking Methods
- Products and Solutions
Securing the Perimeter Router
- Overview of Security Problems and Solutions
- Disabling Unneeded Services
- Securing the Perimeter’s Inbound and Outbound Traffic
- Introduction to the CISCO IOS Firewall
ACL’s and CBAC
- Access Control Lists
- Content Based Access Control (CBAC)
Router AAA Security
Intrusion Detection
- Overview of Intrusion Techniques
- Techniques to Prevent Intrusions
- Monitoring Intrusions
IP Security
- IOS IPSEC Technologies
- Cisco IOS Cryptosystem
- Virtual Private Networks
- Configuring IPSEC
- Configuring CA
Easy VPN
- The Cisco Easy VPN Server
- Configuring the Easy VPN Server
PIX Security Appliance Firewall
- Introduction to security firewalls
- The Cisco PIX security appliance firewall
- Router Configuration and DCHP
Translations and Connections
- Transport Protocols
- Network Address Translation
- Connections
- Port Address Translations
File Security
- Security Overview
- Permissions
- Changing Permissions with the Command Line
- Changing Permissions with File Manager
- Configuring DNS support
Access Control Lists for the PIX Security Appliance Firewall
AAA on PIX Security Appliance Firewalls
PIX IDS
PIX Failover and System Maintenance
- Understanding Failover
- Failover Configuration
- System Maintenance and Management
PIX VPN
- Overview
- Configuration
- Testing and Troubleshooting