Tactical Perimeter Defense
Course Specifications
Course number: 085800, rev 2.0
Course length: 
Software: N/A N/A 
Course Description
This course is the official courseware for the Security Certified Program SC0-451 certification exam. The Tactical Perimeter Defense course is designed to provide network administrators and certification candidates with hands-on tasks on the most fundamental perimeter security technologies. The network perimeter is often the first line of defense in an organization’s network, and this course covers the issues every administrator must be familiar with. 
Prerequisites:  To ensure your success, we recommend that you have CompTIA’s Security+ certification, or have equivalent experience. This course assumes that the reader has fundamental working knowledge of networking concepts, and foundational security knowledge. 

Delivery Method:  Instructor-led, group-paced, classroom-delivery learning model with structured hands-on activities.
Hardware/Software Requirements
You will need:
•	Student machines, one per student, recommended minimum specifications: 
o	Pentium 4, 2.0 GHz processor.
o	512 MB of RAM.
o	50 GB hard drive.
o	DVD-ROM drive.
o	NIC, capable of promiscuous mode support.
o	Integrated video card, capable of 32-bit video.
•	Instructor machine, same configuration as student machines.
•	Three Cisco routers, 2500 Series preferred (used from a reseller is fine), running IOS 12.2 or greater, with IPSec/SSH support. 
•	One Cisco console cable.
•	Two serial cables. 
•	DCE to DTE, for connecting routers.
•	Three switches/hubs, 10/100 Mbps.
•	The firewall lesson will require Microsoft ISA Server 2006. This must be downloaded as a 180-day trial from Microsoft, or full ISA Server software must be provided for students. 
•	During the VPN lesson, machines designated as VPN servers will require two NICs. The NICs can be either integrated or non-integrated. 
•	During the VPN lesson, the instructor machine will need to be running the FTP Service. You may enable the service during your initial setup, or during the VPN lesson, as you prefer. 
•	For class preparation, you will need the following tools. Note, where the tools are available as per open source licensing, they have been included on the course CD-ROM, all other tools should be downloaded and put in the correct folder. All these tools should be copied to the C:\\Tools or /Tools directories on your Windows and Linux systems accordingly.
Lesson 2	WinPcap_4_0.exe	SCNS Book CD	
	wireshark-setup-0.99.5.exe	SCNS Book CD	
	tftp.cap	SCNS Book CD	
	fragment.cap	SCNS Book CD	
	ping.text	SCNS Book CD	
	ping.cap	SCNS Book CD	
	ftp.txt	SCNS Book CD	
	ftp.cap	SCNS Book CD	
Lesson 3	puTTY.exe	SCNS Book CD	
	ping_arp.mac.cap	SCNS Book CD	
	rip.update.cap	SCNS Book CD	
	ripv2withAuthentication.cap	SCNS Book CD	
Lesson 5	ISA Server 2006	www.microsoft.com/isaserver/prodinfo/default.mspx	
	ISAScwHlpPack.exe	SCNS Book CD	
Lesson 6	rfc-index.wri	SCNS Book CD	
	rfc2547.txt	SCNS Book CD	
	rfc2979.txt	SCNS Book CD	
Lesson 8	Snort_2_6_1_2_Installer	SCNS Book CD	
	Snort Rules	SCNS Book CD	
	mysql-essential-5.0.27-win32	SCNS Book CD	
	adodb493a.tgz	SCNS Book CD	
	base-1.2.7.tar.gz	SCNS Book CD	
Lesson 9	WildPackets_OmniPeek_Personal41	www.omnipeek.com/downloads.php	
	dotnetfx.exe	SCNS Book CD	
	NetStumbler	SCNS Book CD	
•	In this course, there are several wireless components utilized. Each training location can decide if they wish to acquire this equipment or use the content as the learning source. The equipment used in this lesson is: 
o	Two laptops running Windows XP. 
o	One Linksys WPC54G NIC and associated set-up CD-ROM. 
o	One Netgear WPN511 NIC and associates set-up CD-ROM.
o	One Linksys WAP54G access point and associated set-up CD-ROM.
o	One Netgear WPN824 access point and associated set-up CD-ROM.

Performance-Based Objectives
•	Describe the core issues of building a perimeter network defense system. 
•	Investigate the advanced concepts of the TCP/IP protocol suite.
•	Secure routers through hardening techniques and configure Access Control Lists. 
•	Design and configure multiple firewall technologies.
•	Examine and implement IPSec and Virtual Private Networks.
•	Design and configure an Intrusion Detection System.
•	Secure wireless networks through the use of encryption systems.

Course Content
Lesson 1: Network Defense Fundamentals
Topic 1A: Network Defense
Topic 1B: Defensive Technologies
Topic 1C: Objectives of Access Control
Topic 1D: The Impact of Defense
Topic 1E: Network Auditing Concepts

Lesson 2: Advanced TCP/IP
Topic 2A: TCP/IP Concepts
Topic 2B: Analyzing the Three-way Handshake
Topic 2C: Capturing and Identifying IP Datagrams
Topic 2D: Capturing and Identifying ICMP Messages
Topic 2E: Capturing and Identifying TCP Headers
Topic 2F: Capturing and Identifying UDP Headers
Topic 2G: Analyzing Packet Fragmentation
Topic 2H: Analyzing an Entire Session

Lesson 3: Routers and Access Control Lists
Topic 3A: Fundamental Cisco Security
Topic 3B: Routing Principles
Topic 3C: Removing Protocols and Services
Topic 3D: Creating Access Control Lists
Topic 3E: Implementing Access Control Lists
Topic 3F: Logging Concepts

Lesson 4: Designing Firewalls
Topic 4A: Firewall Components
Topic 4B: Create a Firewall Policy
Topic 4C: Rule Sets and Packet Filters
Topic 4D: Proxy Server
Topic 4E: The Bastion Host
Topic 4F: The Honeypot

Lesson 5: Configuring Firewalls
Topic 5A: Understanding Firewalls
Topic 5B: Configuring Microsoft ISA Server 2006
Topic 5C: IPTables Concepts
Topic 5D: Implementing Firewall Technologies

Lesson 6: Implementing IPSec and VPNs
Topic 6A: Internet Protocol Security
Topic 6B: IPSec Policy Management
Topic 6C: IPSec AH Implementation
Topic 6D: Combining AH and ESP in IPSec
Topic 6E: VPN Fundamentals
Topic 6F: Tunneling Protocols
Topic 6G: VPN Design and Architecture
Topic 6H: VPN Security
Topic 6I: Configuring a VPN

Lesson 7: Designing an Intrusion Detection System
Topic 7A: The Goals of an Intrusion Detection System
Topic 7B: Technologies and Techniques of Intrusion Detection
Topic 7C: Host-based Intrusion Detection
Topic 7D: Network-based Intrusion Detection
Topic 7E: The Analysis
Topic 7F: How to Use an IDS
Topic 7G: What an IDS Cannot Do

Lesson 8: Configuring an IDS
Topic 8A: Snort Foundations
Topic 8B: Snort Installation
Topic 8C: Snort as an IDS
Topic 8D: Configuring Snort to Use a Database
Topic 8E: Running an IDS on Linux

Lesson 9: Securing Wireless Networks
Topic 9A: Wireless Networking Fundamentals
Topic 9B: Wireless LAN (WLAN) Fundamentals
Topic 9C: Wireless Security Solutions
Topic 9D: Wireless Auditing
Topic 9E: Wireless Trusted Networks