Network Security Using SunScreen 3.x (SC-315)

Who Can Benefit

Back to top

Prerequisites

• Define firewall rules after reading a security policy
• Describe major Transmission Control Protocols and Internet Protocols (TCP/IP)
• Configure routing and routing tables
• Configure subnet masks
• Use basic Solaris 9 OS networking tools

Back to top

Skills Gained

• Describe, install, and configure SunScreen 3.2 software for Solaris 9 OS
• Install SunScreen 3.2 software in routing and stealth mode
• Configure a remote administration station
• Configure pass, fail, and encryption rules
• Configure encrypted tunnels, also known as virtual private networks (VPNs)
• Describe and configure high availability (HA) and static and dynamic network address translation (NAT)
• Describe proxies and user authentication
• Navigate the SunScreen software graphical user interface (GUI)
• Use the configuration editor for basic administration tasks
• Define and configure common objects

Back to top

Course Content

Module 1 - Exploring SunScreen 3.2 Software

• Describe SunScreen 3.2 software
• Describe typical firewall configurations
• Describe how SunScreen 3.2 software can create a virtual private network (VPN)
• Describe how SunScreen 3.2 software provides Internet security protocols
• Describe how SunScreen 3.2 software supports network address translation (NAT)
• Describe how SunScreen 3.2 software provides high availability (HA) firewalls
• Describe how to set up local and remote administration
• Describe the role of a Centralized Management Group (CMG)
• Describe how to use SunScreen 3.2 software to set up proxies

Module 2 - Installing SunScreen 3.2 Software

• Describe the issues that must be considered before installing a firewall
• Install a SunScreen 3.2 Software in routing mode on a locally administered Screen
• Start the GUI
• Configure the Screen

Module 3 - Applying Packet Filtering

• Describe packet filtering
• Describe stateful filtering
• Describe policy rules and sequencing
• Describe rule syntax

Module 4 - Introducing Common Objects

• Describe common objects
• Define service objects
• Define address objects
• Define screen objects
• Define interface objects
• Define other common objects

Module 5 - Administering SunScreen 3.2 Software

• Describe the role of the administration station
• Describe local administration
• Configure remote administration
• Describe Centralized Management Groups
• Back up and restore a Screen?s configuration and data

Module 6 - Designing and Administering Policies and Rules

• Describe how rules implement a site?s security policy
• Describe how to manage SunScreen software policies
• Add rules to implement a security policy

Module 7 - Configuring Virtual Private Networks and Internet Protocol

• Describe the process of encryption and decryption
• Describe how SunScreen software uses encryption
• Describe packet examination and fragmentation
• Describe tunneling
• Describe the use of IPsec and IKE with SunScreen 3.2 software
• Configure encryption and tunnels with IPsec and IKE
• Configure VPNs with IPsec and IKE

Module 8 - Configuring Network Address Translation

• Describe the process of network address translation
• Configure static and dynamic NAT
• Describe NAT collisions
• Choose a NAT virtual address
• Configure common applications of NAT

Module 9 - Configuring High Availability

• Describe high availability
• Define HA components
• Describe HA processes
• Configure HA
• Administer HA screens
• Understand the limitations of HA

Module 10 - Configuring Proxies

• Describe authentication and proxies
• Create and use authorized user and proxy user objects
• Describe how SunScreen 3.2 software proxies work
• Configure and use proxies

Module 11 - Configuring SunScreen 3.2 Software for Stealth Mode

• Describe SunScreen 3.2 software stealth mode
• Describe different stealth-mode firewalls for network configurations
• Install and configure SunScreen 3.2 software for stealth mode

Module 12 - Configuring and Retrieving SunScreen 3.2 Software Logs

• Describe the SunScreen 3.2 software logging function
• Configure SunScreen 3.2 software logging features
• Retrieve and monitor SunScreen 3.2 software log records

Module 13 - Troubleshooting SunScreen 3.2 Software

• Describe SunScreen software troubleshooting techniques
• Resolve problems associated with IPsec
• Describe the SunScreen software file system layout

Back to top

Browse Other Course Topic Areas