Visão Geral

Neste Curso Forcepoint NGFW System Engineer, de 40 horas, ministrado por instrutor, você aprenderá as habilidades necessárias para atuar como engenheiro de sistemas, responsável pelo projeto, instalação, configuração, administração e suporte do Forcepoint NGFW. Por meio de instruções, demonstrações e exercícios práticos em laboratório, você compreenderá os requisitos e recomendações para implantar com sucesso o Forcepoint NGFW em diversos ambientes de rede.

Você desenvolverá experiência em tópicos que incluem, entre outros, clusterização do NGFW, criação de regras e políticas de segurança, integração do NGFW com outras tecnologias Forcepoint, gerenciamento de tráfego de entrada e saída, compreensão da tecnologia multilink, configuração de VPNs, inspeção profunda de tráfego e controle da atividade de endpoints com o Endpoint Context Agent. Este curso prepara engenheiros ou outros profissionais que precisam gerenciar ou liderar o desenvolvimento de engenharia de sistemas de uma implantação do Forcepoint NGFW, desde a criação do conceito até a produção.

Objetivo

Após Realiar Este Curso Forcepoint NGFW System Engineer Você Será Capaz de:

• Descreva os fundamentos da solução NGFW.
• Planejar e executar a implantação de um mecanismo NGFW e do Security Management Center.
• Configure o roteamento para uma implantação NGFW.
• Configure políticas de segurança e controle de acesso.
• Configure o sistema para um ambiente distribuído usando NAT, locais e endereços de contato.
• Implante e configure um cluster de firewall.
• Revise um exemplo de implantação e configuração de uma arquitetura MSSP.
• Configure e utilize múltiplas conexões de internet.
• Defina VPNs baseadas em políticas multilink.
• Integre com o Active Directory para gerenciar usuários e autenticação.
• Crie uma VPN móvel e implante um cliente VPN.
• Executar inspeção de tráfego e reconhecimento de aplicações de rede.
• Personalize e ajuste as políticas de inspeção.
• Implemente filtragem de arquivos e detecção de malware.
• Descreva os conceitos de normalização do tráfego e o uso de situações.
• Configurar a descriptografia TLS.
• Defina os principais recursos e características distintivas das funções de IPS e Firewall de Camada 2.
• Integre o NGFW com as soluções de nuvem da Forcepoint.
• Solucionar problemas de mecanismos, clusters e SMC do NGFW

Publico Alvo

• Usuário final/clientes: administradores de sistema, administradores de segurança de rede, engenheiros de rede, equipe de TI
• Parceiros de canal: consultores, arquitetos de sistemas, integradores e planejadores que auxiliam os clientes com implementações de NGFW da Forcepoint
• Forcepoint: engenheiros de vendas, serviços profissionais, suporte técnico

Pre-Requisitos

• Conclusão do curso de administrador Forcepoint NGFW e certificação
• Noções gerais sobre conceitos de rede IPv4 (TCP/IP, roteamento, funcionalidades de firewall, VPN, inspeção profunda de pacotes)
• Conhecimento básico dos conceitos do Active Directory/User Directory

Materiais

Conteúdo Programatico

Module 1: System Architecture Overview

1. Articulate the NGFW System Architecture.
2. Understand how to size a firewall and management environment.
3. Understand Management and Log Server high availability.
4. Become familiar with upgrading Management Server, Log Server, and engines.
5. Articulate the Forcepoint NGFW license model.

Module 2: Firewall/VPN Role and Single Firewall Deployment

1. Describe basic network defence strategies.
2. Define the capabilities and key features of the NGFW.
3. Understand and learn the process of defining and deploy a single firewall.
4. Identify additional features of the NGFW.

Module 3: Routing and Anti-spoofing

1. Configure static routing.
2. Describe additional special routing capabilities of the NGFW.
3. Understand route metrics and route monitoring.
4. Summarize the origin and function of Anti-spoofing.

Module 4: NGFW Policies

1. Describe different NGFW policy types.
2. Define NGFW policy templates and policy structure.
3. Identify the anatomy of a security policy and the objects used in policies.
4. Detail the process of policy installation and activation.

Module 5: Distributed System Configuration

1. Describe system communication in a distributed firewall environment.
2. Identify locations and contact addresses in distributed systems.
3. Describe system communication between management and engines.
4. Configure Network Address Translation (NAT).

Module 6: Firewall/VPN Role and Clustering technology

1. Describe the firewall clustering architecture and theory.
2. Configure a firewall cluster in the SMC (management).
3. Employ NGFW interface options.
4. Deploy a firewall cluster.

Module 7: MSSP and Virtual Contexts

1. Describe the SMC Domain Architecture.
2. Detail the function of the Web Portal Server.
3. Define Virtual Contexts.
4. Relate Master Engines and Virtual Engines.
5. Relate clustering and performance.
6. Review a configuration and deployment example of an MSSP architecture.

Module 8: Outbound Multi-Link Technology

1. Describe Outbound Traffic Management and its capabilities.
2. Explain ISP link selection.
3. Classify when to use a particular link selection method.
4. Configure Outbound Multi-Link.

Module 9: Site-to-Site VPNs

1. Define Forcepoint NGFW VPN capabilities.
2. Define Forcepoint NGFW VPN terminology.
3. Identify supported VPN topologies.
4. Relate Multi-Link and VPNs.
5. Test VPN-related tools in the SMC.
6. Configure a Multi-Link Policy-Based VPN.
7. Investigate Route-Based VPNs and when to use them.
8. Design VPN Hub configuration.

Module 10: Active Directory Integration

1. Define network user management.
2. Integrate Active Directory with the SMC (management).
3. Categorize the role of NPS, LDAP authentication, RADIUS, and TACAC+ in the authentication process.
4. Deploy Forcepoint User Identification.
5. Configure and deploy the Endpoint Context Agent.
6. Monitor network users.

Module 11: VPN Client

1. Describe Mobile VPN connections.
2. Distinguish IPSec and SSL VPN tunnelling.
3. Configure an NGFW engine for Mobile VPN connections.
4. Configure the VPN Client for an endpoint.
5. Demonstrate tools for Mobile VPN troubleshooting.

Module 12: Traffic Inspection

1. Review connection control and the role of Deep Inspection.
2. Differentiate between Services, Protocol Agents, and Proxy Modules.
3. Configure a Sidewinder Proxy service.
4. Establish Network Application Identification.
5. Differentiate Network Applications and Client Applications.

Module 13: Inspection Policies

1. Relate firewall and inspection policies.
2. Illustrate the anatomy of Inspection Policies.
3. Differentiate the predefined Inspection Policy templates.
4. Define the concept of Situations.
5. Define the function of the Inspection Rules tree.
6. Fine-tune inspection policies.
7. Analyze the role and function of Inspection Exception rules.
8. Analyze the use and function of Blacklisting.

Module 14: Malware Detection and File Filtering

1. Explain the process of Malware Detection.
2. Illustrate the anatomy of a File Filtering Policy.
3. Define the process of using File Reputation services.
4. Configure built-in Anti-Malware scanning.
5. Describe the role of Advance Malware Detection.

Module 15: NGFW Inspection Techniques

1. Define techniques used by the NGFW to identify threats.
2. Detail the traffic inspection process.
3. Explain the role of Advanced Evasion Techniques and the process of traffic normalization.
4. Describe misuse detection with Fingerprints.
5. Describe concept of Situations and their role in traffic inspection.
6. Analyze Regular Expression syntax.
7. Review examples of fingerprints.

Module 16: TLS Inspection

1. Articulate the purpose of TLS inspection.
2. Describe TLS inspection exceptions.
3. Define the process of Server and Client-Side TLS inspection.
4. Configure the TLS inspection.

Module 17: NGFW in Layer 2 Roles and Multi-Layer Deployment

1. Identify NGFW Operating Roles.
2. Define key features of the IPS and Layer 2 Firewall roles.
3. Understand the difference between the Firewall and IPS.
4. Describe a Layer 2 Policy.
5. Configure and deploy a multi-layer NGFW.
6. Analyze the role of High Availability in multi-layer deployments.

Module 18: Forcepoint Integration

1. Configure integration with Forcepoint Web Security Cloud.
2. Detail how to integrate with Forcepoint Advanced Malware Detection.
3. Review the Malware Detection process.
4. Understand information exchange using Syslog or other SIEM solutions.

Module 19: Troubleshooting

1. Detail the NGFW packet inspection process.
2. Review the troubleshooting process and learn troubleshooting tips.
3. Define the role of sgInfo in troubleshooting.
4. Explore how to troubleshooting with logs.
5. Understand how to troubleshoot a VPN.
6. Analyze the role of monitoring in troubleshooting.
7. Troubleshoot the NGFW engine.