Build Secure Network

Unit 343: Network Security Fundamentals

1. Introduction to Network Security

• Importance of securing networks
• Common network threats (malware, phishing, DoS/DDoS, man-in-the-middle, insider threats)
• Goals of network security: Confidentiality, Integrity, Availability (CIA Triad)

2. Network Security Protocols

• Overview of security protocols
• SSL/TLS: Purpose, handshake process, encryption, and usage in HTTPS
• IPsec: Modes (transport, tunnel), components (AH, ESP), use cases
• SSH: Secure remote login, tunneling, encryption
• Other protocols: Kerberos, RADIUS, Diameter

3. Firewall Technologies

• Role of firewalls in network security
• Types of firewalls:
  • Packet filtering firewalls
  • Proxy firewalls
  • Stateful inspection firewalls
  • Next-generation firewalls (NGFW)
• Firewall configuration best practices:
  • Defining rules and policies
  • Logging and monitoring
  • Regular updates and patching

4. Intrusion Detection and Prevention Systems (IDPS)

• Definitions and differences:
  • Intrusion Detection System (IDS)
  • Intrusion Prevention System (IPS)
• Detection techniques:
  • Signature-based
  • Anomaly-based
  • Stateful protocol analysis
• Deployment strategies and placement in network architecture
• Response and alert mechanisms

5. Secure Wireless Networks

• Security challenges unique to wireless environments
• Encryption standards:
  • WEP (overview, vulnerabilities)
  • WPA2 and WPA3
• Authentication protocols (802.1X, EAP methods)
• Best practices for wireless security:
  • Strong encryption and passwords
  • Network segmentation
  • Disabling SSID broadcast when appropriate
  • Use of MAC filtering and rogue AP detection

6. Virtual Private Networks (VPNs)

• Concept and purpose of VPNs
• Types of VPNs:
  • Site-to-site VPN
  • Remote access VPN
• VPN protocols:
  • IPsec VPN: architecture and security features
  • SSL VPN: use cases and benefits
  • Other VPN protocols (L2TP, PPTP overview)
• How VPNs enhance security over public networks

7. Network Access Control (NAC)

• Definition and objectives of NAC
• Core components: Authentication, Authorization, and Enforcement
• Methods of NAC implementation (agent-based, agentless)
• Benefits and challenges of NAC

8. Security Best Practices for Network Configuration

• Strong password policies and multi-factor authentication
• Regular software and firmware updates
• Disabling unused services and ports
• Network segmentation and VLAN implementation
• Secure management protocols (SSH, SNMPv3)

9. Security Incident Response and Management

• Importance of incident response planning
• Phases of incident response:
  • Preparation
  • Detection and analysis
  • Containment, eradication, and recovery
  • Post-incident activities and lessons learned
• Roles and responsibilities in incident management

10. Network Security Auditing and Monitoring

• Importance of auditing and continuous monitoring
• Security Information and Event Management (SIEM) systems
• Log management and analysis
• Network traffic monitoring tools and techniques
• Detecting and responding to security incidents through monitoring