Red Hat Enterprise Security: Network Services

start > courses and registration > training feature sheet

Red Hat Enterprise Security: Network Services :: [RHS333]

course schedule			who can benefit
prerequisites			skills gained
other notes			course content
related solutions

code.

RHS333

length.

4 days

type.

Instructor-Led

partner.

Red Hat

price.

$2,598

Red Hat Enterprise Linux has gained considerable momentum as the operating system of choice for deploying network services such as web, ftp, email, and file sharing. RHS333 Red Hat Enterprise Security: Network Services is an intensive course that provides four days of instruction and labs on how to to use the latest technologies to secure your services.

Now updated for Red Hat Enterprise Linux 5!

Austin, TX	mar.30.2009 - apr.2.2009	register
Austin, TX	jun.29.2009 - jul.2.2009	register
Boston, MA	apr.20.2009 - apr.23.2009	register
Chicago, IL	feb.16.2009 - feb.19.2009	register
Columbia, MD	apr.13.2009 - apr.16.2009	register
D.C.	mar.9.2009 - mar.12.2009	register
Edison, NJ	mar.2.2009 - mar.5.2009	register
Houston, TX	jun.1.2009 - jun.4.2009	register
Mountain View, CA	may.11.2009 - may.14.2009	register
Sacramento, CA	jun.15.2009 - jun.18.2009	register

who can benefit

The audience for this course includes system administrators, consultants, and other IT professionals responsible for the planning, implementation, and maintenance of network servers. While the emphasis is on running these services on Red Hat Enterprise Linux, and the content and labs will assume its use, system administrators and others using proprietary forms of Unix may also find many elements of this course relevant.

prerequisites

	RH253 Red Hat Linux Networking and Security Administration
	RH300 RHCE Rapid Track Course (and RHCE Exam)
	or RHCE certification or equivalent work experience is required for this course.
	course participants should already know the essential elements of how to configure the services covered, as this course will be focusing on more advanced topics from the outset.

skills gained

RHS333 trains people with RHCE-level competency to understand, prevent, detect, and properly respond to sophisticated security threats aimed at enterprise systems. The course equips system administrators and security professionals with the skills and knowledge to harden computers against both internal and external attacks, providing in-depth analysis of the ever-changing threat models as they pertain to Red Hat Enterprise Linux. RH333 builds on the security skills developed in other Red Hat training courses so that administrators can design and implement an adequate security profile for critical enterprise systems.

prepares for:

	EX333 Red Hat Enterprise Security: Network Services Expertise Exam
	Save when you bundle your courses
	EX333 costs $749 when purchased on its own or $549 when taken with RHS333 in the same week. Enroll now for EX333 and use promotional code 45678 to apply the $200 discount.

course content details

	The Threat Model and Protection Methods

	Internet threat model and the attacker's plan
	System security and service availability
	An overview of protection mechanisms

	Basic Service Security

	SELinux
	Host-based access control
	Firewalls using Netfilter and iptables
	TCP wrappers
	xinetd and service limits

	Cryptography

	Overview of cryptographic techniques
	Management of SSL certificates
	Using GnuPG

	Logging and NTP

	Time synchronization with NTP
	Logging: syslog and its weaknesses
	Protecting log servers

	BIND and DNS Security

	BIND vulnerabilities
	DNS Security: attacks on DNS
	Access control lists
	Transaction signatures
	Restricting zone transfers and recursive queries
	DNS Topologies
	Bogus servers and blackholes
	Views
	Monitoring and logging
	Dynamic DNS security

	Network Authentication: RPC, NIS, and Kerberos

	Vulnerabilities
	Network-managed users and account management
	RPC and NIS security issues
	Improving NIS security
	Using Kerberos authentication
	Debugging Kerberized Services
	Kerberos Cross-Realm Trust
	Kerberos Encryption

	Network File System

	Overview of NFS versions 2, 3, and 4
	Security in NFS versions 2 and 3
	Improvements in security in NFS4
	Troubleshooting NFS4
	Client-side mount options

	OpenSSH

	Vulnerabilities
	Server configuration and the SSH protocols
	Authentication and access control
	Client-side security
	Protecting private keys
	Port-forwarding and X11-forwarding issues

	Electronic Mail with Sendmail

	Vulnerabilities
	Server topologies
	Email encryption
	Access control and STARTTLS
	Anti-spam mechanisms

	Postfix

	Vulnerabilities
	Security and Postfix design
	Configuring SASL/TLS

	FTP

	Vulnerabilities
	The FTP protocol and FTP servers
	Logging
	Anonymous FTP
	Access control

	Apache security

	Vulnerabilities
	Access control
	Authentication: files, passwords, Kerberos
	Security implications of common configuration options
	CGI security
	Server side includes
	suEXEC

	Intrusion Detection and Recovery

	Intrusion risks
	Security policy
	Detecting possible intrusions
	Monitoring network traffic and open ports
	Detecting modified files
	Investigating and verifying detected intrusions
	Recovering from, reporting, and documenting intrusions