See how Insoft Services is responding to COVID-19

Forcepoint NGFW System Engineer Course

X

Contact Us

We would love to hear from you. Please complete this form to pre-book or request further information about our delivery options.

Subscribe

I'd like to receive emails with the latest updates and promotions from Insoft.

Data Protection & Privacy

I hereby allow Insoft Ltd. to contact me on this topic. Further, I authorise Insoft Ltd. processing, using collecting and storing my personal data for the purpose of these activities. All your data will be protected and secured as outlined in our privacy policy.


Forcepoint NGFW System Engineer Course
5 days  (Instructor Led Online)  |  NGFW

Course Details

The Forcepoint NGFW System Engineer course combines five sessions where you will learn how to install, configure, administer, support and understand how Forcepoint NGFW fits into the security ecosystem. Through instruction, demonstrations, and hands-on lab practice exercises, you will understand the requirements and recommendations to successfully deploy Forcepoint NGFW in a variety of network environments. You will then develop expertise in topics that include, but are not limited to, clustering the NGFW, creating security rules and policies, integrating the NGFW with other Forcepoint technologies, inbound and outbound traffic management, under-standing multi-link technology, configuring VPNs, traffic deep inspection, and controlling endpoint activity with the Endpoint Context Agent.

 

See other Forcepoint courses

Objectives

  • Describe the fundamentals of NGFW
  • Detail the Security Management Center (SMC)capabilities
  • Plan and deploy the SMC
  • Configure and deploy a single firewall
  • Configure and deploy a firewall cluster
  • Configure policies for distributed firewall management
  • Configure security policies and access control
  • Configure and utilize multiple internet connections
  • Define Policy-based and Route-based VPNs
  • Manage users and authentication
  • Create a Mobile VPN
  • Monitor user and endpoint activity
  • Perform traffic inspection and malware detection
  • Create custom network applications
  • Configure TLS decryption
  • Integrate the NGFW with Forcepoint cloud solutions

Outline

SESSION 1

Module 1: System Architecture Overview

  • Articulate the NGFW System Architecture
  • Understand how to size a firewall and management environment
  • Understand Management and Log Server high availability
  • Become familiar with upgrading Management Server, Log Server, and engines
  • Articulate the Forcepoint NGFW license model

Module 2: Firewall/VPN Role and Single Firewall Deployment

  • Describe basic network defence strategies
  • Define the capabilities and key features of the NGFW
  • Understand and learn the process of defining and deploy a single firewall•Identify additional features of the NGFW

Module 3: Routing and Anti-spoofing

  • Configure static routing
  • Describe additional special routing capabilities of the NGFW
  • Configure Policy-Based routing•Summarize the origin and function of Anti-spoofing

Module 4: NGFW Policies

  • Describe different NGFW policy types
  • Define NGFW policy templates and policy structure
  • Identify the anatomy of a security policy and the objects used in policies
  • Employ NGFW interface options•Detail the process of policy installation and activation

SESSION 2

Module 5: Distributed System Configuration

  • Describe system communication in a distributed firewall environment
  • Identify locations and contact addresses in distributed systems
  • Describe system communication between management and engines
  • Configure Network Address Translation (NAT)
  • Analyze the of exchanging data between management and other security devices

Module 6: Firewall/VPN Role and Clustering Technology

  • Describe the firewall clustering architecture and theory
  • Configure a firewall cluster in the SMC (management)
  • Deploy a firewall appliance (physical and virtual)

Module 7: MSSP and Virtual Contexts

  • Describe the SMC Domain Architecture
  • Detail the function of the Web Portal Server
  • Define Virtual Contexts
  • Relate Master Engines and Virtual Engines
  • Relate clustering and performance
  • Review a configuration and deployment example of an MSSP architecture

SESSION 3

Module 8: Outbound Multi-Link Technology

  • Describe Outbound Traffic Management and its capabilities
  • Explain ISP link selection•Classify when to use a particular link selection method
  • Configure Outbound Multi-Link

Module 9: Site-to-Site VPNs

  • Define Forcepoint NGFW VPN capabilities
  • Define Forcepoint NGFW VPN terminology
  • Identify supported VPN topologies•Relate Multi-Link and VPNs
  • Configure a Policy-Based VPN
  • Investigate Route-Based VPNs and when to use them
  • Test VPN-related tools in the SMC
  • Design VPN Hub configuration

Module 10: Active Directory Integration

  • Define network user management
  • Integrate Active Directory with the SMC (management)
  • Categorize the role of NPS, RADIUS, and TACAC+ in the authentication process
  • Deploy Forcepoint User Identification
  • Configure and deploy the Endpoint Context Agent
  • Monitor network users

Module 11: VPN Client

  • Describe Mobile VPN connections
  • Distinguish IPSec and SSL VPN tunnelling
  • Configure an NGFW engine for Mobile VPN connections
  • Configure the VPN Client for an endpoint
  • Demonstrate tools for Mobile VPN troubleshooting

SESSION 4

Module 12: Traffic Inspection

  • Review connection control and the role of Deep Inspection
  • Differentiate between Services, Protocol Agents, and Proxy Modules
  • Configure a Sidewinder Proxy service
  • Establish Network Application Identification
  • Differentiate Network Applications and Client Applications

Module 13: Inspection Policies

  • Relate firewall and inspection policies
  • Illustrate the anatomy of Inspection Policies
  • Differentiate the predefined Inspection Policy templates
  • Define the concept of Situations•Define the function of the Inspection Rules tree
  • Fine-tune inspection policies
  • Analyze the role and function of Inspection Exception rules
  • Analyze the use and function of Blacklisting

Module 14: Malware Detection and File Filtering

  • Explain theprocess of Malware Detection
  • Illustrate the anatomy of a File Filtering Policy
  • Define the process of using File Reputation services
  • Configure built-in Anti-Malware scanning
  • Describe the role of Advance Malware Detection

SESSION 5

Module 15: NGFW Inspection Techniques

  • Define techniques used by the NGFW to identify threats
  • Detail the traffic inspection process
  • Explain the role of Advanced Evasion Techniques and the process of traffic normalization
  • Describe misuse detection with Fingerprints
  • Describe concept of Situations and their role in traffic inspection
  • Analyze Regular Expression syntax
  • Review examples of fingerprints

Module 16: TLS Inspection

  • Articulate the purpose of TLS inspection
  • Describe TLS inspection exceptions
  • Define the process of Server and Client-Side TLS inspection
  • Configure the TLS inspection

Module 17: NGFW in Layer 2 Roles and Multi-Layer Deployment

  • Identify NGFW Operating Roles
  • Define key features of the IPS and Layer 2 firewall roles
  • Understand the difference between the Firewall and IPS
  • Deploy an IPS and a Layer 2 firewall•Configure and deploy a multi-layer NGFW
  • Analyze the role of High Availability in multi-layer deployments

Module 18: Forcepoint Integration

  • Configure integration with Forcepoint Web Gateway
  • Detail how to integrate with Forcepoint Advanced Malware Detection
  • Describe Forcepoint CASB•Review the Malware Detection process
  • Understand information exchange using Syslog or other SIEM solutions

Module 19: Troubleshooting

  • Detail the NGFW packet inspection process
  • Review the troubleshooting process and learn troubleshooting tips
  • Define the role of sgInfo in troubleshooting
  • Explore how to troubleshooting with logs
  • Understand how to troubleshoot a VPN
  • Analyze the role of monitoring in troubleshooting
  • Troubleshoot the NGFW engine

Target Audience

  • End-User/Customers: System Administrators, Network Security Administrators, Network Engineers, IT staff
  • Channel Partners: Consultants, System Architects, Integrators and Planners who help customers with Forcepoint NGFW implementations

Prerequisites

  • Completion of the Forcepoint NGFW Administrator Course and certification.
  • General understanding of routing and firewall functionality