Tel: 0845 521 7217

Training Handbook

Exclusive Networks Ltd, Alresford House, Mill Lane, Alton, GU34 2QJ

Tel: 0845 521 7217www.exclusive-networks.co.uk

Page 2





Training Handbook



Page 3



Training Handbook



Exclusive Networks offers the highest standard of technical education on products and solutions in its portfolio.Exclusive Networks offers the highest standard of technical education on products and solutions in its portfolio. All courses are delivered by vendor accredited trainers with real world experience and practical insight, providing attendees with tangible capability as well as study book theory. Courses are designed to equip engineers with the skills needed to understand, configure, support, troubleshoot and manage products in their care. Knowledge transfer through the training programme helps both business partners and their customers become more effective in supporting and/or managing solutions. Exclusive Networks’ high levels of accreditation and training credentials speak for themselves, through authorised training endorsements from the vendors in Exclusive Networks’ product portfolio.

Exclusive Networks UK operates authorised training centres for:

Aerohive Fortinet Gemalto Infoblox Palo Alto Networks Proofpoint.

Accredited training can be provided in accordance with the vendor courseware either from Exclusive Networks’ training suites, at the customer’s premises or a suitable location for all parties. Alternatively, bespoke training courses using selected material from the vendor courseware can be provided where necessary. Both accredited training and bespoke training include instructor-led training and hands-on labs. Knowledge transfer sessions are also available which provide instruction and demonstration of customer selected topics.*

All of Exclusive Networks’ trainers adopt a ‘hands-on’ approach, which means they teach course content with real-world practical experience, rather than simply facilitate how to achieve accreditation.

*Knowledge transfer sessions do not include courseware or hands-on labs.



Page 4

Training Handbook



Great insight into how to configure and troubleshoot different aspects of Aerohive (APs and HiveManager)

Description

The Aerohive Certified Wireless Administrator (ACWA) course combines instructor-led training and interactive labs to build a working knowledge of configuration and administration of Aerohive’s cooperative control WLAN architecture. Administration fundamentals such as configuration of secure wireless networks for employees and guests, deployment optimisation, device monitoring and troubleshooting build a solid understanding of Aerohive WLAN.

Target Audience

The ACWA course is intended for networking professionals who are responsible for installing, configuring, troubleshooting and maintaining an Aerohive wireless LAN network. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Aerohive Certified Wireless Administrator (ACWA)

Very good. I have learned a lot from this course.

AerohiveAerohive



Page 5

Training Handbook



Course Outline

Day 1

Predictive modelling and WLAN design HiveManager overview Mobility solutions and Unified Policy Management HiveManager initial configuration Topology Maps: Real-time monitoring of AP coverage Scenario: Create a secure access network for employees Scenario: Create a secure access network for legacy devices using PPSK

Day 2

Secure WLAN Guest Management Scenario: Create a guest secure WLAN with unique user credentials Device specific settings Deployment optimisation Device monitoring and troubleshooting Firmware updates Bring Your Own Device (BYOD) Auto-provisioning Cooperative Control Protocols

Pre-requisite(s)

There are no pre-requisites for attending the ACWA however it is suggested that the following is completed before attending:

Completion of Enterprise Mode Web-Based Training Modules

Additionally CWNA® vendor-neutral WLAN training and certification is beneficial.

Product Version: HiveOS 6.6r1

Certification

After attending an ACWA course, all students can register to take an online ACWA exam.

The ACWA course is the recommended training for the ACWA exam to become an Aerohive Certified Wireless Administrator, which is a first-level certification that validates knowledge and understanding about Aerohive’s WLAN cooperative control architecture.

Aerohive Certified Wireless Administrator (ACWA)

Aerohive



Page 6

Training Handbook



Description

The Aerohive Certified Wireless Professional (ACWP) course builds upon the knowledge gained in the Aerohive Certified Wireless Administrator course. The course combines instructor-led training and interactive labs and covers an overview of 802.1X/EAP, integrating Aerohive with external RADIUS, deploying Aerohive devices as RADIUS proxies, integrating with LDAP, IPSec VPNs, roaming and troubleshooting.

Target Audience

The ACWP course is intended for networking professionals experienced with Aerohive who are looking to learn WLAN design, integration, advanced configuration and troubleshooting of Aerohive wireless LAN networks. This includes network managers, administrators, installers, systems engineers, sales engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Aerohive Certified Wireless Professional (ACWP)

The instructor showed great knowledge and provided practical examples of the possible issues helpful for troubleshooting.

Great course, very well run, instructor had advanced knowledge of the subject and was happy to answer question from beginners in the class and also advanced users.

Aerohive



Page 7

Training Handbook



Course Outline

Day 1

Overview of Aerohive Cooperative Control Architecture 802.1X/EAP architecture overview Aerohive devices and external RADIUS servers RADIUS attributes for user profile assignment 802.1X troubleshooting with client monitor Aerohive devices as RADIUS proxies Aerohive devices as a RADIUS server with LDAP integration LDAP credential caching LDAP attributes for user profile assignment

Day 2

Layer 2 and Layer 3 IPsec VPNs Secure Guest management Guest access with User Manager and PPSK credentials Device Classification Layer 3 roaming configuration and troubleshooting GRE tunnelling Mobile Device Management (MDM)

Pre-requisite(s)

Prior attendance of a first-level Aerohive training class Aerohive Certified Wireless Administrator (ACWA).

Additionally CWNA® and CWSP® vendor-neutral WLAN training and certification is beneficial.


Certification

After attending an ACWP course, all students can register to take an online ACWP exam.

The ACWP course is the recommended training for the ACWP exam to become an Aerohive Certified Wireless Professional, which is the second-level certification that validates knowledge and understanding about Aerohive’s advanced configuration, troubleshooting, and WLAN design and integration.

Aerohive Certified Wireless Professional (ACWP)

Aerohive



Page 8

Training Handbook



Description

The Aerohive Certified Network Professional (ACNP) course combines instructor-led training and interactive labs to build a working knowledge of the configuration of Aerohive SR series switch and branch routing solutions. The course covers an overview of Aerohive Switching and Routing platforms, spanning tree, device templates, aggregate channels, Power over Ethernet, router templates, device classification, layer 3 VPN with HiveOS Virtual Appliances and routing with branch routers.

Target Audience

The ACNP course is intended for networking professionals who are already experienced with Aerohive and are responsible for installing, configuring, troubleshooting and maintaining an Aerohive wireless LAN network. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Aerohive Certified Network Professional (ACNP)

Aerohive



Page 9

Training Handbook



Course Outline

Day 1

Overview of Aerohive Switching and Routing platforms Unified Network Policy Management Spanning Tree Device Templates Port Types: 802.1Q, Access, Secure Access, Phone/Data Aggregate Channels PoE Switch as a RADIUS server with LDAP integration LDAP attributes for user profile assignment

Day 2

VLAN to Network mapping Router Templates Parent Networks and Branch Subnets Device Classification Layer 3 VPN with HiveOS Virtual Appliances VPN Troubleshooting Policy Based Routing Router Firewall Cookie Cutter Branch Routing

Pre-requisite(s)

Attendance of an Aerohive Certified Wireless Administrator (ACWA) class is required.

CWNA® and CWSP® vendor-neutral WLAN training and certification is beneficial.


Certification

After attending an ACNP course, all students can register to take an online ACNP exam.

The ACNP course is recommended training for the ACNP exam to become an Aerohive Certified Network Professional, a certification that validates knowledge and understanding about Aerohive wired networking solutions. Students planning on taking the ACNP exam are recommended to have a good understanding of spanning tree before taking the exam.

Aerohive Certified Network Professional (ACNP)

Aerohive



Page 10

Training Handbook



Description

The Aerohive Certified Troubleshooting Professional (ACTP) course combines instructor-led training and interactive labs to build a working knowledge of troubleshooting Aerohive solutions. The course covers an overview of the troubleshooting methodology, and troubleshooting of various topics such as 802.1X, HiveManager certificate authority, integrating Aerohive devices as RADIUS servers with LDAP, layer 2 IPSec VPNs, guest management, self-registration portal and layer 3 roaming.

Target Audience

The ACTP course is intended for networking professionals who are already experienced with Aerohive and are looking to learn how to troubleshoot Aerohive products. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Aerohive Certified Troubleshooting Professional (ACTP)

Aerohive



Page 11

Training Handbook



Course Outline

Day 1

Troubleshooting Methodology 802.1X with external RADIUS RADIUS attributes for user profile assignment Using Client Monitor to troubleshoot 802.1X/EAP HiveManager Certificate Authority Aerohive devices as RADIUS servers that integrate with LDAP

Day 2

Layer 2 IPsec VPN client and VPN servers Secure guest management with PPSK and User Manager Self-registration guest management using PPSK Device classification Layer 3 roaming configuration and troubleshooting Guest Management using GRE tunnelling to a DMZ

Pre-requisite(s)

Attendance of an Aerohive Certified Wireless Administrator (ACWA) class is required.

CWNA® and CWSP® vendor-neutral WLAN training and certification is beneficial.


Certification

After attending an ACTP course, all students can register to take an online ACTP exam.

The ACTP course is recommended training for the ACTP exam to become an Aerohive Certified Troubleshooting Professional, a certification that validates knowledge and understanding about the troubleshooting of Aerohive networking solutions

Aerohive Certified Troubleshooting Professional (ACTP)

Aerohive



Page 12

Training Handbook



Description

The FortiGate I course combines instructor-led training and interactive labs to build a working knowledge of basic configuration and administration of FortiGate appliances’ most commonly used features. Administrative fundamentals such as firewall policies, user authentication, VPNs and UTM features will provide a solid understanding of how to integrate and maintain basic network security using FortiGate appliances.

Target Audience

The FortiGate I course is intended for anyone who is responsible for the day-to-day management of a FortiGate appliance. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Anyone planning on taking the FortiGate II course is strongly recommended to complete the FortiGate I course first.

Duration: 2 days

Course

FortiGate I

Really enjoyed this first part, tutor is spot on with the knowledge of the hardware and how to train.

The instructor was very clear in his explanations of the FortiGate. He is very knowledgeable of the product and made the course enjoyable.

Fortinet



Page 13

Training Handbook



Course Outline

Day 1

Introduction to Fortinet UTM Logging and Monitoring Firewall Policies NAT Firewall Authentication

Day 2

SSL VPN Basic IPsec VPN Explicit Proxy Antivirus Web Filtering Application Control

Pre-requisite(s)

TCP/IP network experience

Basic understanding of firewall concepts.

Product Version: FortiGate 5.4.1

Certification

The FortiGate I course combined with the FortiGate II course is highly recommended to prepare for the NSE 4 exam to achieve FortiGate Network Security Professional (FCNSP) status.

FortiGate I

Very good course, a good introduction to the features and configuration of FortiGate appliances

Fortinet



Page 14

Training Handbook



Description

The FortiGate II course combines instructor-led training and interactive labs to build a working knowledge of advanced FortiGate networking and security features. This course follows the FortiGate I course. Topics that are covered include features commonly used in complex or larger enterprise/MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, advanced IPsec VPN, IPS, SSO, certificates, data leak prevention, diagnostics and fine-tuning performance.

Target Audience

The FortiGate II course is intended for networking and security professionals who are involved in the design, implementation and administration of a security infrastructure using FortiGate appliances. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Anyone planning on taking the FortiGate II course is strongly recommended to complete the FortiGate I course before this course.

Duration: 3 days

Course

FortiGate II

FortiGate 2 was very indepth course, really enjoyable course.

The instructor was very knowledgeable and draws on own experience to help inform and teach the course very well.

Fortinet



Page 15

Training Handbook



FortiGate II

Course Outline

Day 1

Routing Virtual Networking Transparent Mode High Availability

Day 2

Advanced IPsec VPN Intrusion Prevention Systems Fortinet Single Sign On Certificate Operations

Day 3

Data Leak Prevention Diagnostics Hardware Acceleration IPv6

Pre-requisite(s)

Familiarity with all topics presented in the prerequisite FortiGate I course Knowledge of OSI layers Good knowledge of firewalling concepts in an IPv4 network

Product Version: FortiGate 5.4.1

Certification

The FortiGate II course combined with FortiGate I course is highly recommended to prepare for the NSE 4 exam to achieve FortiGate Network Security Professional (FCNSP) status.

Great course, increased knowledge of product that will greatly assist me in my day to day support and maintenance of our firewall.

Fortinet



Page 16

Training Handbook



Description

The FortiGate III course combines instructor-led training and interactive labs to build a working knowledge of how to isolate and fix the most common issues in networks with FortiGate. Topics that are covered include resolving FortiGate misconfigurations, monitoring traffic passing through FortiGate, optimising FortiGate memory usage, FortiGate diagnostic tools, monitoring statistics for user traffic, troubleshooting FortiGate (conserve mode, high CPU, policies, session helpers, user authentication IPSec, FortiGuard, UTM inspection, exploit web proxy, routing, and high availability), configuring BGP and OSPF, and improving FortiGate performance.

Target Audience

The FortiGate III course is intended for networking and security professionals who are involved in the administration and support of a security infrastructure using FortiGate appliances. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Anyone planning on taking the FortiGate III course is strongly recommended to complete the FortiGate I and FortiGate II courses before this course.

Duration: 3 days

Course

FortiGate III

Fortinet



Page 17

Training Handbook



Course Outline

Day 1

Troubleshooting Concepts System Resources Network Troubleshooting Firewall Policies Firewall Authentication

Day 2

FSSO IPSec VPN Security Profiles Explicit Web Proxy

Day 3

Operation Modes External BGP OSPF HA

Pre-requisite(s)

Advanced knowledge of all topics presented in the FortiGate I and FortiGate II courses. Knowledge of network protocols Knowledge of network security concepts

Product Version: FortiGate 5.2

Certification

The FortiGate III course is the recommended training to prepare for the NSE 7 certification exam.

FortiGate III

Fortinet



Page 18

Training Handbook



Description

The FortiAnalyzer course combines instructor-led training and interactive labs to build a solid understanding of how to integrate FortiAnalyzer into your network awareness infrastructure. It will provide working knowledge of setting up a FortiAnalyzer, registering supported devices and securing communications between the FortiAnalyzer and devices, managing logs and archiving, and configuring both predefined and customised reports. Topics that are covered include key features and concepts of FortiAnalyzer, ADOMs, RAID, dist quotas, backing up and restoring log data, content archiving, SQL queries and datasets, designing datasets, charts and custom reports, and generating reports by schedule or on-demand.

Target Audience

The FortiAnalyzer course is intended for networking and security professionals who are involved in the day-to-day management of a FortiAnalyzer appliance and FortiGate security information. This includes network managers, and administrators, however installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals can also benefit from this course.

Duration: 1 day

Course

FortiAnalyzer

Fortinet



Page 19

Training Handbook



FortiAnalyzer

Course Outline

Day 1

Introduction to FortiAnalyzer Configuration & Administration Device Registration Logs & Archives Reports

Pre-requisite(s)

Familiarity with all topics presented in the FortiGate I and FortiGate II courses Knowledge of the SQL ‘select’ syntax is helpful

Product Version: FortiAnalyzer 5.2

Certification

The FortiAnalyzer course combined with the FortiManager course are highly recommended to prepare for the NSE 5 certification exam to achieve NSE 5 – Security Analyst certification.

Fortinet



Page 20

Training Handbook



Description

The FortiManager course combines instructor-led training and interactive labs to build a solid understanding of the fundamentals of using FortiManager for centralised network administration of many FortiGate devices. Topics that are covered include deployment strategies using single or multiple ADOMs, workspaces and workflow mode, provisioning templates and scripts, policy packages, dynamic objects, centralised IPSec VPN management, revision history, shared objects, and using the FortiManager as a local FortiGuard Distribution server for managed firewalls.

Target Audience

The FortiManager course is intended for networking and security professionals who are responsible for day-to-day management of many FortiGate devices via the FortiManager platform. This includes network managers, and administrators, however installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals can also benefit from this course.

Duration: 1 day

Course

FortiManager

Fortinet



Page 21

Training Handbook



FortiManager

Course Outline

Day 1

Introduction to FortiManager System Settings Device Manager Policy & Objects Additional System Operations

Pre-requisite(s)

Knowledge of firewalling concepts in an IPv4 network Familiarity with all topics in FortiGate I and FortiGate II Basic understanding of network management system

Product Version: FortiManager 5.2

Certification

The FortiManager course combined with the FortiAnalyzer course are highly recommended to prepare for the NSE 5 certification exam to achieve NSE 5 – Security Analyst certification.

Fortinet



Page 22

Training Handbook



Description

This two-day, instructor-led course will teach you how to implement and configure Gigamon devices and services. Through this course you will learn the key features of Gigamon devices and the value of properly incorporating a visibility fabric into your network monitoring system.

With increasing demands for agility and automation in the IT infrastructure and with ever-changing threat patterns in the network traffic, there is a critical need to automatically detect, react, and respond to these threats while also integrating visibility into IT operations management. This course will teach you how to use Gigamon’s technology to gain visibility into your network traffic to prevent these threats.

Target Audience

System Administrators

Systems Engineers

Duration: 2 day

Course

Gigamon Visibility FabricTM Overview & Configuration Class

Gigamon

The Smart Route To Visibility™



Page 23

Training Handbook



Gigamon Visibility FabricTM Overview & Configuration Class

Course Outline

Describe the visibility fabric architecture Describe the Gigamon products used to create a visibility fabric Define Visibility fabric features and applicable usage Deploy a Gigamon virtual H-family node Deploy Gigamon Fabric Manager

Perform initial setup configuration of H-Family appliance

Configure Gigamon Fabric Manager to manage H-Series Node

Describe clustering of Gigamon Nodes

Describe packet distribution in the visibility fabric

Create Flow Maps in Fabric Manager Describe the scope of Gigamon GigaSMART features Perform configuration of select GigaSMART features Implement GigaVUE VM in a VMware environment

Pre-requisite(s)

Basic understanding of networking concepts Familiarity with network monitoring tools

Gigamon




Page 24

Training Handbook



Description

This two-day, hands-on course will teach you advanced implementation and configuration of Gigamon devices and services. Through this course you will learn the key features of Gigamon devices and the value of properly incorporating a Visibility Fabric into your network monitoring system. This course is the follow-on to Gigamon® Visibility Fabric™ Overview and Configuration (GVFOC).

Learn how to leverage the advanced processing capabilities of the GigaSMART engine to summarize and generate NetFlow statistics from incoming traffic streams. Offloading NetFlow Generation to the out-of-band Gigamon Visibility Fabric eliminates the risk of expending expensive production network resources in generating these analytics.

With increasing demands for agility and automation in the IT infrastructure and with ever-changing threat patterns in the network traffic, there is a critical need to automatically detect, react, and respond to these threats while also integrating visibility into IT operations management. This course will teach you how to use Gigamon’s technology to gain visibility into your network traffic to prevent these threats.

This course includes extensive lab exercises that will show you how to use most of the capabilities or features available from any H Series node as well as introduce you to the CLI and GUI interfaces. These capabilities and features are present without any additional licenses or special line cards. Theses labs emulate typical working environment where you will add, remove, and modify configurations rather than simply create them.

Target Audience

System Administrators

Systems Engineers

Duration: 2 day

Course

Gigamon Visibility FabricTM Advanced Implementation Class

Gigamon




Page 25

Training Handbook



Gigamon Visibility FabricTM Advanced Implementation Class

Course Outline

Configure Flow Mapping using GigaVUE-FM Fabric Manager Describe the scope of GigaSMART features Perform configuration of advanced GigaSMART features

Implement and configure advanced GigaSMART services and applications Use GigaSecure to monitor network traffic Implement GigaVUE-VM in a VMware environment

Pre-requisite(s)

Basic understanding of networking concepts Familiarity with network monitoring tools Gigamon® Visibility Fabric™ Overview and Configuration (GVFOC)

Gigamon




Page 26



Description

The Core DDI Basic Configuration (CDBC) combines instructor-led training and interactive labs to build a working knowledge of how to configure and manage Infoblox network appliances running Infoblox NIOS operating system. Network fundamentals such as forward and reverse mapping zones, network and zone creation, DHCP ranges, fixed addresses, Grid management, system and protocol level monitoring and system level management provide a solid understanding of how to integrate and maintain Infoblox’s Core DDI product.

The CDBC can be taken as a bundle with the Core DDI Intermediate Configuration course (CDIC).

Target Audience

The CDBC course is a basic-level course intended for anyone responsible for the implementation, administration, operations, maintenance and day-to-day management of an Infoblox Core DDI product. This includes system administrators, network administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Anyone planning on taking the Core DDI Intermediate Configuration course (CDIC) and Core DDI Advanced Troubleshooting course (CDAT) are required to complete this course before attending those courses.

Duration: 3 days

Course

Core DDI Basic Configuration (CDBC)

Infoblox

Dedicated, well knowledge, instructors have deep understanding of technologies and products

Very insightful and able to answer ‘real life’ questions which is rare in my experience of trainers



Page 27

Training Handbook



Course Outline

Day 1

Infoblox Grid Setting up Grid Grid user interface Managing members High availability

Day 2

Working with DHCP User accounts Scheduled tasks Working with DNS IPAM DNS Firewall*

Day 3

Data Import MS management* Network discovery* Reporting and analytics*

*Additional content over Infoblox course

Pre-requisite(s)

Attendees should have either of the following:

A working knowledge of DNS and DHCP Completed the Core DDI Fundamentals e-learning course.

Product Version: NIOS 7.3

Certification

The CDBC course includes an exam voucher for the Core DDI Basic Configuration (CDBC) exam for the Core DDI Basic Configuration (CDBC) accreditation. The CDBC accreditation certifies essential knowledge of network service protocols and configuration of Infoblox Core DDI product. The CDBC exam can be taken during the course.

The CDBC accreditation is required for attending the Core DDI Intermediate Class (CDIC).

Core DDI Basic Configuration (CDBC)

Infoblox



Page 28



Description

The Core DDI Intermediate Configuration (CDIC) combines instructor-led training and interactive labs to develop an in-depth working knowledge of configuring and managing Infoblox network appliances running Infoblox NIOS operating system. The course will cover advanced networking topics such as TSIG and GSSTSIG, implementation of DHCP custom options and failover, dynamic DNS and how it functions with DNS/DHCP, remote authentication, DNS views and scheduling NIOS upgrades.

This course follows the Infoblox Core DDI Basic Configuration (CDBC). CDIC can be taken as a bundle with the Core DDI Basic Configuration course (CDBC).

Target Audience

The CDIC course is an intermediate level course intended for anyone responsible for the implementation, administration, operations, maintenance and day-to-day management of an Infoblox Core DDI product. This includes system administrators, network administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Anyone planning on taking the Core DDI Advanced Troubleshooting course (CDAT) is required to complete this course and the Core DDI Basic Configuration course (CDBC) before attending the CDAT course.

Duration: 2 days

Course

Core DDI Intermediate Configuration (CDIC)

Infoblox

I like the content above and beyond course material that Russell had delivered

Excellent knowledge



Page 29

Training Handbook



Course Outline

Day 1

Administration and remote authentication Configuring DNS Anycast Understanding and Implementing DNS Security Extensions (DNSSEC) Infoblox software updates DNS views

Day 2

DHCP Custom Vendor Option Spaces Configuring DHCP Failover Dynamic DNS, how it functions with DNS/DHCP and DHCP Option 81 TSIG and GSS-TSIG Reporting & Analytics*

*Additional content over Infoblox course

Pre-requisite(s)

Core DDI Basic Configuration accreditation status

Product Version: 7.3

Certification

The CDIC course includes an exam voucher for the Core DDI Intermediate Configuration (CDIC) exam to gain the Core DDI Intermediate Configuration (CDIC) accreditation. The CDIC accreditation certifies advanced knowledge of network service protocols and configuration of Infoblox Core DDI product. The CDIC exam can be taken during the course.

The CDIC accreditation is required for attending the Core DDI Advanced Troubleshooting Class (CDAT).

Core DDI Intermediate Configuration (CDIC)

Infoblox

Brilliant, knew topics inside and out very helpful



Page 30



Description

The Core DDI Advanced Troubleshooting course (CDAT) combines instructor-led training and interactive labs to provide knowledge of troubleshooting of Infoblox Core DDI products. The course covers the troubleshooting of high availability pairs and Grids, studying common root cause analysis and resolution strategies, and techniques for network connectivity and DNS and DHCP issues. The course uses a case-study approach to apply your learnings to real-life failure scenarios and recovery methods.

Target Audience

The CDAT course is an advanced-level course intended for anyone who is responsible for the day-to-day management of an Infoblox Core DDI product or who will be offering technical support for NIOS appliances. This includes system administrators, network administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals. This course is required for anyone offering support for Infoblox devices.

Duration: 2 days

Course

Core DDI Advanced Troubleshooting (CDAT)

Infoblox

Absolutely brilliant

Great! As always



Page 31

Training Handbook



Course Outline

Day 1

Understanding Infoblox support processes and tools Troubleshooting network connectivity Understanding the Infoblox support bundle Building & troubleshooting high availability (HA) pairs Building & troubleshooting Grid

Day 2

Understanding Grid issues and behaviour DNS troubleshooting strategies and finding and fixing common DNS issues

DHCP troubleshooting strategies and finding and fixing common DHCP issues

Applying course learnings to real-life scenarios and recovery methods.

Pre-requisite(s) Six months experience supporting Infoblox Core DDI products Core DDI Basic Configuration accreditation status Core DDI Intermediate Configuration accreditation status Understanding of DNS and DHCP

Product Version: NIOS 7.3

Certification

The CDAT course includes an exam voucher for the Core DDI Advanced Troubleshooting exam to gain the Core DDI Advanced Troubleshooting accreditation. The CDAT accreditation certifies the ability to diagnose and resolve support issues for Infoblox solutions. The CDAT: exam can be taken during the course.

Core DDI Advanced Troubleshooting (CDAT)

Infoblox

Very knowledge and patient

Top draw – as per



Page 32

Training Handbook



Description

The Network Automation Configuration and Administration Class (NCAC) combines instructor-led training and interactive labs to build a working knowledge of how to configure, use and manage Infoblox network appliances running Network Automation. The class covers the automated collection of network device configuration information over SNMP and SSH and how the collected information can be used for configuration and change management, network policy management (building from an extensive built-in list of established rules and policies) and automated compliance checks and reports, as well as the general configuration and reporting features available in the Network Automation product.

Target Audience

The NCAC course is intended for anyone who is responsible for the day-to-day management of an Infoblox Network Automation appliance. This includes network administrators, network engineers and operations staff with no experience using Infoblox Network Automation.

Duration: 2 days

Course

Infoblox Network Automation Basic Configuration (NABC)

Infoblox



Page 33

Training Handbook



Course Outline

Day 1

Overview Settings Network Policies Device configuration management Network explorer

Day 2

Switch Port Management Dashboards Network Analysis Reporting

Pre-requisite(s)

A general understanding of TCP/IP protocols, including SNMP and IP networking. The general concepts of fault, configuration, change and performance management.

Product Version: Network Automation 6.8

Certification

The NCAC course includes an exam voucher for the CINA: Network Automation Configuration & Administration Exam for the Certified Infoblox Network Automation Administrator (CINA) certification. The CINA certification certifies essential knowledge of configuration and change management using the network automation appliance. The CINA: Network Automation Configuration & Administration Exam can be taken during the course.

Infoblox Network Automation Basic Configuration (NABC)

Infoblox



Page 34

Training Handbook



Description

Panorama 8.0: Manage Multiple Firewalls course combines instructor-led training and interactive labs to build a working knowledge of configuration and management of Palo Alto Networks® Panorama Management Server. Administrative fundamentals such as device groups, templates, collection groups, reporting and best practices are covered to provide a solid understanding of deploying and managing Palo Alto Networks® Next-Generation firewalls from a Panorama Management Server.

Target Audience

The Panorama Essentials course is intended for anyone who is responsible for day-to-day management, installation, or support of a Palo Alto Networks Panorama Management Server. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Panorama 8.0: Manage Multiple Firewalls (EDU-221)

Interested course, enlightened me on topics where my understanding was lacking. All round very good.

The instructor was very knowledgeable with an engaging manner. Good skills

Palo Alto



Page 35

Training Handbook



Course Outline

Day 1

Overview Initial Configuration Templates Device Groups

Day 2

Administration Logging and Reporting Log Collectors Business Continuity

Pre-requisite(s)

Completion of Firewall 8.0: Install, Configure, and Manage course or equivalent experience. Basic familiarity with networking concepts including routing, switching, and IP addressing. Familiarity with basic port-based security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.

Product Version: PANOS 7.1

Certification

The Panorama 8.0: Manage Multiple Firewalls course combined with Firewall 8.0 Install, Configure and Manage, and Firewall 8.0: Configure Extended Features courses are recommended training for anyone planning on taking the Palo Alto Networks Certified Network Security Engineer 7 (PCNSE7) certification exam.

Panorama 8.0: Manage Multiple Firewalls (EDU-221)

Palo Alto



Page 36

Training Handbook



Description

The Firewall 8.0: Debug and Troubleshoot course is the next-level follow-on course to Palo Alto Networks® Firewall 8.0: Install, Configure and Manage, and Palo Alto Networks® Firewall 8.0: Configure Extended Features courses. The course combines instructor-led training and interactive labs to expand on the topics covered on the previous courses with hands-on troubleshooting labs.

Target Audience

The Firewall 8.0: Debug and Troubleshoot course is intended for anyone who is responsible for the support of a Palo Alto Networks Next-Generation firewall. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services (presales and post sales) engineers and technical support professionals.

Duration: 3 days

Course

Firewall 8.0: Debug and Troubleshoot (EDU-311)

Excellent - learnt valuable skills directly relevant to my role.

The instructor well-informed, clear and concise instruction. Helpful and informed with proper explanation and real world examples. Did not get stumped by any query which is not often the case on courses.

Palo Alto



Page 37

Training Handbook



Course Outline

Day 1

Troubleshooting Methodology Platform Comparisons When Troubleshooting Flow Logic Administration Troubleshooting Layer 3 Troubleshooting Policy Troubleshooting User-ID™ Troubleshooting VPN Troubleshooting GlobalProtect™ Troubleshooting Performance Troubleshooting Break/Fix Labs

Day 2

Break/Fix Labs

Day 3

Break/Fix Labs

Pre-requisite(s)

The following is required when attending the course: Completion of Firewall 8.0: Install, Configure, and Manage course or equivalent experience. Basic familiarity with networking concepts including routing, switching, IP addressing, and basic port-based security concepts Familiarity with the PAN-OS CLI.


Certification

There is currently no certification relating to the Firewall 8.0: Debug and Troubleshoot course. However it can be beneficial for anyone planning on taking the Palo Alto Networks Certified Network Security Engineer (PCNSE7) certification exam.

Firewall 8.0: Debug and Troubleshoot (EDU-311)

Palo Alto



Page 38

Training Handbook



Description

The Firewall 8.0 Essentials: Configuration and Management course combines instructor-led training and interactive labs to build a working knowledge of how to install, configure and manage Palo Alto Networks Next-Generation firewalls. The course covers the configuration and management of GlobalProtect to extend firewall protection to external systems outside the network perimeter. This course includes configuration and management of firewall high availability, and the monitoring of network traffic via the interactive web interface and firewall reports.

Target Audience

The Configuration and Management course is intended for anyone who anyone who is responsible for the day-to-day management, installation, or support of a Palo Alto Networks Next-Generation firewall. This includes Security Administrators, Security Engineers, Security Operations Specialists, Security Analysts, Networks Engineers and Support Staff.

Anyone planning to attend the Panorama 8.0: Manage Multiple Firewalls (EDU-221), and Firewall 8.0: Debug and Troubleshoot (EDU-311), are strongly recommended to complete the Firewall 8.0: Configuration and Management course before attending those courses.

Duration: 5 days

Course

Firewall 8.0 Essentials: Configuration and Management (EDU-210)

Palo Alto

Was well structured and was very helpful for enhancing our exposure to the Palo Alto Networks firewall.

Good, friendly and easy to talk to.



Page 39

Training Handbook



Course Outline

Day 1

Platforms and Architecture Initial Configuration Interface Configuration

Day 4

User-ID™ GlobalProtect™ Site-to-Site VPNs

Day 2

Security and NAT Policies App-ID™ Basic Content-ID™

Day 5

Monitoring and Reporting Active/Passive High Availability What’s Next

Day 3

URL Filtering Decryption WildFire™

Pre-requisite(s)

The following is required when attending the course: Basic familiarity with networking concepts including routing, switching, and IP addressing Familiarity with basic security concepts Experience with other security technologies (IPS, proxy, and content filtering) is a plus.


Certification

The Firewall 8.0 Essentials: Configuration and Management course is the recommended training for taking the Accredited Configuration Engineer (ACE) exam.

Additionally this course combined with the Panorama 8.0: Manage Multiple Firewalls course are recommended training for anyone planning on taking the Palo Alto Networks Certified Network Security Engineer 8 (PCNSE8) certification exam.

Firewall 8.0 Essentials: Configuration and Management (EDU-210)

Palo Alto



Page 40

Training Handbook



Description

The Traps: Install, Configure and Manage course combines instructor-led training and interactive labs to build a working knowledge of how Traps protects against exploits and malware-driven attacks. The course covers the installation and configuration of Endpoint Security Manager (ESM) and Traps endpoint components, building rules, enabling and disabling process protections, and integrating Traps with Palo Alto Networks® WildFire™.

Target Audience

The Traps: Install, Configure and Manage course is intended for anyone who is responsible for day-to-day management, installation, or support of a Palo Alto Networks® Traps™ Advanced Endpoint Protection solution. This includes network managers, systems administrators, installers, sales engineers, system engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Traps 3.4: Install, Configure and Manage (EDU-281)

Palo Alto



Page 41

Training Handbook



Course Outline

Day 1

Traps Overview Installing Traps Malicious Software Overview Overview of Consoles Traps Protection against Exploits

Day 2

Traps Protection against Malware Managing Traps Traps Forensics Capabilities Basic Traps Troubleshooting

Pre-requisite(s)

The following is required when attending the course: Windows system administration skills Familiarity with the enterprise security concepts

Some basic familiarity with memory management is recommended but not required.

Product Version: Palo Alto Networks Traps Advanced Endpoint Protection 3.4

Certification

The Traps: Install, Configure and Manage course can be used to help prepare Palo Alto Networks partners for the PSE: Endpoint Associate exam.

Traps 3.4: Install, Configure and Manage (EDU-281)

Palo Alto



Page 42

Training Handbook



Description

The Traps: Deploy and Optimise course combines instructor-led training and interactive labs to build a working knowledge of how to deploy Traps in large-scale or complex configurations and optimise its configuration. It includes topics such as automated distribution of Traps endpoint software, preparing master images for VDI deployment, building multi-ESM deployments, design and implementation of customised policies, testing Traps with exploits created using Metasploit and examining prevention dumps with WinDbg.

Target Audience

The Traps: Deploy and Optimise course is intended for anyone is responsible for the installation, support and advanced management of a Palo Alto Networks® Traps™ Advanced Endpoint Protection solution. This includes forensics teams, installers, sales engineers, system engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 2 days

Course

Traps 3.4: Deploy and Optimise (EDU-285)

Palo Alto



Page 43

Training Handbook



Course Outline

Day 1

Deploying Traps Scaling Traps Deployments Up Optimising Traps

Day 2

Advanced Forensics Advanced Troubleshooting

Pre-requisite(s)

The following is required when attending the course: Completion of Traps: Install, Configure and Manage course. For Palo Alto Networks employees and partner SEs only, completion of the PSE: Endpoint Associate training can be an alternative to the Traps: Install, Configure, and Manage course. Windows system administration skills Familiarity with the enterprise security concepts

Some basic familiarity with memory management is recommended but not required.

Product Version: Palo Alto Networks Traps Advanced Endpoint Protection 3.4

Certification

The Traps: Deploy and Optimise course can be used to help prepare Palo Alto Networks partners for the PSE: Endpoint Professional exam.

Traps 3.4: Deploy and Optimise (EDU-285)

Palo Alto



Page 44

Training Handbook



Description

The Proofpoint Certified Administrator – Email Protection and Information Protection course covers the protection tools that are available as part of the Proofpoint Protection Server (PPS) Suite including the newest module, Targeted Attack Protection. It also includes topics such as master-agent architecture, installation and deployment, best deployment options for your company’s needs, filtering, describe how rules and policies work to protect your company, creation of routes, rules and policies, use of the Management UI to perform various administrative tasks and URL defence. This course is a combination of instructor led training and interactive labs designed to give attendees hands on experience with the PPS management UI through the implementation of real world scenarios.

Target Audience

This training is recommended for system administrators, network managers, and information security managers responsible for ongoing management of Proofpoint Protection Server (PPS) solutions (Email Protection, Targeted Attack Protection (TAP) & Information Protection).

Duration: 4 days

Course

Proofpoint Certified Administrator (PCA) – Email Protection and Information Protection

Proofpoint



Page 45

Training Handbook



Course Outline

Day 1 and 2 Email Architecture PPS Deployment Initial Configuration * Policy Routes Rule Creation End User Management Email Firewall Module Anti-Virus Module Spam Detection Module End User Services Email Authentication Targeted Attack Protection

Day 3 and 4

Email Encryption Email DLP (Regulatory Compliance) Email Firewall Rules Integration Digital Loss Prevention (DLP) Digital Assets Secure Share Data Discover (Content Control) End User Services Email Authentication

* Note to Resellers. In the ‘Initial Configuration’ module of day 1, you will build a functional PPS instance from an image. This is hands on exercise that is only available to Partners/Resellers to garner exposure to all aspects of implementation of a PPS. Pre-requisite(s)

The following two prerequisite courses should be completed online via Proofpoint University before registering and attending this course:

Successful completion of Proofpoint Accredited Administrator (PAA) – Email Protection WBT Successful completion of Proofpoint Accredited Administrator (PAA) – Information Protection WBT

Product Version: Proofpoint Protection Server 8.0

Certification

Successful completion of this course provides the Proofpoint Certified Administrator – Email Protection certification.

Proofpoint Certified Administrator (PCA) – Email Protection and Information Protection

Proofpoint



Page 46

Training Handbook



Description

The SAS cloud certification course combines instructor-led training and discussion with interactive lab sessions to provide the knowledge that is necessary for managing SafeNet Authentication Services in a cloud environment and practical understanding of how to deploy SAS cloud services.

Target Audience

The SAS cloud certification course is recommended for anyone is responsible for ongoing management, installation or support of a SafeNet Authentication Service cloud portal. This includes network managers, information security managers, systems administrators, installers, sales engineers, system engineers, professional services engineers (presales and post sales) and technical support professionals.

Duration: 3 days

Course

Safenet Authentication Service (SAS) Cloud Certification Course

Safenet



Page 47

Training Handbook



Course Outline

Day 1

Solution Technical Overview Supported Authenticators On-board and provisioning Role Management

Day 2

User Synchronisation and Management

Authentication Agents SAML Integration Self-Service Portal

Day 3

Alerts and Reporting Tokens Policies and Managements Pre-authentication Rules Customisation and Branding

Pre-requisite(s)

There are no pre-requisites for attending the course, however some basic knowledge of the following is beneficial: Two factor authentication / Multi factor authentication Tokens SAML RADIUS authentication Windows authentication

Product Version: SafeNet Authentication Service Cloud

Certification

The SAS cloud certification course is the recommended training for SAS cloud certification engineer certification. Attendance of the course provides automatic enrolment to the certification exam.

Safenet Authentication Service (SAS) Cloud Certification Course

Safenet



Page 48



Training Handbook

Terms & ConditionsAs this engagement specifically requires Professional Services staff to be present on-site or remotely during a specified window, Exclusive Networks will make the appropriate arrangements in advance in agreement with the customer to deliver this service.

Any planning changes at the initiative of the Customer must be notified in advance or the service will be deemed delivered in the following terms:

In hours work cancellation with less than 2 business days’ notice will be charged in full.

Out of hours work cancellation with less than 3 calendar days’ notice will be charged in full.

In any case any travel and expenses costs incurred will be invoiced.

More information on our training services please contact us by emailing [email protected]



Page 49

Training Handbook



Exclusive Networks Ltd, Alresford House, Mill Lane, Alton, GU34 2QJTel: 0845 521 7217

Documents

Tel: 0845 521 7217