Suse Linux Enterprise Server 10 Security

Prerequisites:

A detailed understanding of the network protocols is essential for the design and configuration of firewalls. Additionally, the information found in SUSE Linux Enterprise Server 10 : Networking Services (Course 3074) is key to be able to perform effective security tasks.

Course Description:

This course focuses on various security-related aspects of SUSE Linux Enterprise Server 10 from a system administrator's perspective. Topics covered include, cryptography, aspects for consideration when developing a security policy, as well as the configuration of Novell AppArmor, packet filters, application level gateways, and VPNs using IPSec.

Students will gain hands-on experience on how to administer SUSE Linux Enterprise Server 10 on a broad range of topics from host security and network security to Novell AppArmor, packet filters, and VPNs.

This course is designed for experienced Linux system administrators who are familiar with networking services running on Linux, and who want to improve their skills in planning, designing and managing a secure SUSE Linux Enterprise Server 10 environment. It is also ideal for those students seeking the Novell Certified Linux Engineer 10 certification. If you are seeking the Novell Certified Linux Engineer qualification, you are required to complete the Novell Certified Linux Professional 10 certification first.

This course includes the following modules:

General Considerations and Definition of Terms

• Create a Security Concept
• Understand Frequently Used Terms

Host Security

• Limit Physical Access to Server Systems Partitioning and File System Security
• Limit the Installed Software Packages
• Configure Security Settings With YaST
• Stay Informed about Security Issues
• Apply Security Updates
• Test and Document the Configuration
• Use Logging and Accounting

Novell AppArmor

• Improve Application Security with AppArmor Create and Manage AppArmor Profiles
• Control AppArmor
• Monitor AppArmor

Cryptography

• Basics and Practical Application
• Create a Certification Authority (CA) and Issue Certificates With CLI Tool
• Use YaST to Create a Certification Authority (CA) and Issue Certificates GNU Privacy Guard (GPG)

Network Security

• Understand Services and Protocols
• Secure Access With TCP Wrapper
• Use SSL to Secure a Service
• Secure Clients

General Firewall Design

• Understand Firewall Concepts and Purpose Describe Components of Firewalls
• Understand Advantages and Disadvantages of Different Setups

Packet Filters

• Understand Packet Filters
• Understand iptables Basics
• Understand iptables Advanced Features Understand Network Address Translation

Application-Level Gateways

• Application-Level Gateway Basics
• Configure and Use Squid
• Configure and Use Dante
• Configure and Use rinetd

Virtual Private Networks

• VPN and IPSec Basics
• Configure and Establish an IPSec Connection
• Understand Packet Filtering of IPSec Traffic

Intrusion Detection and Incident Response

• Log Files and Their Evaluation Host-Based Intrusion Detection
• Network-Based Intrusion Detection, Incident Response

Live Fire Exercise

• Course Testing Information