Certified SonicWALL Security Administrator (CSSA I)

Course Overview

In Module one of the CSSA Instructor-led series, emphasis is on gaining familiarity with the most basic SonicWALL security environments, using the SonicOS Standard firmware on TZ170 appliances. Students will be introduced to network modes, product registration, NAT configuration, User Level Authentication, Proxy Relay and Routing, basic VPN configurations and layered security services.

This module is intended for students not already familiar with basic SonicOS security, or for those who require experience using SonicOS Standard firmware. Labs for this class are based on SonicOS 3.1 Standard for TZ170.

Audience

Those persons tasked with the support, installation, deployment or administration of SonicWALL products, including but not limited to System Administrators, Security staff, Firewall Administrators, Network Engineers, Pre-Sales Engineers, System Engineers, Reseller Support, Installation Consultants

Skills Gained

Upon completing this training course, participants should be able to:

• Install SonicWALL Firewall Appliances within a network
• Configure Network Access Rules, working with Zones, Objects, and Groups
• Configure VPN Solutions
• Configure routing options and QoS
• Configure and Test Load Balancing and Failover
• Install and Configure SonicWALL Layered Security Services, including Content Filtering, Antivirus, and Intrusion
• Prevention
• Configure and interpret logs and reports
• Perform basic administrative tasks and troubleshooting

• All students should have a basic knowledge of networking concepts including network topologies and an understanding of the OSI model of networking protocol stacks. Familiarity with Microsoft Windows Networking is helpful.
• SonicWALL recommends that attendees have an understanding of TCP/IP, network addressing, subnet masks, and Network Address Translation, as well as knowledge of basic router concepts. Familiarity with Virtual Private Networking and IPSec functionality would also be helpful.
• Students are assumed to have a basic conceptual knowledge of firewalls and their role within a network.
• Students MUST complete the SonicWALL Technical e*Training courses prior to attending instructor-led courses. The Technical e*Training courses are: Securing Networks with SonicOS and Virtual Private Networking with SonicWALL and Securing SonicWALL Wireless Networks.
• Students who do not meet course prerequisites may have difficulty completing classroom labs

Course Outline

Note: The Standard Security Fundamentals course has been designed as an introduction to the essentials of SonicWALL internetworking. Labs in this course are more basic, allowing for greater discussion of underlying networking concepts.

Security Overview

• Network Security Definitions, Risks, and Techniques

Product & Services Review

• Evolving Issues in Network Security
• SonicWALL PRO Series
• SonicWALL TZ 170 Family
• SonicWALL Distributed Wireless
• SonicOS Standard and Enhanced
• SonicWALL Security Upgrades

Configuring the Firewall

• Initial Configuration (Lab)
• MySonicWALL.com - Licensing and Service Delivery
• Licensing and Registration (Lab)
• Configuring DHCP Server (Lab)
• Logs and Reports

Extending Firewall Functionality with Rules

• Extending Firewall Functionality with Rules (Lab)
• User-level Authentication (Lab)
• Remote Management Rules (Lab)

Extending the Network Functionality

• Network Address Translation
• Configuring Servers on the DMZ (Lab)

SonicWALL VPN Configuration

• Defining Security Associations
• Create a Manual Key Tunnel (Lab)
• Create an IKE Main Mode Tunnel (Lab)
• Create an IKE Aggressive Mode Tunnel (Lab)

Designing SonicWALL VPN Networks

• Create a hub and Spoke VPN (Lab)
• Working with DHCP over VPN
• Extended VPN Features
• Applying NAT on the VPN Tunnel (Lab)

Global VPN Client

• Installing the Global VPN Client (Lab)
• Global VPN Settings
• Group VPN Policy (Lab)
• Client Provisioning (Lab)

Extending the Firewall Functionality with Security Services

• Antivirus
• Content Filter Services (Lab)
• Viewpoint Reporting Service (Demo)

Follow On Courses

PWW0142 (CSSA2), PWW0143 (CSSA3), PWW0144 (CSGM)

Certified SonicWALL Security Administrator (CSSA I) / SON-1