| Fast Facts |
| Course Number:
| RHS333 |
| Course Duration:
| 4 days | |
|
|
| Topic: |
 |
Deploying network services such as web, ftp, email, and file sharing based on Red Hat Linux
| Audience: |
|
System administrators
| Price: |
|
| UK | GBP | 1,599 * | | | EUR | 2.500 * |
* all prices excluding VAT
|
|
To have a sales rep contact you about
any of our Products and Services, click here:
|
|
|
| |
RHS333 - Red Hat Enterprise Security: Network Services
| Overview |
|
Red Hat Linux has gained considerable momentum as the operating
system of choice for deploying network services such as web, ftp,
email, and file sharing. Red Hat's RHCE curriculum provides training
in deploying these services and on the essential elements of securing
them.
| Goal: |
|
RHS333, Enterprise Security: Securing Network Services, goes beyond
the essential security coverage offered in the RHCE curriculum and
delves deeper into the security features, capabilities, and risks
associated with the most commonly-deployed services.
| Audience: |
|
The audience for this course includes System administrators,
consultants, and other IT professionals responsible for the planning,
implementation, and maintenance of network servers. While the emphasis
is on running these services on Red Hat Linux, and the content and labs
will assume its use, system administrators and others using proprietary
forms of Unix may also find many elements of this course relevant.
| Prerequisites |
|
RH253 Red Hat Linux Networking and Security Administration, or
RH300 RHCE Rapid Track Training and Certification Course, or
RHCE certification
or equivalent work experience is
required for this course. Course participants should already know the
essential elements of how to configure the services covered, as this
course will be focusing on more advanced topics from the outset.
| Course Objectives |
|
Among the topics covered in this four-day, hands-on course are the following:
- Securing BIND:
- Name server topology: public vs. private, DMZs, etc.
- Configuring appropriate recursion and fetching policies
- Using authentication keys
- Running BIND in a chrooted environment
- Improving NIS and NFS:
- Configurations to avoid
- Restricting accounts
- Securing LDAP:
- Configuring TLS authentication
- Restricting access to directory schema
- Locking Down Sendmail:
- Configuring access control
- Authentication configuration options, including TLS
- Implementing the Real-time Black Hole List and other
- anti-spam features
- Secure Email Alternatives: imaps and pop3s
- SSL-tunneled IMAP and POP3 mail
- Restricting FTP Access:
- Configuring restricted guest account
- Mastering host-based access controls:
- Advanced xinetd configuration
- Advanced tcp_wrappers configuration
- Securing Apache:
- Containing CGI risks
- Auditing PHP and scripts
- Controlling and monitoring hosted sites
- Using Kerberos Authentication:
- "Kerberizing" services
- Using Kerberos in heterogeneous environments
- The Secure Shell: OpenSSH
- Using public-private key pairs for authentication
- Remote administration using OpenSSH
- Port-forwarding
- Alternate authentication methods
- Database Security Issues
|
