SUSE Linux Security Training Class

Lesson 1: General Considerations and Definition of Terms

Create a Security Concept
Understand Frequently Used Terms

Lesson 2: Host Security

Limit Physical Access to Server Systems
Partitioning and File System Security
Limit the Installed Software Packages
Understand the Linux User Authentication
Configure Security Settings With YaST
Stay Informed about Security Issues
Apply Security Updates
Test and Document the Configuration
Use Logging and Accounting

Lesson 3: Cryptography: Basics and Practical Application

Cryptography Basics
Create a Certification Authority (CA) and Issue Certificates with CLI Tools
Use YaST to Create a Certification Authority (CA) and Issue Certificates
GNU Privacy Guard (GPG)

Lesson 4: Network Security

Understand Services and Protocols
Secure Access with TCP Wrapper
Use SSL to Secure a Service
Secure Clients

Lesson 5: General Firewall Design

Understand Firewall Concepts and Purpose
Describe Components of Firewalls
Understand Advantages and Disadvantages of the Setups

Lesson 6: Packet Filters

Understand Packet Filters
Understand iptables Basics
Understand iptables Advanced Features
Understand Network Address Translation

Lesson 7: Application-Level Gateways

Describe Application-Level Gateways
Configure and Use Squid
Configure and Use Dante
Configure and Use rinetd

Lesson 8: Virtual Private Networks

VPN and IPSec Basics
Configure and Establish an IPSec Connection Using the Command Line
Configure IPSec Using YaST
Understand Packet Filtering of VPN Traffic

Lesson 9: Intrusion Detection and Incident Response

Log Files and Their Evaluation.
Host-Based Intrusion Detection
Network-Based Intrusion Detection
Incident Response

Lesson 10: LifeFire Exercise

Set Up the Application-Level Gateway
Set Up the Screening Router
Set Up a Web Server in the DMZ
Set Up the Mail Server in the LAN
Set Up the VPN Gateway