Network security overview and labs .pptx

security overview

1. Network security Firewall Essentials Fortinet

2. Agenda Understanding the security Threats TCP/IP model What is the firewall Types of firewall Deployment modes of firewall

3. Passive Attacks Eavesdropping : Listen to packets from other parties = Sniffing Traffic Analysis : Learn about network from observing traffic patterns Footprinting : Test to determine software installed on system = Network Mapping B Packet A C Bob Jennie Carl

4. Some Active Attacks Denial of Service: Message did not make it; or service could not run Masquerading or Spoofing : The actual sender is not the claimed sender Message Modification : The message was modified in transmission Packet Replay : A past packet is transmitted again in order to gain access or otherwise cause damage

5. Maintaining network security Security Threats Viruses and worms Trojan horses SPAMs Phishing Packet sniffers Passwords attacks Zombie computers DoS / DDoS

6. Man-in-the-Middle Attack 10.1.1.1 10.1.1.2 10.1.1.3 (1) Login (3) Password (2) Login (4) Password

7. Exploit/Maintain Access Backdoor Trojan Horse Spyware/Adware Bots User-Level Rootkit Kernel-Level Rootkit Replaces system executables: e.g. Login, ls, du Replaces OS kernel: e.g. process or file control to hide Control system: system commands, log keystrokes, pswd Useful utility actually creates a backdoor. Slave forwards/performs commands; spreads, list email addrs , DOS attacks Spyware: Collect info: keystroke logger, collect credit card #s, AdWare : insert ads, filter search results

8. Distributed Denial of Service Zombies Victim Attacker Handler Can barrage a victim server with requests, causing the network to fail to respond to anyone Russia Bulgaria United States Zombies

9. Filters/ACL Route Filter : Verifies sources and destination of IP addresses Packet Filter : Scans headers of packets and discards if ruleset failed (e.g., Firewall or router) Content Filter : Scans contents of packets and discards if ruleset failed (e.g., Intrusion Prevention System or firewall) The good, the bad & the ugly… Filter The bad & the ugly The Good

10. Protecting the Network

11. Maintaining network security IDS/IPS Network IDS=NIDS Examines packets for attacks Can find worms, viruses, org-defined attacks Warns administrator of attack IPS=Packets are routed through IPS Host IDS=HIDS Examines actions or resources for attacks Recognize unusual or inappropriate behavior E.g., Detect modification or deletion of special files Router Firewall IDS

12. Maintaining network security IDS

13. What is a firewall?

14. What is software firewall & hardware firewall?

15. Router External DNS IDS Web Server E-Commerce VPN Server IDS Protected Internal Network Zone IDS Database/File Servers Internet Firewall Separate Zones Demilitarized Zone With Proxy Interface Screened Host The router serves as a screen for the Firewall, preventing Denial of Service attacks to the Firewall. Screening Device Firewall

16. Types of firewall

17. Personal firewall

18. What is network firewall ?

19. Packet Filter Firewall Web Request Ping Request FTP request Email Connect Request Web Response Telnet Request Email Response SSH Connect Request DNS Request Email Response Web Response Illegal Source IP Address Illegal Dest IP Address Microsoft NetBIOS Name Service

20. Packet filtering firewall

21. Proxy firewall

22. Statfull firewall

23. UTM (Unified Threat Management)

24. NGFW (Next Generation Firewall)

25. Deployment Mode

26. Wireshark tool Explnation Http sniffing Wireshark Lab

27. Pppoe server cisco How to configure a PPPoe Server and Client How to configure a PPPoe Server and Client using GNS3 (youtube.com)

28. Fortigate firewall Installing virtual firewall Configuring basic CLI configuration

29. Configuring interfaces CLI Config system interface Edit port1 Set mode static Set ip 192.168.1.1/24 Set alias LAN Set Allow access ssh https telnet fgfm ping End

30. Configuring pppoe interfaces Config system interface Set mode pppoe Set username admin Set password systel Set alias wan Set role wan End

31. Configuring dhcp server Config system dhcp server Config ip -range Edit 1 Set start ip 192.168.1.2 Set end ip 192.168.1.100 Next End Set default- gatway 192.168.1.1 Set netmask 255.255.255.0 set interface port 1 -------------------------- assign it to the LAN interface Show ---------------------------------------------- to verifie

32. Configuring static routes Config router static Edit 1 Set dst 0.0.0.0 0.0.0.0 Set device port 2 --------------------- assign the rout to the wan interface Set dynamic-gateway enable End

33. IPsec Day-07 | How to Configure IPSec VPN between Fortigate Firewall | Fortigate firewall for Beginners (youtube.com)

34. Policy to route internal network to wan or internet Edit 1 Set name “internet access” Set srcintf port 1 -------------------port 1 is configured as lan interface Set dstintf port 2 -------------------port 2 is wan interface Set srcaddr all Set distaddr all Set schedual always Set service all Set action accept Set nat enable End

35. Fortigate Lab

36. IPsec connection How to configure VPN connection between 2 firewalles