Month 5 – Network Security

 

Month 5 – Network Security

TopicWhat I Will DiscussToolWhat We Use the Tool ForPracticalTheory AssessmentPractical Assessment
Introduction to Network SecurityWhat network security is, why it is important, common network threats, defense strategies.Cisco Packet TracerTo simulate secure computer networks.Build a basic secure network topology.Define network security and explain its importance.Build and explain a secure network topology.
FirewallsTypes of firewalls, firewall rules, inbound/outbound traffic, packet filtering.Windows Defender FirewallTo control and filter network traffic entering and leaving a computer.Create inbound and outbound firewall rules.Explain how firewalls protect networks.Configure firewall rules correctly.
pfSense FirewallFirewall interfaces, NAT, firewall rules, web interface, basic configuration.pfSenseTo create and manage enterprise-grade firewalls.Install pfSense in a virtual machine and configure basic rules.Explain the features of pfSense.Configure pfSense to allow and block selected traffic.
Virtual Private Network (VPN)VPN concepts, encryption, remote access, site-to-site VPNs, VPN protocols.OpenVPNTo create secure encrypted connections over the Internet.Configure a basic VPN connection.Explain how a VPN protects user privacy.Successfully establish a VPN connection.
Wi-Fi SecurityWireless security, WPA2/WPA3, SSID, guest networks, wireless attacks.Wireless RouterTo secure wireless networks.Change the Wi-Fi password, enable WPA2/WPA3, and disable WPS if available.Explain wireless security best practices.Secure a wireless network successfully.
Intrusion Detection Systems (IDS)IDS concepts, signature-based vs anomaly-based detection, alerts.SnortTo detect suspicious network activities.Install Snort and monitor network traffic.Explain the purpose of an IDS.Detect and explain suspicious network events.
Intrusion Prevention Systems (IPS)IPS concepts, prevention techniques, IDS vs IPS.SnortTo automatically detect and block malicious network traffic.Configure Snort to block selected malicious traffic in a lab.Compare IDS and IPS.Demonstrate IPS blocking capabilities in a controlled environment.
Network MonitoringMonitoring network performance, bandwidth, suspicious traffic, troubleshooting.WiresharkTo capture and analyze network packets.Capture packets and identify common protocols.Explain why network monitoring is important.Capture and analyze packets successfully.
Secure Network DesignSecure network architecture, segmentation, DMZ, least privilege.Cisco Packet TracerTo design secure business networks.Design a segmented office network.Explain the importance of network segmentation.Build a segmented network in Packet Tracer.
Network Security Best PracticesPassword policies, firmware updates, backups, monitoring, physical security.Windows 11, Router Administration InterfaceTo implement security best practices.Perform a security audit of a small network.List network security best practices.Complete a network security checklist and explain the findings.

End-of-Month Project

Project Title

Secure a Small Business Network

Objectives

  • Design a secure office network.

  • Configure a firewall.

  • Secure Wi-Fi with WPA2/WPA3.

  • Configure a VPN for remote access.

  • Monitor network traffic using Wireshark.

  • Document the security controls implemented.

Tools

  • Cisco Packet Tracer

  • Windows Defender Firewall

  • pfSense

  • Wireshark

  • OpenVPN

  • Wireless Router


Real-Life Projects

Project 1

Secure a Home or Small Office Network

  • Change the router's default administrator password.

  • Update the router firmware.

  • Enable WPA2/WPA3 encryption.

  • Disable WPS if available.

  • Create a guest Wi-Fi network.

  • Document the changes and explain why they improve security.

Project 2

Perform a Basic Network Security Audit

  • Review firewall settings.

  • Check connected devices.

  • Verify Wi-Fi security.

  • Identify weak passwords or outdated firmware.

  • Produce a security audit report with recommendations.


End-of-Month Assessment

Theory Assessment (30%)

  • 20 Multiple Choice Questions

  • 10 Short Answer Questions

  • Firewall and VPN scenarios

  • Network security case study

Practical Assessment (40%)

Students must:

  • Build a secure network in Cisco Packet Tracer.

  • Configure Windows Defender Firewall rules.

  • Install and configure pfSense in a lab.

  • Establish a VPN connection.

  • Secure a wireless network.

  • Capture and analyze packets using Wireshark.

  • Explain findings from a network capture.

Project Assessment (20%)

  • Secure network design

  • Correct firewall and VPN configuration

  • Network monitoring results

  • Quality of documentation

Class Participation (10%)

  • Attendance

  • Lab participation

  • Homework

  • Group discussions

  • Practical demonstrations

Comments

Popular posts from this blog

Nobigdeal Academy Cybersecurity Diploma Programme (12 Months)

Month 8 – Security Operations Center (SOC) & Incident Response (Blue Team)

Month 11 – Programming & Automation for Cybersecurity