Month 5 – Network Security
Month 5 – Network Security
| Topic | What I Will Discuss | Tool | What We Use the Tool For | Practical | Theory Assessment | Practical Assessment |
|---|---|---|---|---|---|---|
| Introduction to Network Security | What network security is, why it is important, common network threats, defense strategies. | Cisco Packet Tracer | To simulate secure computer networks. | Build a basic secure network topology. | Define network security and explain its importance. | Build and explain a secure network topology. |
| Firewalls | Types of firewalls, firewall rules, inbound/outbound traffic, packet filtering. | Windows Defender Firewall | To control and filter network traffic entering and leaving a computer. | Create inbound and outbound firewall rules. | Explain how firewalls protect networks. | Configure firewall rules correctly. |
| pfSense Firewall | Firewall interfaces, NAT, firewall rules, web interface, basic configuration. | pfSense | To create and manage enterprise-grade firewalls. | Install pfSense in a virtual machine and configure basic rules. | Explain the features of pfSense. | Configure pfSense to allow and block selected traffic. |
| Virtual Private Network (VPN) | VPN concepts, encryption, remote access, site-to-site VPNs, VPN protocols. | OpenVPN | To create secure encrypted connections over the Internet. | Configure a basic VPN connection. | Explain how a VPN protects user privacy. | Successfully establish a VPN connection. |
| Wi-Fi Security | Wireless security, WPA2/WPA3, SSID, guest networks, wireless attacks. | Wireless Router | To secure wireless networks. | Change the Wi-Fi password, enable WPA2/WPA3, and disable WPS if available. | Explain wireless security best practices. | Secure a wireless network successfully. |
| Intrusion Detection Systems (IDS) | IDS concepts, signature-based vs anomaly-based detection, alerts. | Snort | To detect suspicious network activities. | Install Snort and monitor network traffic. | Explain the purpose of an IDS. | Detect and explain suspicious network events. |
| Intrusion Prevention Systems (IPS) | IPS concepts, prevention techniques, IDS vs IPS. | Snort | To automatically detect and block malicious network traffic. | Configure Snort to block selected malicious traffic in a lab. | Compare IDS and IPS. | Demonstrate IPS blocking capabilities in a controlled environment. |
| Network Monitoring | Monitoring network performance, bandwidth, suspicious traffic, troubleshooting. | Wireshark | To capture and analyze network packets. | Capture packets and identify common protocols. | Explain why network monitoring is important. | Capture and analyze packets successfully. |
| Secure Network Design | Secure network architecture, segmentation, DMZ, least privilege. | Cisco Packet Tracer | To design secure business networks. | Design a segmented office network. | Explain the importance of network segmentation. | Build a segmented network in Packet Tracer. |
| Network Security Best Practices | Password policies, firmware updates, backups, monitoring, physical security. | Windows 11, Router Administration Interface | To implement security best practices. | Perform a security audit of a small network. | List network security best practices. | Complete a network security checklist and explain the findings. |
End-of-Month Project
Project Title
Secure a Small Business Network
Objectives
Design a secure office network.
Configure a firewall.
Secure Wi-Fi with WPA2/WPA3.
Configure a VPN for remote access.
Monitor network traffic using Wireshark.
Document the security controls implemented.
Tools
Cisco Packet Tracer
Windows Defender Firewall
pfSense
Wireshark
OpenVPN
Wireless Router
Real-Life Projects
Project 1
Secure a Home or Small Office Network
Change the router's default administrator password.
Update the router firmware.
Enable WPA2/WPA3 encryption.
Disable WPS if available.
Create a guest Wi-Fi network.
Document the changes and explain why they improve security.
Project 2
Perform a Basic Network Security Audit
Review firewall settings.
Check connected devices.
Verify Wi-Fi security.
Identify weak passwords or outdated firmware.
Produce a security audit report with recommendations.
End-of-Month Assessment
Theory Assessment (30%)
20 Multiple Choice Questions
10 Short Answer Questions
Firewall and VPN scenarios
Network security case study
Practical Assessment (40%)
Students must:
Build a secure network in Cisco Packet Tracer.
Configure Windows Defender Firewall rules.
Install and configure pfSense in a lab.
Establish a VPN connection.
Secure a wireless network.
Capture and analyze packets using Wireshark.
Explain findings from a network capture.
Project Assessment (20%)
Secure network design
Correct firewall and VPN configuration
Network monitoring results
Quality of documentation
Class Participation (10%)
Attendance
Lab participation
Homework
Group discussions
Practical demonstrations
Comments
Post a Comment