Day one

Introduction
Security Manager Concepts

• Define Security Manager terms
• Describe Security Manager architecture components
• Explain Security Manager communications

Server Administration

• List Security Manager daemons and describe their functionality
• Describe Security Manager directory structure and files
• Describe HA functionality and options
• Use daemon commands to validate process operations

Domains and Administrators

• Explain domain and sub-domains
• Explain role-based administration
• Configure subdomains and custom administrator roles
• Configure administration authentication options

Adding Devices

• Describe why/how to add a device to a domain
• List and describe methods to add devices
• Add devices to domain

Abstractions: Objects and Templates

• Explain the concept of objects
• List different types of objects available in Security Manager
• Configure commonly-used objects
• List the benefits of using templates
• List elements that should not be configured via templates
• Create and apply templates
• Work with template overrides

Day Two

Policies

• Describe components of a Security Manager policy
• Create policies for firewall and IDP devices
• Discuss best practices for policy import/merge/management

Managing Devices

• Manage configurations between Security Manager and managed devices
• Perform routine device management tasks

• Logging and Reporting

• Discuss the logging and reporting capabilities of Security Manager
• Create custom log views
• Export log data for use in external reporting systems
• Use the Log Investigator to summarize attack information
• Run and customize the built in reports
• Use Action Manager

Statstical Report Server

• Describe the SRS architecture
• Configure admin console to communicate with the GUI Server and Device Server
• Set up users and user groups
• Set up devices and device groups
• Use the Web UI to generate reports
• Manage the database

VPNs

• Describe Policy-based and Route-based VPNs
• Describe Security Manager VPN Concepts
• Describe 2 methods for configuring VPNs within Security Manager

This course assumes that students have successfully attended the CJFV course or have equivalent experience with NetScreen's ScreenOS. Specifically, students need to be familiar with configuration of:

• Zones and Interfaces
• Virtual routers and inter-VR routing
• Policies
• Address Translation
• VPNs