Troubleshooting and Best Practice of Internet applications

Description

It is perfect to enhance their knowledge of Internet protocols in order to be more efficient in troubleshooting and securizing them.

Audience

This course is intended for system engineers

Requirements

This course requests a good understanding of TCP/IP protocol. We recommend you first take the course IP001 « Advanced knowledge of networks and related services » or have a similar level in addition of having a basic knowledge of Internet protocols.

Objectives

1. Understanding the main Internet applications like HTTP, FTP, and SMTP/POP3 mail.
2. Details of a troubleshooting methodology for Internet applications with an emphasis on some useful tools : How to troubleshoot HTTP web services and SMTP/POP3 mail services
3. Security models theory and details on function of the main security technologies such as: IP address translation (NAT/PAT), types and functions of firewallsSecured, VPN technologies with IPSec, VPN authentication problems, Usefulness and working of SSL

Program

Summary of IP001 – DNS module

- Summary of IP001 – DNS module

Chapter 3 : Understanding and troubleshooting HTTP, FTP, and Internet mail

- MIME encoding explained

- HTTP header, commands and authentication

- Specificities of FTP, command sets

- Internet Mail operation (SMTP/POP3), with details on SMTP

- Comparing POP3 and IMAP4

- Importance of DNS services, some rules and important tools

- Internet protocols troubleshooting (like HTTP and FTP)

- Methodology for troubleshooting Internet mail (SMTP/POP3)

- Understanding security holes of Internet protocols under consideration

- Comprehensive exercise on network traffic management : forecasting the network traffic generated by a workstation launching an Internet browser

Chapter 4 : Securing the communication with Internet applications

- NAT and PAT operation

- Application proxy and socks

- Protocol filtering, "statefull" condition

- Network protection with firewall and IDS

- Authentication mechanisms (CHAP, AAA, OTP, PKI, ...)

- Reminder of encryption techniques and protocols

- Operation and types of virtual private networks (VPN)

- Function and use of SSL

- Security perimeter designs with very simple rules