Microsoft Ninjitsu: Black Belt Edition
Overview
This "Developed for Blackhat" training is the only one of its kind, and is an absolute must for anyone responsible for securing Microsoft installations. This course combines the most popular aspects of Tim Mullen's "Microsoft Ninjitsu and ISA Ninjistu" training sessions into an intense two day training that runs the gamut of securing Microsoft deployments from infrastructure applications of IPSec and Group Policy to the secure publication of SQL data into your DMZ and the secure provision external services via authentication perimeter DMZ segmentation. Quite simply, it is The Best Damn Microsoft training ever. Led by industry experts, this class will cover security aspects of Active Directory, Exchange, SQL Server, IIS, as well as ISA Server in the building of secure DMZ structures and Remote Access models. If you deploy Microsoft technologies, this is the training you've been looking for.
Who Should Attend
Anyone who takes part in the process of building, designing, supporting, troubleshooting, or administering Microsoft infrastructures, extranets, and Internet deployments of Microsoft products will get measurable value out of this class. Firewall administrators, system engineers, system administrators, and management consultants alike will benefit from the concepts, techniques, tools, and technical saturation into MSFT technologies that this course provides. Attendants will leave with tangible, applicable, real-world tools and techniques that they can immediately apply to their networks thus increasing their value to their organization and the security community.
What You Will Learn
Windows Infrastructure Deployment:
- Windows Server 2003 (R2) security overview
- Security Configuration Wizard
- Host Hardening (RRAS Basic Firewall/ICS)
- Infrastructure design and Group Policy
- Client Security (XP and Vista)
- Leveraging Vista within the domain
- General configuration tips and tricks
- Exchange Server 2003 security techniques/owa
- IPSec Policies
- Authentication mechanisms
- SQL 2005 configuration and security
- IIS 6.0 configuration and security
Leveraging ISA Server:
- Supported ISA Client Types and Configuration Options
- Base ISA Installation and Configuration
- Creating Rules and Defining Protocols
- Monitoring and Logging
- Troubleshooting and Maintenance
- Secure Publishing
- Secure VPN/RRAS configurations
- Secure wireless deployments
- DMZ topologies and deployment
- Authenticated perimeter network topologies
- ISA Xtreame: Least Privilege Intranet Firewall Segments
What to Bring
This is a "lecture-style" training presentation combined with the advent of "Remote Dog and Pony Show" server access to illustrate real, live, in-production server and DMZ configurations currently deployed on active business networks, in addition to standard presentation materials. As such, there are no hardware requirements for attendees. However, we recommend that you bring your own wireless capable laptop system pre-configured with XP and/or Vista with your choice of virtual machine environments so that you can participate in in-class configurations changes. Internet access will be available, but only once you have proven yourself worthy for us to create the firewall rules needed to let you out. You should come ready to learn, and ready to participate in a typically fast-paced course with an open mind and a willingness to think differently. Some level of social skills coupled with a sense of humor is a definite plus.
