Information System Security Training in Almada

This instructor-led, live training in Almada (online or onsite) is aimed at beginner-level network administrators who wish to use FortiGate 1100E to manage and secure their network environments effectively.

By the end of this training, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led, live training in Almada (online or on-site) is designed for intermediate-level network administrators looking to manage and secure their networks using FortiGate firewalls.

Upon completion of this training, participants will be able to:

• Comprehend FortiGate features and functionalities, with a focus on those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures such as IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance purposes.

This instructor-led, live training in Almada (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Almada (online or onsite) is designed for security professionals who wish to learn how to use Cortex XDR to prevent and mitigate sophisticated attacks and threats.

By the end of this training, participants will be able to:

• Understand the architecture and components of Cortex XDR.
• Create and manage profiles for exploit and malware prevention.
• Analyze behavioral threats and monitor response actions.
• Perform basic Cortex app troubleshooting.

This instructor-led, live training in Almada (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations for enhanced reliability and performance.

By the end of this training, participants will be able to:

• Understand the features, specifications, and operating principles of the Fortigate 600E firewall.
• Perform the initial setup of the Fortigate 600E, including basic configuration tasks like setting up interfaces, routing, and initial firewall policies.
• Configure and manage advanced security features such as SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to protect against a variety of network threats.
• Troubleshoot common issues in HA setups and effectively manage HA environments.

This instructor-led, live training in Almada (online or onsite) targets security professionals eager to learn how to manage firewalls at scale.

By the conclusion of this training, participants will be able to:

• Design, configure, and manage the Panorama Firewall management server.
• Manage policies using device groups.
• Roll out network configurations to different firewalls.

This instructor-led, live training in Almada (online or onsite) is aimed at system administrators who wish to learn the fundamentals of software licensing, the key features of FlexNet, and how to implement and maintain software license management solutions.

By the end of this training, participants will be able to:

• Understand the fundamental concepts of software licensing.
• Manage core components and operation systems of FlexNet.
• Create various license models and types, generate license keys, and activate software licenses for end-users.
• Add, manage, and allocate licenses to end-users, monitor license usage, and ensure compliance.

This instructor-led, live training in Almada (online or onsite) is aimed at systems administrators who wish to learn how to use Zscaler to secure network connections for applications and cloud services.

By the end of this training, participants will be able to:

• Learn and understand the architecture security on Zscaler.
• Understand the value and baseline features of Zscaler advanced configurations.
• Use Zscaler to secure network connections for applications and cloud services.

This course delivers comprehensive cross-platform secure coding expertise by merging C/C++, Java, and web application security into a unified training programme. Participants will explore modern vulnerabilities, attack vectors, and secure development practices across diverse environments.

Delivered as an instructor-led live session (available online or on-site), this course is designed for developers at intermediate to advanced levels who aim to enhance their secure coding methodologies for both enterprise and web applications.

Upon completion of this training, participants will be able to:

• Apply secure coding principles within C/C++ and Java development environments.
• Identify and mitigate prevalent vulnerabilities, including buffer overflows, SQL injection, and cross-site scripting (XSS).
• Effectively implement and configure Java security services and APIs.
• Gain a deep understanding of the OWASP Top Ten and emerging risks, encompassing client-side security challenges.
• Utilise cryptography securely for data protection and secure communications.
• Analyse code for architectural weaknesses and implement defensive coding strategies.
• Keep abreast of recent vulnerabilities affecting platforms, frameworks, and libraries.

Course Format

• Interactive lectures and discussions.
• Hands-on secure coding laboratories and exploit demonstrations.
• Case studies and real-world vulnerability analysis.

Course Customisation Options

• To request a bespoke training session for this course, please contact us to arrange.

This three-day course provides an introduction to safeguarding C/C++ code against malicious actors who might exploit vulnerabilities related to memory management and input handling. The training focuses on the core principles of developing secure code.

Even seasoned programmers do not always master the security services provided by their development platforms, nor are they fully aware of the vulnerabilities relevant to their projects. This course is designed for developers working with both Java and PHP, equipping them with the essential skills needed to make their applications resilient against modern internet-based attacks.

The course walks through the levels of Java security architecture by addressing access control, authentication, authorization, secure communication, and various cryptographic functions. It also introduces various APIs that can be used to secure code in PHP, such as OpenSSL for cryptography or HTML Purifier for input validation. On the server side, best practices are provided for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself, with a special focus on client-side security through issues related to JavaScript, Ajax, and HTML5.

General web vulnerabilities are discussed using examples aligned with the OWASP Top Ten, illustrating various injection attacks, script injections, attacks against session handling, insecure direct object references, file upload issues, and many others. The course introduces Java- and PHP-specific language problems and issues arising from the runtime environment, grouped into standard vulnerability types such as missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues, and mobile code-related vulnerabilities.

Participants can experiment with the discussed APIs, tools, and the effects of configurations themselves. The introduction of vulnerabilities is supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct bugs and apply mitigation techniques, and introducing the use of various extensions and tools.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn about client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand the security concepts of web services
• Gain practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Receive sources and further readings on secure coding practices

Audience

Developers

Participants attending this course will

• Grasp the core concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Study client-side vulnerabilities and secure coding practices
• Acquire the ability to utilize various security features of the Java development environment
• Develop a practical understanding of cryptography
• Comprehend the security concepts underlying web services
• Understand the security solutions offered by Java EE
• Learn about typical coding mistakes and strategies to avoid them
• Gain insights into recent vulnerabilities within the Java framework
• Acquire practical knowledge on using security testing tools
• Access resources and further reading on secure coding practices

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply programming techniques at both the architecture and coding levels. This knowledge is essential for implementing desired security features, avoiding vulnerabilities, and limiting potential exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, manage remote procedure calls and sessions, and implement various functional alternatives. Through extensive hands-on exercises, participants will gain practical insights into these critical areas.

The discussion on vulnerabilities begins by examining common programming errors encountered when using .NET. The analysis of ASP.NET vulnerabilities further explores various environment settings and their impacts. Additionally, the course addresses ASP.NET-specific security challenges, including general web application security issues and specialized attack vectors such as ViewState manipulation and string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding practices
• Identify web vulnerabilities beyond the OWASP Top Ten and learn strategies to avoid them
• Utilize the various security features available in the .NET development environment
• Acquire practical experience with security testing tools
• Recognize typical coding mistakes and understand how to prevent them
• Stay informed about recent vulnerabilities affecting .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

For programmers of all experience levels, possessing a solid grasp of .NET and ASP.NET security features is not enough. It is crucial to develop a profound understanding of web-related vulnerabilities on both the server and client sides, along with the implications of various risks.

This course demonstrates general web-based vulnerabilities by showcasing relevant attacks, while explaining recommended coding techniques and mitigation methods within the context of ASP.NET. A particular emphasis is placed on client-side security, addressing the security challenges associated with JavaScript, Ajax, and HTML5.

The curriculum also covers the security architecture and components of the .NET framework, including code-based and role-based access control, permission declaration and checking mechanisms, and the transparency model. A concise introduction to the foundations of cryptography establishes a practical baseline for understanding the purpose and operation of various algorithms, paving the way for exploring the cryptographic features available in .NET.

The course addresses different security bugs by following well-established vulnerability categories. These include input validation, security features, error handling, time- and state-related issues, general code quality concerns, and a dedicated section on ASP.NET-specific vulnerabilities. These topics are rounded out with an overview of testing tools capable of automatically uncovering some of the vulnerabilities discussed.

Topics are delivered through practical exercises, allowing participants to experience the consequences of specific vulnerabilities, test mitigations, and explore the discussed APIs and tools firsthand.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Gain knowledge of client-side vulnerabilities and secure coding practices
• Learn to utilize various security features within the .NET development environment
• Develop a practical understanding of cryptography
• Receive insights into recent vulnerabilities affecting .NET and ASP.NET
• Acquire practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to prevent them
• Access resources and further readings on secure coding practices

Audience

Developers

This course introduces fundamental security concepts, providing an overview of vulnerabilities that transcend specific programming languages and platforms. It explains how to manage software security risks across all phases of the software development lifecycle. Rather than delving into intricate technical details, the course highlights the most prevalent and impactful vulnerabilities in various development technologies. It also outlines the challenges associated with security testing, offering techniques and tools to help identify existing issues within your code.

Participants attending this course will

• Grasp basic concepts of security, IT security, and secure coding
• Understand web vulnerabilities affecting both server and client sides
• Appreciate the serious consequences of improper buffer handling
• Stay informed about recent vulnerabilities in development environments and frameworks
• Learn about common coding errors and strategies to avoid them
• Comprehend security testing approaches and methodologies

Audience

Managers

This course equips PHP developers with essential skills to protect their applications against modern Internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to address various injection attacks, script injections, session handling flaws, insecure direct object references, file upload issues, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- or state-related problems. Specific examples include open_basedir circumvention, denial-of-service attacks via magic floats, and hash table collision attacks. In each case, participants will learn key techniques and functions to mitigate these risks.

A significant emphasis is placed on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are covered in the context of PHP configuration (php.ini), Apache, and general server settings. Additionally, the course provides an overview of security testing tools and techniques for developers and testers, including security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and configuration practices are reinforced with hands-on exercises. These demonstrate the impact of successful attacks, show how to implement mitigation strategies, and introduce the use of various extensions and tools.

Participants attending this course will

• Gain a solid understanding of security concepts, IT security, and secure coding principles
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand client-side vulnerabilities and adopt secure coding practices
• Develop a practical grasp of cryptography
• Learn to utilize various PHP security features effectively
• Identify common coding errors and understand how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical experience with security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

This comprehensive core training offers an in-depth look at secure software design, development, and testing through the lens of the Microsoft Secure Development Lifecycle (SDL). It begins with a level 100 overview of the fundamental building blocks of the SDL, followed by design techniques aimed at detecting and remedying flaws during the early stages of the development process.

Focusing on the development phase, the course provides an overview of common security-related programming bugs found in both managed and native code. The curriculum presents attack vectors associated with these vulnerabilities, alongside their corresponding mitigation techniques, all illustrated through numerous hands-on exercises that offer participants practical, live hacking experience. Following the introduction to various security testing methods, the effectiveness of different testing tools is demonstrated. Participants gain a clear understanding of how these tools operate through practical exercises, applying them to the vulnerable code examples discussed throughout the course.

Participants attending this course will

Understand the fundamental concepts of security, IT security, and secure coding

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle

Learn secure design and development practices

Learn about secure implementation principles

Understand security testing methodology

• Access sources and further reading materials on secure coding practices

Audience

Developers, Managers

Web Application Security is the discipline dedicated to safeguarding online applications against contemporary security threats and vulnerabilities, including those that are platform-agnostic and impact core application architecture and input handling.

This instructor-led, live training (available online or onsite) is designed for intermediate-level developers who wish to understand and apply secure coding techniques to mitigate web vulnerabilities and implement robust web application security.

By the end of this training, participants will be able to:

• Understand fundamental concepts of security, IT security, and secure coding.
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them.
• Learn about client-side vulnerabilities and secure coding practices.
• Gain a practical understanding of cryptography.
• Understand the security concepts of web services.
• Acquire practical knowledge in using security testing tools.
• Access sources and further readings on secure coding practices.

Format of the Course

• Interactive lecture and discussion.
• Ample exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training (available online or onsite) is aimed at technical professionals who wish to deploy and manage open source collaboration platforms that maintain data sovereignty while providing modern team communication capabilities.

By the end of this training, participants will be able to evaluate platforms, deploy self-hosted solutions, configure security and integrations, migrate from existing platforms, and establish operational procedures.

In this instructor-led, live course in Almada, participants will learn how to formulate an effective security strategy to address the challenges of DevOps security.

This instructor-led, live training in Almada (online or onsite) is aimed at security engineers and system administrators who wish to use FortiGate NGFW's advanced security-driven network systems to protect their organization from internal and external threats.

By the end of this training, participants will be able to:

• Install and configure the preferred FortiGate NGFW software and hardware model.
• Operate and employ FortiGate NGFW to improve the efficiency of system administration tasks.
• Manage various forms of external and internal threats using FortiGate features.
• Integrate FortiGate security fabric with the entire IT infrastructure to provide quick automated protection.
• Ensure long-term protection from attacks with independent and continuous FortiGate threat intelligence.
• Troubleshoot the most common firewall system setup errors relevant to FortiGate NGFWs.
• Implement Fortinet security solutions in other enterprise applications.

Target Audience:

This course is designed for individuals seeking to understand information security and explore potential career trajectories within the sector. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.

Course Objectives:

Attendees should:

• Gain a broad understanding of information security concepts and principles.
• Be able to identify key threats and vulnerabilities.
• Have the capability to explore various career options and specialisations within information security.
• Develop a foundation for further learning and exploration in the field.

Format of the Course:

• Interactive lecture and group discussions.
• Practical exercises and feedback sessions.
• Participants are encouraged to bring questions and participate actively in discussions.

This agenda is flexible and can be adjusted based on time constraints and audience interests. Customised versions might include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning, professional organisations, and career resources will be provided.

Course Customisation Options

• To request a customised training for this course, please contact us to arrange.

Why should you attend?

The Certified Lead Ethical Hacker training course equips you with the essential expertise to conduct information system penetration tests by applying recognized principles, procedures, and penetration testing techniques. This enables you to identify potential threats within computer networks. During this course, you will acquire the knowledge and skills required to manage a penetration testing project or team, as well as plan and execute internal and external pentests in compliance with standards such as the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). Additionally, you will gain a comprehensive understanding of how to draft reports and propose countermeasures. Through practical exercises, you will master penetration testing techniques and develop the skills necessary to lead a pentest team, manage customer communication, and resolve conflicts.

The Certified Lead Ethical Hacking training course offers a technical perspective on information security through ethical hacking, utilizing common techniques such as information gathering and vulnerability detection, both within and outside a business network.

The training is also aligned with the NICE (The National Initiative for Cybersecurity Education) Protect and Defend framework.

After mastering the necessary knowledge and skills in ethical hacking, you may take the exam and apply for the "PECB Certified Lead Ethical Hacker" credential. Holding a PECB Lead Ethical Hacker certificate allows you to demonstrate that you have acquired the practical skills to perform and manage penetration tests according to best practices.

Who should attend?

• Individuals interested in IT Security, particularly ethical hacking, who wish to learn more about the topic or begin a professional career change.
• Information security officers and professionals seeking to master ethical hacking and penetration testing techniques.
• Managers or consultants wishing to learn how to oversee the penetration testing process.
• Auditors wishing to perform and conduct professional penetration tests.
• Persons responsible for maintaining the security of information systems within an organization.
• Technical experts who want to learn how to prepare for a pentest.
• Cybersecurity professionals and information security team members.

This instructor-led, live training in Almada (online or onsite) is designed for system administrators and IT professionals seeking to utilise RSPAMD, SpamAssassin, and DMARC to fortify their self-hosted email servers.

Upon completion of this training, participants will be capable of configuring anti-spam solutions, implementing email authentication protocols, and maintaining a secure, sovereign mail infrastructure.

This instructor-led live training in Almada (online or onsite) is tailored for software testers who aim to secure their organization's network using Nmap.

By the end of this training, participants will be able to:

• Set up the necessary testing environment to start using Nmap.
• Scan network systems for security vulnerabilities.
• Discover active and vulnerable hosts.

This instructor-led, live training in (online or onsite) is aimed at developers, engineers, and architects seeking to secure their web apps and services.

By the end of this training, participants will be able to integrate, test, protect, and analyze their web apps and services using the OWASP testing framework and tools

The public key and the private key form the basis of public key cryptography (asymmetric cryptography), enabling secure communication and information exchange in computer networks. The combination of both keys allows for data protection while maintaining confidentiality and ensuring the authenticity of digital signatures. The public key and the private key form the basis of public key cryptography (asymmetric cryptography), enabling secure communication and information exchange in computer networks. The combination of both keys allows for data protection while maintaining confidentiality and ensuring the authenticity of digital signatures.

This instructor-led, live training in Almada (online or onsite) is aimed at SysAdmins, systems engineers, security architects, and security analysts who wish to write, execute, and deploy PowerShell scripts and commands to automate Windows security management in their organization.

By the end of this training, participants will be able to:

• Write and execute PowerShell commands to streamline Windows security tasks.
• Use PowerShell for remote command execution to run scripts on thousands of systems across an organization.
• Configure and harden Windows Server and Windows Firewall to protect systems from malware and attacks.
• Manage certificates and authentication to control user access and activity.

This course examines the technical competencies required to implement, monitor, and administer IT infrastructure in alignment with information security policies and procedures. It also covers the essential strategies for safeguarding the confidentiality, integrity, and availability of data.

Target Audience:

System and Network Administrators, as well as any professionals interested in defensive network security technologies.