Information System Security Training in Cascais

This instructor-led, live training in Cascais (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Cascais (online or onsite) is aimed at beginner-level technical professionals who wish to learn the concept of the Security Fabric and how it evolved to address the cybersecurity needs of organisations.

By the end of this training, participants will be able to:

• Learn the evolution of cybersecurity and how it has shaped current security technologies.
• Use Fortinet products to protect against specific types of cyber threats and attacks.
• Understand the integration and automation capabilities of Fortinet solutions in providing a coordinated response to cyber incidents.

This instructor-led, live training in Cascais (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively implement, manage, and secure SD-WAN solutions.

By the end of this training, participants will be able to:

• Understand the fundamental concepts, benefits, and challenges associated with SD-WAN technologies.
• Design an SD-WAN architecture tailored to organizational needs and deploy SD-WAN solutions effectively.
• Implement and manage security features within an SD-WAN.
• Monitor, manage, and troubleshoot SD-WAN environments.

This instructor-led, live training in Cascais (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations for enhanced reliability and performance.

By the end of this training, participants will be able to:

• Understand the features, specifications, and operating principles of the Fortigate 600E firewall.
• Perform the initial setup of the Fortigate 600E, including basic configuration tasks like setting up interfaces, routing, and initial firewall policies.
• Configure and manage advanced security features such as SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to protect against a variety of network threats.
• Troubleshoot common issues in HA setups and effectively manage HA environments.

This instructor-led, live training in Cascais (online or onsite) is designed for service technicians, system administrators, or anyone wishing to learn the correct installation, usage, and management of the Honeywell security system.

By the end of this training, participants will be able to:

• Grasp the concepts underlying Honeywell security systems and their components.
• Correctly install and maintain a Honeywell security system.
• Use Honeywell maintenance tools and the management suite to control a security system.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical course designed to empower professionals with the expertise needed to embed security throughout the DevOps lifecycle, thereby facilitating secure software development from the initial planning stages through to deployment.

This instructor-led live training, available both online and onsite, is tailored for intermediate-level software and DevOps professionals who aim to integrate robust security practices into their CI/CD pipelines, ensuring that code delivery is both secure and compliant.

Upon completion of this training, participants will be capable of:

• Grasping the core principles and practices of DevSecOps.
• Securing all stages of the CI/CD pipeline using automated tools.
• Implementing secure coding standards and vulnerability scanning techniques.
• Preparing for the ECDE certification through practical labs and comprehensive reviews.

Course Format

• Interactive lectures and discussions.
• Practical application of DevSecOps tools within simulated pipelines.
• Guided exercises focused on secure development and deployment strategies.

Customization Options

• To arrange a customized training session tailored to your team’s specific workflows or toolchain, please contact us to coordinate.

This instructor-led, live training in Cascais (online or onsite) is aimed at system administrators who wish to learn the fundamentals of software licensing, the key features of FlexNet, and how to implement and maintain software license management solutions.

By the end of this training, participants will be able to:

• Understand the fundamental concepts of software licensing.
• Manage core components and operation systems of FlexNet.
• Create various license models and types, generate license keys, and activate software licenses for end-users.
• Add, manage, and allocate licenses to end-users, monitor license usage, and ensure compliance.

This instructor-led, live training in Cascais (online or onsite) targets experienced network security managers seeking the knowledge and skills required to deploy, manage, and troubleshoot Fortinet’s FortiGate security appliances running on FortiOS 7.2 to achieve NSE4 Network Security Professional status.

Upon completion of this training, participants will be able to:

• Comprehend Fortinet’s product portfolio and the role of FortiOS in network security.
• Deploy effective firewall policies, security profiles, and Network Address Translation (NAT).
• Leverage security services to ensure network redundancy and failover.
• Apply security best practices and optimise security policies for compliance and threat mitigation.

This instructor-led, live training in Cascais (online or onsite) is designed for security professionals who wish to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Configure and manage essential firewall features of Palo Alto Networks.
• Manage security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic.

Open Source Intelligence (OSINT) encompasses any information that can be lawfully collected from free, public sources regarding an individual or organization. It also denotes the process of gathering, analysing, and utilising this data for intelligence objectives.

Audience

• Researchers
• Security analysts
• Investigators
• Law enforcement
• Government and military personnel

Format of the Course

• Interactive lectures and discussions.
• Ample exercises and practical application.
• Hands-on implementation within a live-lab environment.

Course Customization Options

• To request bespoke training for this course, please contact us to arrange.

Android serves as an open platform for mobile devices, including smartphones and tablets. While it offers a broad range of security features to facilitate the development of secure software, it also lacks certain security aspects found in other handheld platforms. This course provides a comprehensive overview of these features, highlighting critical shortcomings related to the underlying Linux system, the file system, and the general environment. It also addresses issues associated with permission management and other Android software development components.

Typical security pitfalls and vulnerabilities are examined for both native code and Java applications, alongside recommendations and best practices to prevent and mitigate them. Many of the discussed issues are supported by real-life examples and case studies. Finally, we provide a brief overview on utilizing security testing tools to identify security-related programming bugs.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about Android security solutions
• Learn to utilize various security features of the Android platform
• Gain insight into recent Java vulnerabilities on Android
• Understand typical coding mistakes and how to avoid them
• Gain understanding of native code vulnerabilities on Android
• Realize the severe consequences of insecure buffer handling in native code
• Understand architectural protection techniques and their weaknesses
• Obtain resources and further reading on secure coding practices

Audience

Professionals

This course delivers comprehensive cross-platform secure coding expertise by merging C/C++, Java, and web application security into a unified training programme. Participants will explore modern vulnerabilities, attack vectors, and secure development practices across diverse environments.

Delivered as an instructor-led live session (available online or on-site), this course is designed for developers at intermediate to advanced levels who aim to enhance their secure coding methodologies for both enterprise and web applications.

Upon completion of this training, participants will be able to:

• Apply secure coding principles within C/C++ and Java development environments.
• Identify and mitigate prevalent vulnerabilities, including buffer overflows, SQL injection, and cross-site scripting (XSS).
• Effectively implement and configure Java security services and APIs.
• Gain a deep understanding of the OWASP Top Ten and emerging risks, encompassing client-side security challenges.
• Utilise cryptography securely for data protection and secure communications.
• Analyse code for architectural weaknesses and implement defensive coding strategies.
• Keep abreast of recent vulnerabilities affecting platforms, frameworks, and libraries.

Course Format

• Interactive lectures and discussions.
• Hands-on secure coding laboratories and exploit demonstrations.
• Case studies and real-world vulnerability analysis.

Course Customisation Options

• To request a bespoke training session for this course, please contact us to arrange.

This three-day course provides an introduction to safeguarding C/C++ code against malicious actors who might exploit vulnerabilities related to memory management and input handling. The training focuses on the core principles of developing secure code.

Participants attending this course will

• Grasp the core concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Study client-side vulnerabilities and secure coding practices
• Acquire the ability to utilize various security features of the Java development environment
• Develop a practical understanding of cryptography
• Comprehend the security concepts underlying web services
• Understand the security solutions offered by Java EE
• Learn about typical coding mistakes and strategies to avoid them
• Gain insights into recent vulnerabilities within the Java framework
• Acquire practical knowledge on using security testing tools
• Access resources and further reading on secure coding practices

Protecting web-accessible applications demands security professionals who are thoroughly prepared and continuously aware of current attack vectors and trends. A wide array of technologies and environments supports the comfortable development of web applications. It is essential to be cognisant not only of security issues specific to these platforms but also of general vulnerabilities that apply irrespective of the development tools used.

This course provides an overview of applicable security solutions for web applications, with a special emphasis on understanding key cryptographic mechanisms. Various web application vulnerabilities are presented for both server-side (following the OWASP Top Ten) and client-side contexts, demonstrated through relevant attacks, and followed by recommended coding techniques and mitigation methods to avoid these issues. The topic of secure coding is concluded by discussing typical security-related programming errors, particularly regarding input validation, improper use of security features, and code quality.

Testing plays a critical role in ensuring the security and robustness of web applications. Various approaches – from high-level auditing and penetration testing to ethical hacking – can be employed to identify vulnerabilities of different types. However, to move beyond easily discoverable low-hanging fruit, security testing must be well-planned and properly executed. Remember: security testers should ideally find all bugs to protect a system, whereas adversaries need only find one exploitable vulnerability to gain access.

Practical exercises will aid in understanding web application vulnerabilities, programming mistakes, and, most importantly, mitigation techniques. Through hands-on trials with various testing tools – ranging from security scanners, sniffers, and proxy servers to fuzzing tools and static source code analyzers – this course delivers the essential practical skills that can be applied in the workplace the very next day.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn about client-side vulnerabilities and secure coding practices
• Gain a practical understanding of cryptography
• Understand security testing approaches and methodologies
• Acquire practical knowledge in using security testing techniques and tools
• Stay informed about recent vulnerabilities in various platforms, frameworks, and libraries
• Access resources and further reading on secure coding practices

Audience

Developers, Testers

This instructor-led, live training (available online or onsite) is aimed at technical professionals who wish to deploy and manage open source collaboration platforms that maintain data sovereignty while providing modern team communication capabilities.

By the end of this training, participants will be able to evaluate platforms, deploy self-hosted solutions, configure security and integrations, migrate from existing platforms, and establish operational procedures.

This instructor-led, live training in Cascais (online or onsite) is designed for security engineers and compliance officers who wish to strengthen EXO deployments, control model access, and govern AI workloads that operate entirely on-premise.

This instructor-led, live training in Cascais (online or onsite) is aimed at security engineers and system administrators who wish to use FortiGate NGFW's advanced security-driven network systems to protect their organization from internal and external threats.

By the end of this training, participants will be able to:

• Install and configure the preferred FortiGate NGFW software and hardware model.
• Operate and employ FortiGate NGFW to improve the efficiency of system administration tasks.
• Manage various forms of external and internal threats using FortiGate features.
• Integrate FortiGate security fabric with the entire IT infrastructure to provide quick automated protection.
• Ensure long-term protection from attacks with independent and continuous FortiGate threat intelligence.
• Troubleshoot the most common firewall system setup errors relevant to FortiGate NGFWs.
• Implement Fortinet security solutions in other enterprise applications.

Target Audience:

This course is designed for individuals seeking to understand information security and explore potential career trajectories within the sector. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.

Course Objectives:

Attendees should:

• Gain a broad understanding of information security concepts and principles.
• Be able to identify key threats and vulnerabilities.
• Have the capability to explore various career options and specialisations within information security.
• Develop a foundation for further learning and exploration in the field.

Format of the Course:

• Interactive lecture and group discussions.
• Practical exercises and feedback sessions.
• Participants are encouraged to bring questions and participate actively in discussions.

This agenda is flexible and can be adjusted based on time constraints and audience interests. Customised versions might include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning, professional organisations, and career resources will be provided.

Course Customisation Options

• To request a customised training for this course, please contact us to arrange.

Why should you attend?

The Certified Lead Ethical Hacker training course equips you with the essential expertise to conduct information system penetration tests by applying recognized principles, procedures, and penetration testing techniques. This enables you to identify potential threats within computer networks. During this course, you will acquire the knowledge and skills required to manage a penetration testing project or team, as well as plan and execute internal and external pentests in compliance with standards such as the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). Additionally, you will gain a comprehensive understanding of how to draft reports and propose countermeasures. Through practical exercises, you will master penetration testing techniques and develop the skills necessary to lead a pentest team, manage customer communication, and resolve conflicts.

The Certified Lead Ethical Hacking training course offers a technical perspective on information security through ethical hacking, utilizing common techniques such as information gathering and vulnerability detection, both within and outside a business network.

The training is also aligned with the NICE (The National Initiative for Cybersecurity Education) Protect and Defend framework.

After mastering the necessary knowledge and skills in ethical hacking, you may take the exam and apply for the "PECB Certified Lead Ethical Hacker" credential. Holding a PECB Lead Ethical Hacker certificate allows you to demonstrate that you have acquired the practical skills to perform and manage penetration tests according to best practices.

Who should attend?

• Individuals interested in IT Security, particularly ethical hacking, who wish to learn more about the topic or begin a professional career change.
• Information security officers and professionals seeking to master ethical hacking and penetration testing techniques.
• Managers or consultants wishing to learn how to oversee the penetration testing process.
• Auditors wishing to perform and conduct professional penetration tests.
• Persons responsible for maintaining the security of information systems within an organization.
• Technical experts who want to learn how to prepare for a pentest.
• Cybersecurity professionals and information security team members.

During the course, participants will learn:

• What are denial of service attacks, Flooding, Sniffing, MIM?
• How to break from the network to the server?
• How to watch packets on the network (also running on switches)?
• Do you watch any combination of the world?
• How to monitor the network?
• How to configure a firewall?
• How to use encrypted connections?
• How to create tunnels?
• How to log packets?
• How to scan ports?
• How to reduce the number of unnecessary services on the server?

OpenVAS is an advanced open source framework which consists of several services and tools for network vulnerability scanning and management.

In this instructor-led, live training, participants will learn how to use OpenVAS for network vulnerability scanning.

By the end of this training, participants will be able to:

• Install and configure OpenVAS
• Learn the fundamental features and components of OpenVAS
• Configure and implement network vulnerability scans with OpenVAS
• Review and interpret OpenVAS scan results

Audience

• Network engineers
• Network administrators

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

Note

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in (online or onsite) is aimed at developers, engineers, and architects seeking to secure their web apps and services.

By the end of this training, participants will be able to integrate, test, protect, and analyze their web apps and services using the OWASP testing framework and tools

This instructor-led, live training in Cascais (online or onsite) is designed for developers aiming to prevent malware intrusion with Palo Alto Networks.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing firewalls.
• Deploy a Palo Alto firewall on a cloud server.
• Manage packet flow through Palo Alto firewalls.
• Interpret QoS classifications and types.

The public key and the private key form the basis of public key cryptography (asymmetric cryptography), enabling secure communication and information exchange in computer networks. The combination of both keys allows for data protection while maintaining confidentiality and ensuring the authenticity of digital signatures. The public key and the private key form the basis of public key cryptography (asymmetric cryptography), enabling secure communication and information exchange in computer networks. The combination of both keys allows for data protection while maintaining confidentiality and ensuring the authenticity of digital signatures.

This instructor-led, live training in Cascais (online or onsite) is aimed at SysAdmins, systems engineers, security architects, and security analysts who wish to write, execute, and deploy PowerShell scripts and commands to automate Windows security management in their organization.

By the end of this training, participants will be able to:

• Write and execute PowerShell commands to streamline Windows security tasks.
• Use PowerShell for remote command execution to run scripts on thousands of systems across an organization.
• Configure and harden Windows Server and Windows Firewall to protect systems from malware and attacks.
• Manage certificates and authentication to control user access and activity.

This course in Cascais aims to assist with the following:

1. Help developers master the techniques of writing secure code
2. Help software testers assess the application's security before it is published to the production environment
3. Help software architects understand the risks associated with applications
4. Help team leaders establish security baselines for developers
5. Help web masters configure servers to avoid misconfigurations

This course explores secure coding principles and practices for Java, utilizing the testing methodologies established by the Open Web Application Security Project (OWASP). The Open Web Application Security Project is a vibrant online community dedicated to producing freely accessible articles, methodologies, documentation, tools, and technologies focused on web application security.

This course examines the technical competencies required to implement, monitor, and administer IT infrastructure in alignment with information security policies and procedures. It also covers the essential strategies for safeguarding the confidentiality, integrity, and availability of data.

Target Audience:

System and Network Administrators, as well as any professionals interested in defensive network security technologies.