Information Systems Security Training in York

This live, instructor-led session in York (delivered online or on-site) targets intermediate-level network administrators aiming to develop the core skills necessary for managing, overseeing, and maintaining Fortinet security systems.

By the end of the course, delegates will be able to:

• Configure and oversee FortiGate firewalls.
• Monitor network traffic and manage incidents using FortiAnalyzer.
• Automate tasks and manage policies via FortiManager.
• Implement preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in York (online or onsite) is tailored for beginner-level network administrators aiming to use the FortiGate 1100E to effectively manage and secure their network environments.

By the end of this course, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led live training in York, conducted either online or on-site, is designed for intermediate-level network administrators seeking to manage and secure their networks using FortiGate firewalls.

By the end of this training, participants will be able to:

• Understand FortiGate features and functionalities, particularly those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures like IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance.

This instructor-led, live training in York (available online or on-site) is designed for intermediate-level technical professionals who aim to explore the technical aspects and functionalities of Fortinet’s product line in greater depth. This allows them to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be capable of:

• Gaining detailed knowledge of Fortinet’s advanced security solutions and products.
• Understanding the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configuring, managing, and troubleshooting Fortinet solutions in diverse environments.
• Applying Fortinet products to address complex security challenges and requirements.

This live, instructor-led training in York (available online or onsite) is designed for beginner-level technical professionals looking to master the Security Fabric concept and understand its development to meet organisational cybersecurity needs.

By the end of the course, participants will be able to:

• Understand the evolution of cybersecurity and how it has influenced current security technologies.
• Utilise Fortinet products to safeguard against specific cyber threats and attacks.
• Comprehend the integration and automation capabilities of Fortinet solutions for coordinated cyber incident response.

This instructor-led, live training in York (online or on-site) is intended for security professionals who wish to develop skills in troubleshooting Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Understand the architecture of the next-generation firewall.
• Investigate and troubleshoot networking issues using firewall tools.
• Analyse advanced logs to resolve real-life scenarios.

This instructor-led, live training in York (available online or on-site) is designed for entry-level network security professionals aiming to understand cybersecurity concepts and the current global threat landscape.

Upon completion of this training, participants will be equipped to:

• Comprehend the current global threat landscape and identify key types of cyber adversaries.
• Recognise primary malware types and understand the mechanics behind cyber attacks.
• Grasp the fundamentals of network security and the value of a layered security approach.
• Explore Fortinet's Security Fabric and its role in addressing contemporary cybersecurity challenges.

This instructor-led, live course in York (available online or on-site) is tailored for mid-level network and security professionals aiming to effectively implement, manage, and secure SD-WAN solutions.

By the conclusion of this programme, participants will be capable of:

• Comprehending the essential concepts, advantages, and challenges related to SD-WAN technologies.
• Designing an SD-WAN architecture suited to organisational needs and deploying the solution effectively.
• Implementing and managing security features within an SD-WAN.
• Monitoring, managing, and troubleshooting SD-WAN environments.

This instructor-led, live training in York (online or onsite) is designed for intermediate-level network and security professionals looking to proficiently manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations to improve reliability and performance.

By the end of this training, participants will be able to:

• Understand the key features, specifications, and working principles of the Fortigate 600E firewall.
• Carry out the initial setup of the Fortigate 600E, including fundamental configuration tasks such as configuring interfaces, routing, and establishing initial firewall policies.
• Set up and manage advanced security functions like SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware tools to mitigate various network threats.
• Diagnose typical issues in HA configurations and effectively oversee HA environments.

This instructor-led, live training programme delivered in York (online or on-site) is designed for service technicians, system administrators, or any professionals seeking to master the correct installation, operation, and management of the Honeywell security system.

Upon completion of this training, participants will be equipped to:

• Comprehend the fundamental concepts of Honeywell security systems and their key components.
• Install and maintain Honeywell security systems in accordance with best practices.
• Leverage Honeywell's maintenance tools and management suite to effectively control security operations.

This instructor-led, live training is conducted in York, available either online or on-site. It is tailored for intermediate-level IT professionals who aim to proficiently utilise and administer Sophos XG Firewall to strengthen the security posture of their respective organisations or clients.

Upon completing this training, participants will be able to:

• Comprehend the features and capabilities of Sophos XG Firewall.
• Execute initial setup, configure network interfaces, and establish and manage firewall policies and rules.
• Understand the process of integrating with various authentication services.
• Leverage Sophos XG Firewall's monitoring and reporting tools to maintain oversight of network security.

This instructor-led, live training in York (online or onsite) is tailored for intermediate to advanced developers looking to grasp and implement secure coding practices, pinpoint security risks in software, and establish defences against cyber threats.

By the end of this training, participants will be capable of:

• Understanding common security vulnerabilities in web and software applications.
• Analysing security threats and the exploit techniques used by attackers.
• Implementing secure coding practices to mitigate security risks.
• Using security testing tools to identify and fix vulnerabilities.

This instructor-led, live training in York (delivered online or on-site) is tailored for security professionals aiming to learn the essentials of managing Palo Alto Networks' next-generation firewalls.

Upon completion of this training, participants will be able to:

• Configure and manage the core features of Palo Alto Networks firewalls.
• Administer security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic.

This instructor-led live training in York, delivered either online or on-site, is tailored for engineers aiming to protect connected vehicles from cyber threats.

By the conclusion of this programme, participants will be able to:

• Integrate cybersecurity practices into automotive systems.
• Identify and deploy the most suitable technologies, tools, and approaches.

This instructor-led, live training in York (available online or onsite) is tailored for senior and semi-senior IT auditors aiming to utilise Burp Suite Professional to test, validate, and document web application vulnerabilities within security audits, control assessments, and technology risk analysis.

Today, a variety of programming languages can be used to compile code for the .NET and ASP.NET frameworks. While this environment offers robust capabilities for security development, it is essential that developers understand how to apply architecture- and code-level techniques. This knowledge is crucial for implementing the desired security functionality, preventing vulnerabilities, or mitigating their exploitation.

This course aims to equip developers with practical skills through numerous hands-on exercises. Key areas covered include preventing untrusted code from executing privileged actions, protecting resources via robust authentication and authorisation, managing remote procedure calls and sessions, and exploring diverse implementation strategies for specific functionalities.

The curriculum begins by highlighting common programming pitfalls when using .NET. It then delves into ASP.NET vulnerabilities, examining various environment settings and their implications. Finally, the course addresses ASP.NET-specific security challenges, covering general web application security issues alongside specific attack vectors such as ViewState attacks and string termination attacks.

Participants attending this course will

• Gain a solid understanding of fundamental security concepts, IT security, and secure coding practices
• Explore web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Master the use of various security features within the .NET development environment
• Acquire practical expertise in employing security testing tools
• Identify common coding errors and learn strategies to avoid them
• Review recent vulnerabilities affecting .NET and ASP.NET
• Obtain resources and further reading materials on secure coding practices

Audience

Developers

This live, instructor-led training (available online or on-site) is tailored for technical professionals who intend to deploy and manage open source collaboration platforms that preserve data sovereignty while delivering modern team communication capabilities.

By the end of the programme, participants will be able to evaluate suitable platforms, deploy self-hosted solutions, configure security and integrations, manage migrations from existing systems, and establish effective operational procedures.

In this instructor-led, live course located in York, participants will learn how to formulate an appropriate security strategy to tackle the DevOps security challenge.

This live, instructor-led training session in York covers the vital architectural, operating system, networking, storage, and cryptographic aspects that must be addressed when engineering secure embedded systems.

By the end of the programme, participants will have a thorough understanding of security principles, key concerns, and applicable technologies. Most importantly, they will be well-equipped with the necessary techniques to produce safe and secure embedded software.

This instructor-led, live training on York (delivered online or onsite) is designed for security engineers and compliance officers looking to fortify EXO deployments, manage model access, and govern AI workloads operating entirely on-premise.

This instructor-led, live training in York (delivered online or on-site) is designed for system administrators and IT professionals who wish to secure self-hosted email servers using RSPAMD, SpamAssassin, and DMARC.

By the end of this training, participants will be able to configure anti-spam solutions, implement email authentication protocols, and maintain secure sovereign mail infrastructure.

This instructor-led, live training in York (online or on-site) is designed for network engineers and infrastructure professionals who intend to leverage SONiC and ONL to deploy and manage open network infrastructure on white-box switches.

By the end of this training, participants will be able to: grasp the architecture of SONiC and ONL, deploy open-source NOS on white-box hardware, configure essential networking features, and implement monitoring and automation solutions.

This York course is designed to assist participants in the following areas:

1. Enabling developers to master the techniques required for writing secure code.
2. Assisting software testers in evaluating application security prior to deployment to the production environment.
3. Helping software architects comprehend the risks associated with their applications.
4. Guiding team leaders in establishing security baselines for their development teams.
5. Supporting web masters in configuring servers correctly to prevent misconfigurations.

The 'Network Security – How to Securing Your Services' training course presents the mechanisms and services that secure modern network solutions. It covers the basics of ensuring data confidentiality and integrity, the application of encryption, certificates, Public Key Infrastructure (PKI), and secure password storage. The course also discusses network security protocols and services, security systems, wireless network protection, the connection of company branches, and security testing through penetration testing, network scanning, and vulnerability detection.

The “Penetration Testing – Detecting and Exploiting Vulnerabilities” training comprehensively discusses issues related to the practical security testing of networks and services. Participants gain skills in penetration testing, encompassing reconnaissance, vulnerability discovery, attacks and taking control, as well as cover-up techniques. The course also covers aspects related to system analysis, social engineering, and the preparation of a report on the conducted test, allowing for practical exercises in a controlled virtual environment.