COURSE
SYLLABUS
|
Instructor |
Dovel
Myers |
Phone |
351-3563 |
|
Office |
Kricker
127 |
E-mail |
dmyers@shawnee.edu |
|
Office
Hours |
|
Dept. |
Business
Administration |
3
To be determined
Guide to Firewalls and Network Security: with Intrusion Detection and
VPNs
CWNA Guide to Wireless LANs, Second Edition
Diskettes, USB drive, or CD as needed to store assignments.
BUIS 4700 provides
a hands-on experience to planning, designing, installing and configuring
wireless LANs as well as both the theory and practice of network security, with
the intention to get students involved in learning through in-class, group, and
lab work. The first half of this course will offer in-depth coverage of
wireless networks with extensive step-by-step coverage of IEEE 802.11b/a/g/n
implementation, design, security, and troubleshooting. Material is reinforced
with hands-on projects at the end of each chapter from two of the principal
wireless LAN vendors.
The second half of
this course provides a comprehensive overview of building and maintaining
firewalls in a business environment. It
is designed for the student and network administrator who need to learn the
basics of network firewall security. It covers basic installation techniques,
discusses how to make an intelligent choice of firewall technology, and
presents basic firewall troubleshooting.
Prerequisites: BUIS
3700; or by permission
·
Workgroup bridge characteristics and
functionality
·
Topological considerations relating to
WLAN deployment
·
Fundamentals of planning a WLAN
deployment
·
Security concepts used in a WLAN
·
Basic AP configuration tasks such as
assigning SSID and IP addresses
·
Using a command-line interface (CLI)
for configuring an access point
·
Determining the IP address for a given
AP
·
Configure radio settings using the AP
radio pages
·
Operation and uses of repeaters
·
Benefits of using filtering options
·
WEP security and configure an AP for it
·
Adding users with suitable capabilities
in the User Management Windows
·
Benefits of server-based security
·
Authentication and authorization in a
sever-based security system
·
Basic settings on the Authentication
Configuration page
·
Configure basic EAP settings on access
points and clients
·
Set up MAC address filtering as a
security tool
·
New WEP Security features
·
Differences between APs and bridges
·
Messages communicated by the LED
indicators
·
Considerations for selecting antennas
to be used with the wireless bridges
·
Environmental factors affecting
wireless performance and calculating path loss
·
Regulations that could impact a
wireless bridge
·
Tools for protecting against
lightening-related surges
·
Key security features of bridges
·
Methods for increasing the transmission
distance
·
Ways to align antennas
·
Understand the steps and important
considerations to complete a site survey
·
Identify items necessary to perform a
site survey
·
Follow proper safety procedures while
performing a site survey
·
Understand the site survey precautions
in various vertical industries
·
Properly complete a site-to-site site
survey
·
Properly complete a wireless LAN survey
·
Properly document a site survey
·
Demonstrate proper mounting of access
points, bridges and antennas
·
Understanding of the MAC and PHY layer
IEEE 802.11 specification
·
The process a wireless client undergoes
while associating to an access point
·
Isotropic antennas and why they are
used as references for other antennas
·
Understand the proper use of spectrum
analyzer, gauss meter, and other test equipment
·
Understand and configure basic switch
and router security.
·
Demonstrate advanced ACL and filtering
configuration on IOS and PIX Firewalls.
·
Configure the AAA service on Cisco
routers and PIX Firewalls.
·
Install, configure and monitor Cisco
Secure Access Control Server.
·
Configure static and dynamic network
address translation on IOS and PIX Firewalls.
·
Configure site-to-site VPNs on Cisco routers
and PIX Firewalls.
·
Configure remote access VPNs between
Cisco VPN Clients, IOS and PIX Firewalls.
·
Configure VPNs using pre-shared keys
and digital certificates.
·
Configure intrusion detection and
syslog monitoring on the IOS and PIX Firewalls.
·
Understand and configure failover for
PIX Firewalls and advanced protocol handling.
·
Perform image upgrade and password
recovery on IOS and PIX Firewalls.
·
Configure secure remote access to IOS
and PIX Firewalls using SSH.
·
Understand the basic concepts of enterprise
security management using SNMP or CiscoWorks VMS.
Class attendance:
The student is responsible for
the activities of each class period.
Attendance and participation is an important part of your class
grade(10%)..
Students missing class because of legitimate reasons must consult with
the instructor by telephone or email concerning the absence. Legitimate absences do not excuse the student
from class responsibilities. Examples of
reasons to be excused by the instructor are serious illness, death in the
family, or institutional activities.
Documentation for absences may be required.
Section 504 of the Rehabilitation Act of 1973 and the Americans with
Disabilities Act of 1990 require
Academic Integrity:
You are required to do your own
work on all tests and assignments. Any form of cheating may result in a grade
penalty or the student being withdrawn from the course as well as dismissal
from the University. See page 37 of the
Record Retention:
All student work submitted for a
grade will be retained for two weeks after the beginning of the next quarter;
after which point all paper work will be shredded and diskettes reformatted.
Attendance and Participation 10.00%
Weekly Assignments 50.00%
Quiz 1 10.00%
Quiz 2 10.00%
Final Examination 20.00%
Total 100.00%
Scale:
90.0% - 100% A
80.0% - 89.9% B
70.0% - 79.9% C
60.0% - 69.9% D
0.0% - 59.9% F
Homework
and Projects:
Assignments will be due at the beginning of the class period on the due
date. Assignments turned in during the class period or later will be
accepted but will be subject to a penalty (reducing the total score). A
10%
penalty will be applied for each assignment that is turned in during the
class period on the due date. A 20% penalty will be assessed for each
week (or part week) that an assignment is late if it is not turned in on
the
due date. Unless specifically agreed (in advance) homework IS DUE on the
due
date. If you are unable to attend class the assignment is to be emailed,
faxed or postmarked on or before the due date to avoid the penalty.
If you receive an unsatisfactory (less than 80%) mark on an assignment,
that was turned in on time, you have the option of resubmitting it by
the
next class period. An automatic reduction of 20% will be applied to the
resubmitted work's score. If you earned a 60% on an assignment and
resubmitted it for a 95%, your net score of 75% would be a significant
improvement.
Lecture, demonstrations, and hands-on projects in computer lab.