Upon completion of this course, students should be able to:

• Install, configure, and adminster systems installed with the Solaris 10 Operating System (OS) and understand the following Solaris 10 OS security concepts:
• Principles and features
• Installing systems securely
• Principle of Least Privilege
• File integrity and privacy
• Application and network security
• Auditing and zone security

Content:

Describing Basic Security Principles

• Describe the need for a security policy
• Describe the need to securely configure systems
• Describe hardening systems
• Describe minimized systems
• Describe appropriate system configuration
• Describe the need for auditing
• Describe logging to meet legislative compliance

Listing Applicable Solaris 10 Security Features

• Describe these new features included in the Solaris 10 Operating System (OS):
• The device policy
• Kerberos-enabled applications, Lightweight Directory Access Protocol (LDAP), and interoperability enhancements
• Process rights management
• Solaris Containers
• User rights management (Role Based Access Control)
• Password strength, syntax checking, history, and aging improvements
• Basic Audit and Report Tool (BART) for file integrity
• IPfilter stateful packet filtering firewall
• Solaris Secure Shell
• IPsec/Internet Key Exchange (IKE) performance enhancements
• Solaris auditing
• Trusted Extensions
• SSL encryption with PKCS#11 interface and OpenSSL
• PAM improvements
• MD5 hash functions built into the Solaris OS

Describing Minimization

• Describe a minimal installation
• Describe software installation clusters (metaclusters)
• Examine loose compared to strict minimization
• Provide consistent, known configuration for installations

Managing Patches

• Describe the Solaris 10 Update Manager
• Describe signed patches
• Understand how to verify signatures for a signed patches
• Specify a web proxy when installing a signed patch

Performing Hardening

• Understand what is involved when performing system hardening
• Use the Solaris Security Toolkit (SST)
• Understand the software component of SST
• Use SST for system hardening
• Use SST for system security audits

Implementing Process Rights Management

• Describe process rights management
• Describe process privileges
• Understand how to determine rights required by processes
• Understand how to debug privileges
• Assign minimum rights to a process

Implementing User Rights Management

• Describe access controls
• Understand and use Role Based Access Control
• Explain what is meant by a rights profile
• Understand and use a role
• Explain authorizations and privileges in RBAC
• Configure and use password history
• Configure password selection constraints
• Understand how to use strong cryptographic algorithms for passwords

Utilizing the Solaris Cryptographic Framework

• Describe the role of the Solaris Cryptographic Framework
• Administer and maintain the Solaris Cryptographic Framework
• Explain and use the digest(1), mac(1), encrypt(1), and decrypt(1) commands
• Manage the Solaris Cryptographic Framework environment
• Describe how the Solaris Cryptographic Framework can be used with Java applications, web servers, and the Sun Crypto accelerator cards

Managing File system Security

• Use the elfsign(1) command to verify Solaris 10 OS Executable and Linkable Format (ELF) objects
• Describe and use the Basic Audit and Report Tool
• Describe secure execution

Using the Service Management Facility

• Describe the Service Management Facility
• Describe the concept of least privilege
• Describe authorization
• Limit a service´s privileges
• Examine a service´s current privileges

Securing Networks

• Describe network access controls
• Describe TCP Wrappers in the Solaris 10 OS
• Implement the Solaris IP Filter Stateful Packet Filtering Firewall
• Describe Kerberos security
• Understand and use Solaris Secure Shell
• Describe the security features of NFSv4

Implementing IPsec

• Describe IP Security (IPsec) and the Internet Key Exchange (IKE) protocols
• Describe the various ways IPsec can be configured
• Describe two ways to configure IKE
• Describe methods used for troubleshooting IPsec and IKE configurations

Performing Auditing and Logging

• Describe Solaris auditing
• Configure an audit policy
• Implement Solaris auditing
• Configure auditing on a system implementing Solaris zones
• Access the audit data from the audit trail
• Describe how the audit records can be used
• Protect audit information on a system or in the enterprise

Implementing Security in Solaris Zones

• Describe security characteristics of a Solaris system with zones installed
• Understand the differences between the subjects already covered and how they apply to the Solaris operating system with zones installed
• Describe the global zone
• Explain when and how to use zones
• Describe resource management in a zone
• Address zones and network security
• Understand patching zones

How Security Components Work Together

• Describe how security components work together
• Describe how technologies interact
• Describe infrastructure requirements

Målgruppe for kurset
Students who can benefit from this course are security, system, and network administrators who are responsible for customizing security on Solaris 10 systems.

To succeed fully in this course, students should be able to:
• Administer users, packages, and applications on Solaris 10 systems
• Administer networking and routing on Solaris 10 systems
• Describe basic system and network security concepts
• Administer services and zones on Solaris 10 systems

Related courses before:
• SA-202-S10: System Administration for the Solaris 10 Operating System, Part 2 (SA-202-S10)
• SA-203-S10: Advanced System Administration for the Solaris 10 Operating System on x86 Based Systems (SA-203-S10)
• SA-300-S10: Network Administration for the Solaris 10 Operating System (SA-300-S10)
• SC-300: Administering Security on the Solaris Operating System (SC-300)

Related courses after:
• SC-345: Solaris Operating System Network Intrusion Detection (SC-345)
• SC-360: Enterprise Security Using Kerberos and LDAP (SC-360)
• SC-410: Computer Security Forensics and System Recovery (SC-410)

The course will be held in Norwegian.

Ønsker du mer informasjon om dette kurset?

Navn:

Firma:

E-post:

Telefon:

Melding:

Påmelding:

Klikk her hvis du ønsker å
melde deg på dette kurset

Sun Microsystems

Sun ble grunnlagt med én eneste visjon som drivkraft. En visjon om datamaskiner som kommuniserte med hverandre uansett hvem som hadde laget dem. En visjon om teknikk som arbeider for deg, ikke motarbeider deg. Mens andre utviklet varemerkebeskyttede og proprietære løsninger, fokuserte vi på å hjelpe bedrifter inn i nettverksæraen. Som et resultat av dette er vi blitt dotten i .com. Vi leverer systemer og programvare som oppfyller kravene til skalerbarhet og påliteligheten som er nødvendig for å drive den elektroniske markedsplassen.

Telefon:	23 36 96 50
Hjemmeside:	Klikk her
Flere kurs fra Sun Microsystems

Tips en venn