MTCSE – MikroTik Certified Security Engineer

Module 1

Introduction

• Attacks, mechanisms and services
• The most common threats
• RouterOS security deployment
• Module 1 laboratory

Module 2

Firewall

• Packet flow, firewall chains
• Stateful firewall
• RAW table
• SYN flood mitigation using RAW table
• RouterOS default configuration
• Best practices for management access
• Detecting an attack to critical infrastructure services
• Bridge filter
• Advanced options in firewall filter
• ICMP filtering
• Module 2 laboratory

Module 3

OSI Layer Attacks

• MNDP attacks and prevention
• DHCP: rogue servers, starvation attacks and prevention
• TCP SYN attacks and prevention
• UDP attacks and prevention
• ICMP Smurf attacks and prevention
• FTP, telnet and SSH brute-force attacks and prevention
• Port scan detection and prevention
• Module 3 laboratory

Module 4

Securing the Router

• Port knocking
• Secure connections (HTTPS, SSH, WinBox)
• Default ports for the services
• Tunneling through SSH
• Module 4 laboratory

Module 5

Secure Tunnels

• Introduction to IPsec
• L2TP + IPsec
• SSTP with certificates
• Module 5 laboratory