Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Plan and design firewall solution
   • Determine level and nature of security needed to meet enterprise requirements
   • Identify security threats
   • Research available perimeter security options
   • Design security perimeter to meet identified enterprise requirements
2. Configure perimeter to secure network
   • Deploy perimeter devices according to design
   • Configure perimeter topology
   • Configure basic functionality of devices to allow access
   • Configure advanced functions
3. Plan, design and configure network devices to provide secure fallover and redundancy
   • Back up device configuration
   • Design and configure perimeter to enable continuity of service during upgrade of devices
   • Design and configure perimeter to enable continuity of service in the event of device failure
4. Plan, design and configure a VPN solution
   • Configure perimeter for site-to-site virtual private networks (VPNs)
   • Configure perimeter as a remote access VPN server
   • Configure perimeter to allow VPN tunnel forwarding
   • Diagnose and resolve VPN connectivity issues
5. Test and verify design performance
   • Test functionality of basic features
   • Test functionality of advanced features
   • Perform penetration testing to verify that the perimeter meets security requirements
   • Monitor perimeter device performance
   • Monitor security breaches
   • Document test results and report to appropriate person

Performance Evidence

Evidence of the ability to:

identify threats to perimeter security

develop design for a secure perimeter

deploy perimeter to meet security requirements

design and configure advanced features of perimeter devices to provide additional services

design and configure an integrated VPN solution

conduct exhaustive testing of perimeter.

Note: If a specific volume or frequency is not stated, then evidence must be provided at least once.

---

Knowledge Evidence

To complete the unit requirements safely and effectively, the individual must:

identify and describe emerging security issues and the need for security policies

describe the security perimeter issues related to networks, including:

auditing and penetration testing techniques

capabilities of software and hardware perimeter solutions

logging analysis techniques

organisational network infrastructure

security technologies according to perimeter design

weaknesses of installed perimeter design.

---