Overview
The Information Exchange Gateway (IEG) concept is a solution for effecting information sharing between different security domains by providing a managed set of Information Exchange Services (IES). This course is designed to provide the student with the necessary skills required in order to Design and Implement Information Gateways.

Course Materials
Blue Screen IT offer security course materials second to none. All delegates are provided with Press release courseware. All students are furnished with materials like examination pads, pens, highlighters and other necessary stationary. Many other study aids are provided throughout the course ensuring each student a unique learning experience...

Course Duration
4 Days

Training day 1

1. Overview of Information Exchange Gateways
1. Introduction and defining Information Gateways
2. Role of the Information Gateway
3. Components of IEG
4. The Enterprise network and Information Gateways
5. Objectives of cross domain security
6. Types of IEG: Hardware and Software

2. Types of IEG
1. Description of gateways
2. Gateway Zones
3. The IEG Interface
4. Border Directories and Replication
5. Benefits to using Hardware Gateways
6. Benefits to using Software Gateways
7. Current available implementations of Information Gateways

3. Protocols
1. Mail protocols including SMTP, x400 and POP3
2. Web protocols including FTP, HTTP and HTTPS
3. Application traffic
4. Configuring mail and web protocols to pass through filters and guards
5. SMTP versus x400
6. HTTP versus HTTPS

Training day 2

4. Mail Message Classifiers
1. Introduction to message headers
2. Types of classification
3. Classification requirements
4. Types of products available
5. Demonstration of message classification

5. Mail Guards
1. Introduction - Role of a Mail guard
2. Types of mail guards
3. Mail traffic and organisation impact
4. Mail Screening and Email spam: Sources and prevention
5. Current mail guards available on the market
6. Configuration and demonstration of Mail guards

Training day  3

6. Firewalls
1. Introduction to firewalls
2. Types of firewall implementation
3. Firewalls and the lower networking layers
4. Firewalls and the application layer
5. Firewall Services
6. Current market leaders
7. Configuring

7. VPN Services
1. Introduction to VPN services
2. Requirements for VPN
3. Types of VPN – SSL, PPTP and L2TP/ IPSec
4. Security risks and split tunnelling
5. IKE and digital signing
6. Certificates and Certificate authorities
7. Encryption – Symmetric, A-Symmetric and Hashing

Training day 4

8. Intrusion prevention and Detection systems
1. Introduction to IDS and IPS
2. Requirements and overheads
3. Current market leaders
4. The HoneyPot and HoneyNet
5. Configuration and demonstration of IPS and IDS technologies

9. Design of IEG systems
1. Information flow requirements
2. Enterprise and organisation requirements
3. Policy requirements
4. Design process for information Gateways
5. Interoperability between gateway systems

10. Summary Information Gateways
1. Summary and skills overview