fr
en
WatchGuard Fireware v12.11: Advanced Enterprise Network Security
Your networks need protection rules aligned with how they are used. With WatchGuard, structure security configurations and examine traffic to improve access control. Strengthen your ability to prepare interventions and address areas requiring attention.
- Duration
- 4 days 28 hours
- Code
- WGF01FR Code
Presentation
WatchGuard positions itself as a network security leader, offering robust solutions for protecting enterprise infrastructures. With its Fireware operating system , WatchGuard provides a comprehensive feature set including a next-generation firewall, intrusion prevention services, application control and advanced threat detection. These tools enable organisations to secure their data and access while maintaining business continuity and protecting against evolving cyber threats.
This four-day course gives you practical skills to master WatchGuard solution administration (Fireware v12.11). You will explore security policy configuration, VPN management, network performance optimisation and monitoring and logging tools such as WatchGuard Dimension. Through numerous practical exercises and demonstrations, you will learn to deploy, configure and troubleshoot Fireboxes effectively in real enterprise environments.
By the end of the programme, you will have the expertise to understand and apply WatchGuard security independently and effectively within your organisation. You will master the key concepts, best practices and essential tools needed to make full use of these technologies to protect your network infrastructure.
Objectives
By the end of this WatchGuard course, you will be able to:
- Reset a Firebox to factory settings and restore a configuration backup.
- Understand, configure and troubleshoot basic network settings, including interfaces, static and dynamic routing and DHCP.
- Create, modify and optimise firewall rules to control network traffic and apply security policies.
- Understand the different types of network address translation (NAT) and their use in different network scenarios.
- Use logging and real-time monitoring tools to check Firebox operation, diagnose issues and ensure network security.
- Design, deploy and troubleshoot VPN types including site-to-site IPsec, Mobile VPN with IPsec and Mobile VPN with SSL to establish secure connections.
- Implement and manage user authentication methods, including local authentication, Active Directory integration and multi-factor authentication (MFA) solutions.
- Configure and optimise advanced security services such as WebBlocker, Application Control, SpamBlocker, Gateway AntiVirus, Intrusion Prevention Service (IPS), Data Loss Prevention (DLP) and Advanced Threat Protection (ATP).
- Understand the architecture of WatchGuard System Manager (WSM) and WatchGuard Cloud for centralised management of multiple Fireboxes.
- Configure and manage WatchGuard wireless access points, including Wi-Fi security settings and integration with network security policies.
- Use WatchGuard Dimension for network visibility, reporting and security analysis.
- Implement high availability (HA) and clustering strategies for redundancy and business continuity.
- Understand SD-WAN concepts and configuration to optimise bandwidth use and improve network performance.
- Diagnose and resolve common network and security issues involving WatchGuard Fireboxes.
Program
Module 1: Understanding WatchGuard fundamentals
- WatchGuard products and their features.
- Firebox hardware and software components.
- Introduction to Fireware OS.
- Management options (Web UI, CLI and WatchGuard System Manager).
- Licensing and product activation.
- Initial WatchGuard configuration and installation.
Module 2: Initial configuration and basic management
- Connecting to and navigating the Web UI.
- Configuring basic system settings (hostname, DNS and NTP).
- Configuring network interfaces (VLANs and link aggregation).
- Configuring static and dynamic routing (OSPF and BGP).
- Network services (DHCP and DHCP relay).
- Managing objects and aliases.
Module 3: Managing security policies and services
- Firewall policy fundamentals.
- Creating, modifying and managing policies.
- Deep Packet Inspection.
- Proxy services (HTTP, HTTPS, FTP, SMTP and DNS).
- Web content filtering with WebBlocker.
- Application control.
- Intrusion prevention (IPS).
- Gateway antivirus.
- Spam blocking with SpamBlocker.
- Advanced Threat Protection (ATP).
- Data Loss Prevention (DLP).
Module 4: Understanding network address translation (NAT)
- NAT fundamentals.
- Static NAT.
- Dynamic NAT.
- Port Address Translation (PAT).
- 1-to-1 NAT.
- Configuring NAT for hosted services.
- Troubleshooting NAT issues.
Module 5: Managing authentication and access control
- Local user authentication.
- Active Directory integration.
- Single sign-on (SSO).
- Multi-factor authentication (MFA) with WatchGuard AuthPoint.
- Managing users and groups.
- Authentication policies.
- RADIUS and LDAP authentication protocols.
Module 6: Configuring virtual private networks (VPNs)
- VPN fundamentals.
- Site-to-site IPsec VPN (configuration, tunnels and policies).
- Mobile VPN with IPsec (client configuration and profiles).
- Mobile VPN with SSL (portal configuration and authentication).
- VPN troubleshooting.
- Web SSL VPN.
Module 7: Managing logging, reporting and monitoring
- Configuring logging (settings and Syslog servers).
- Real-time traffic monitoring.
- Using WatchGuard Dimension for visibility and reporting.
- Creating custom reports.
- Log analysis and troubleshooting.
Module 8: Implementing advanced network management
- Quality of service (QoS) and bandwidth management.
- Load balancing and failover.
- High availability (HA) and clustering.
- SD-WAN concepts and configuration.
- Managing WatchGuard wireless access points.
- Integrating Wi-Fi security.
Module 9: Centralised management
- Introduction to WatchGuard System Manager (WSM).
- Adding and managing Fireboxes in WSM.
- Centralised policy deployment.
- Updates and firmware management.
- Introduction to cloud-based management with WatchGuard Cloud.
- Automation and APIs.
Module 10: Troubleshooting and optimisation
- Diagnostic tools (Firebox System Manager and CLI).
- Packet capture and analysis.
- Troubleshooting common issues.
- Optimising Firebox performance.
- WatchGuard security best practices.
- Firmware updates.
Audience
This course is intended for:
- Network and system administrators responsible for managing and securing network infrastructures.
- Security engineers who want to master advanced WatchGuard firewall features to strengthen their organisation's security posture.
- Network architects who design secure architectures and need in-depth knowledge of WatchGuard solutions.
- IT support technicians who diagnose and resolve issues involving WatchGuard security equipment.
- Anyone working in an IT environment where WatchGuard firewalls are deployed who wants to develop skills with this essential equipment.
Prerequisites
Participants should have:
- Basic networking knowledge (TCP/IP, routers, switches, firewalls and security).
- Practical experience managing network devices.
- Basic IT skills (configuring Windows or Linux operating systems and advanced command-line use).
- An understanding of technical English.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Comprehensive, up-to-date expertise: gain in-depth knowledge of the latest WatchGuard Fireware v12.11 features to manage and secure complex enterprise networks effectively.
- A practical, hands-on approach: numerous practical exercises and live demonstrations consolidate your understanding and help you apply technical knowledge in real situations.
- Immediately applicable operational skills: develop skills in deploying, configuring, optimising and troubleshooting WatchGuard security solutions so you can work independently quickly.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
WatchGuard, Fireware, Dimension, Firebox and other WatchGuard brands are registered trademarks of WatchGuard Technologies, Inc. or its subsidiaries.