Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Plan and design firewall solution
   • Identify organisational and industry standard security threats according to organisational policies and procedures
   • Determine required firewall security according to organisational requirements
   • Research and identify available perimeter security options according to organisational requirements
   • Design security perimeter according to organisational requirements
2. Configure perimeter to secure network
   • Deploy required perimeter devices according to network security requirements
   • Configure required perimeter topology according to network security requirements
   • Configure basic functionality of devices according to network security requirements
   • Configure required advanced functions according to network security requirements
3. Design and configure network devices
   • Back up device configuration according to network security requirements
   • Design and configure perimeter and enable continuity of service during devices upgrades
   • Design and configure perimeter and enable continuity of service in event of device failure
4. Configure VPN solution
   • Configure perimeter for site-to-site virtual private networks (VPNs)
   • Configure perimeter as a remote access VPN server
   • Configure perimeter to allow VPN tunnel forwarding
   • Diagnose and resolve VPN connectivity issues according to network security requirements
5. Test design performance
   • Test required functionality of basic features according to network security requirements
   • Test required functionality of advanced features according to network security requirements
   • Perform required penetration testing and verify perimeter against security requirements
   • Document functionality performance results and submit to required personnel

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

design, configure and test a security perimeter and integrated VPN solution on network devices on at least one occasion.

In the course of the above, the candidate must:

design and configure a firewall solution and network devices

conduct testing of the performance of the perimeter of security devices

document functionality performance results and the finalised process.

---

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

industry standard emerging security issues and the requirement for security policies

industry standard security perimeter issues related to networks, including:

security technologies according to perimeter design

weaknesses of installed perimeter design

principles and techniques for designing and implementing a security perimeter, including:

software and hardware perimeter solutions

organisational network infrastructure

auditing and penetration testing techniques

logging analysis techniques.

---