Course Brief

Network Security & Architecture

Defensive network engineering — packet analysis, firewalls, IDS/IPS, VPNs, wireless defence, NAC and SOC-level monitoring.

Six months on the defender's side of the wire. The programme treats the network as something you design, instrument and monitor — not something you scan once and forget.

It begins with enterprise architecture and protocol-level packet analysis in Wireshark, then builds the controls: VLAN and switching security, stateful versus stateless firewalls, NAT and DMZ design, IDS deployment and IPS with Snort.

The later modules cover VPN and tunnelling protocols, WPA2/WPA3 wireless security and rogue AP detection, NAC with RADIUS, DoS and DDoS mitigation, hardening baselines, and finally SOC monitoring — turning all of the above into alerts a human will actually read.

Curriculum · 15 Modules
  1. 01 Enterprise Network Architecture Overview
  2. 02 TCP/IP & UDP Protocol Packet Analysis
  3. 03 Wireshark Packet Sniffing & Traffic Analysis
  4. 04 Routing & Switching Security (VLANs)
  5. 05 Stateful vs. Stateless Firewall Setup
  6. 06 Network Address Translation (NAT) & DMZ
  7. 07 Intrusion Detection Systems (IDS) Setup
  8. 08 Intrusion Prevention Systems (IPS) & Snort
  9. 09 VPN & Tunneling Security Protocols
  10. 10 Wireless Security & Encryption (WPA2/WPA3)
  11. 11 Rogue AP Detection & Wireless Defense
  12. 12 Network Access Control (NAC) & RADIUS
  13. 13 Denial of Service (DoS/DDoS) Mitigation
  14. 14 Network Hardening & Security Baselines
  15. 15 Security Operations Center (SOC) Monitoring

Enrol in Network Security & Architecture

Send us your background and we will confirm the next batch date, the schedule and what you need to bring.