Study Guide Template

Information Technology Studies TAFESA SouthAdelaide: 8207 8350Noarlunga: 82073947

IncorporatingICANWK607A Design and implement wireless network securityInformation Technology

Study GuideSemester 2 2013

6EWS

Enterprise Wireless SecurityCopyright 2012 Government of South Australia

Document ID: 6EWS_StudyGuide_130072900.docx

TABLE OF CONTENTS

Welcome3Subject Details:3Study Assistance3Modes of Delivery4Prerequisites4Resources Required4Online moodle resources4Hardware4Software4Textbook4Competencies5ICANWK607A Design and implement wireless network security (BAAGR)5Employability Skills7Content Overview8Assessment9Assessment Tasks9Assessment Strategy9Assessment Matrix10References10

6EWS_StudyGuide_13021100.docxPage 2 of 11Welcome

Welcome to studying Enterprise Wireless Security.

This subject will introduce students to the skills and knowledge required to mitigate security threats to a wireless local area network (WLAN) by implementing security standards and policies.

The study guide details the schedule to follow to successfully complete this subject including important information about pre-requisite knowledge expected, resources required and most importantly how you will be assessed.

Subject Details:Use the following to summarise the details for your subject -

Lecturer: Email: Telephone: Class Time: Room:

Study AssistanceAt times during your study you might need to ask for help with a problem for example, you might want more practice exercises, or you might want some advice about elective or career options. Dont hesitate to speak to your lecturer about any of these matters. They can help you plan your study and give you advice.

If youre having difficulty with a particular learning component, speak to someone about it. Ask for more help and further explanations. Try to sort the problem out sooner rather than later - dont leave it until your final assessment! Work with other learners. Pool your knowledge and work through problems together in small groups. Discuss issues, share research, review each others work and give one another feedback. However, in most cases, each student must submit their own individual work for assessment.

There are various IT drop-in tutorials available for extra assistance. Please check your email and/or the notice boards outside the IT studies office for more details regarding times and location.

It is important that you feel you have the ability to cope with your study load. If you are having problems please contact us as there are many support services which may be of help to you. The TAFESA website www.tafesa.edu.aushould be referred to for the following policies and responsibilities: Access and Equity Support Services Assessment Health and Safety Plagiarism and cheating Internet User AgreementModes of DeliveryThis subject is delivered using a blended approach; a mixture of online information and classroom delivery.

Resources are available on the TAFESA moodle site:moodle.tafesa.edu.au/

PrerequisitesSubjects may have required prior knowledge. A prerequisite subject must be completed before starting this subject. Occasionally there will be a co-requisite subject; this means that the subject must either be done before or at the same time as this subject. The following table summarises the pre or co requisites for this subject:

Prerequisites5CDD, 4WNI

Co-requisites

Resources RequiredOnline moodle resourcesRefer to moodle.tafesa.edu.au/For the learning activities for each session

Hardware 1 x WLAN Controller (WLAN Switch) 2 x Lightweight APs 802.11 a/b/g/n, PoE capable (optional) 2 each WPA2-certified 802.11 a/b/g/n client devices (USB2) 2 x Autonomous AP (Linksys, Cisco, Netgear etc) 1 x Laptop not continuous use used only for site survey stage and other relevant topics. Minimum 1.4 GHz x86-64 system capable of running Hyper-V (Intel VT or AMD-V enabled) Minimum memory 1GB, recommended enough memory to run the host operating system, plus the memory required for each guest operating system and for applications on the host and guest. 15 GB of free disk space

Software Microsoft Windows Server 2008R2 VMware Workstation 8 or later. Microsoft Windows 7

TextbookAruba Mobility Academy Student HandbookTafe SA Moodle

CompetenciesThis subject will cover the competencies listed below from the National Information Technology Training Package (ICA11):

ICANWK607A Design and implement wireless network security (BAAGR)

ELEMENTPERFORMANCE CRITERIA

1. Plan to implement wireless network security1.1 Research and evaluate organisational and regulatory security policies that have been used to benchmark acceptable network security standards1.2Assess customer requirements and needs against regulatory security compliance and OHS considerations1.3Produce a plan with security-solution documentation for future growth and security needs

2.Design, implement and test guest access services2.1 Analyse and select the appropriate architecture for guest access services2.2Produce a map and set up guest access accounts2.3Configure WLAN controller authorisation2.4Configure the anchor and internal controllers2.5Troubleshoot guest access issues

3.Design, implement and test the security of wireless client devices3.1 Design and configure authentication of clients and management frame protection on clients and controllers3.2Configure access control servers for integration with wireless network3.3Configure client and server-side digital certificate services3.4Troubleshoot secure wireless connectivity services

4. Design, implement and test the integration of wireless network with organisational network admission control systems4.1 Analyse network admission control architectures to assess the feasibility of network integration4.2Analyse the high-level authentication process flow to ensure compatible integration4.3Configure and test the wireless controller for admission control4.4Troubleshoot integration issues of network with access control

5.Evaluate and plan secure wireless connectivity services5.1Configure the intrusion detection system (IDS) to monitor the network activities for malicious activities or policy violations5.2Analyse the report produced by the IDS to review threat-mitigation strategies5.3Update security solution plan to mitigate wireless vulnerabilities to ensure network integrity

6.Manage the requirements to integrate the WLAN with advanced security platforms6.1Evaluate end-to-end security solutions and assess how they integrate with the planned wireless solutions6.2Analyse the firewall configuration requirements of WLANs to ensure compliance with organisational policies6.3Configure and test the WLAN controllers for wired and wireless intrusion prevention and detection system (IPDS) security protection

Employability SkillsThe ICA11 Information and Communications Training Package seeks to ensure that industry-endorsed employability skills are explicitly embedded in units of competency. The application of each skill and the level of detail included in each part of the unit will vary according to industry requirements and the nature of the unit of competency.

Employability skills are both explicit and embedded within units of competency. This means that employability skills are:

embedded in units of competency as part of the other performance requirements that make up the competency as a whole explicitly described within units of competency to enable Training Package users to identify accurately the performance requirements of each unit with regards to employability skills.

ICA11 Information and Communications Technology Training Package also seeks to ensure that employability skills are well-defined and written into units of competency so that they are apparent, clear and can be delivered and assessed as an essential component of unit work outcomes.

We shall be incorporating these in our learning and assessment.

For more information on employability skills visit

http://employabilityskills.training.com.au/

Content Overview

SessionTopicsCompetency

1. 1-WLAN Architecture (up to Aruba Products Review)ICANWK607A

2. Hands-on labsICANWK607A

3. Hands-on labsICANWK607A

4. Microsoft NPS ServerICANWK607A

5. Microsoft NPS Server (continued)ICANWK607A

6. 1-WLAN Architecture (from Aruba Products Review)ICANWK607A

7. 2-Initial SetupICANWK607A

8. 3-WLAN ConfigurationICANWK607A

9. 4-AP ProvisionICANWK607A

10. 16-WIPSICANWK607A

11. Assignment work/ LabsICANWK607A

12. 6EWS Theory TestICANWK607A

13. 6EWS Theory Test - ResitICANWK607A

14. Assignment DueICANWK607A

Competencies: ICANWK607A Design and implement wireless network security (BAAGR)

Refer to moodle site for Learning Activities for each sessionmoodle.tafesa.edu.au/

AssessmentAssessment TasksIn order to pass this subject (i.e. gain competency), you need to complete the following: Practical Activities Theory Test Written Report

Assessment StrategyIn each assessment you will have the opportunity to resit or resubmit once if it is not successfully completed on the first attempt. If there are merit sections the opportunity to gain merit towards a Credit or Distinction is only available on the first attempt of an assessment. That is, merit cannot be gained on a resit or resubmission. All assessments must be successfully completed before being considered as competent in this subject. Ensure that you have read the Plagiarism and cheating policy on the TAFESA website.

Assessment tasks submitted after the due date without an agreed extension will be considered as a resubmission and will not attract any available merit.

This subject is graded as Distinction, Credit, Pass or Fail. There will be merit components within the assessment instruments which will allow you to obtain merit points.

It will be possible to gain a maximum of six merit points. You will receive a grade of D (Distinction) for a merit point score of 5 or greater.You will receive a grade of C (Credit) for a merit point score of 3 to 4.You will receive a grade of P (Pass) for a merit point score of less than 3.

Merit points can be gained as follows :Test has 2 merit componentsPractical Activities has 2 merit componentsWritten report has 2 merit components

The merit components will be clearly identified in each assessment and will cover the competencies listed earlier but will also allow you to demonstrate:A high degree of precision will still meeting deadlinesOriginality and independence of thoughtAbility to apply knowledge and skills in a variety of contexts

Assessment Matrix

ICANWK607A Design and implement wireless network security (BAAGR)ElementPerformance CriteriaTest Practical ActivitiesWritten Report

1. Plan to implement wireless network security1.1 1.21.3

2.Design, implement and test guest access services2.1 2.22.32.42.5

3.Design, implement and test the security of wireless client devices3.1 3.23.33.4

4. Design, implement and test the integration of wireless network with organisational network admission control systems4.1 4.24.34.4

5.Evaluate and plan secure wireless connectivity services5.1 5.25.3

6.Manage the requirements to integrate the WLAN with advanced security platforms6.16.26.3

References

#SUBJECT_REFERENCES#