OmnıLearn
← All courses

Firewall: architecture and deployment

Duration: 11 hoursLanguage: FrenchLevel: IntermediateSoftware: OPNsense firewall, virtualised lab network (WAN, LAN, DMZ)
Prerequisites:Being able to read an IP address and a subnet mask. If that is hazy, module 0 covers the essentials.Being comfortable with a Linux command line: ping, ssh, reading a log file.A PC able to run a few virtual machines to build the lab.

$39

Lifetime access · Secure payment by Stripe

Refund within 14 days as long as you have not opened more than one lesson.

Description

A complete course on designing and deploying a firewall, built around an OPNsense reference firewall on a virtualised lab network (WAN, LAN and DMZ zones). Seven modules cover a networking refresher, what a firewall does, the first policy and NAT, zoning and the DMZ, advanced filtering, UTM (proxy, antivirus, IDS/IPS), defending against flood and application-layer attacks, firewalking and mapping, and finally validation testing with a closing challenge. Six guided hands-on workshops (one per module, from module 1 to module 6) and a final exam round out the course.

Curriculum

Lessons marked “open access” work without an account.

What you'll learn

  • Write a default-deny filtering policy, and understand why rule order matters
  • Configure outbound NAT and a port forward to a server in the DMZ
  • Build a flow matrix between LAN, DMZ and WAN, then turn it into rules
  • Set up Squid, ClamAV and Suricata without blocking legitimate traffic
  • Rate-limit a SYN flood with per-source thresholds and synproxy
  • Infer a firewall's rules from the outside, then validate your own with a test plan

Skills you'll gain

Firewall filtering policy and NATNetwork segmentation, zones and DMZUTM features: proxy, antivirus, IDS/IPSDefending against flood and application-layer attacksNetwork mapping and firewalking

Content type

Leçons texteAteliers pratiquesQuiz de moduleExamen final

Your instructor

Équipe OmniLearn

Written by the OmniLearn instructor team, who also deliver official Azure security (AZ-500) sessions to companies. The labs run on a real OPNsense firewall in a virtual machine, and each lesson shows the date it was last checked against the official documentation.

We measure site traffic (GA4) and, if you say yes, we also tune Meta ads. Nothing is stored on your device before you answer, and your choice sticks for 6 months.