[NTLUG:Discuss] [OT/Survey] Network Security Foundations Course -- WAS: Router Needed?

[Bryan J. Smith]

Given the most recent post, I figured this is a good time as any.

I have switched to IT training full-time, being able to focus heavily on
GNU/Linux as of late.  Many of our current offerings are based on the
LPI/Novell-SuSE programs (although we offer Fedora-RedHat/RHCT,
Debian-Xandros/Lindows and LFS-Gentoo-Slackware "companion courses" too
;-), including a planned LPIC-3 Security exam in the future.  We were
not considering a more "entry-level security" training option that
focused on more "canned" firewall Linux distributions because we
considered they would not draw much interest.

But last month at least one moderately-sized publisher (familiar with my
past work for CMP, MacMillan and Ziff-Davis), contacted me about
writing a book on just that.  The book would focusing on popular, canned
firewall Linux distributions and more elementary SOHO (small office,
home office) and, more importantly, SMB (small-to-medium business)
solutions with basic firewalling, proxying and other features with an
integrated intrusion detection system (IDS).  This is really something I
want to do, being that CMP chopped my February 2004 Sys Admin article (I
wrote it more to get the word out on IPCop, so I still appreciated Sys
Admin putting it in).  The original version went more into the outgoing
filtering, IDS and liability issues of not doing so -- very important in
a SMB environment (and not just the "plug'n play" configuration).

So I'm curious how many people would be interested in any more
"entry-level" training.  I'm not talking about like the CompTIA
Security+ (which is not only a joke, but _poorly_ written -- i.e.,
mega-_in_corrections), but more "real-world" applications using Linux.

If so, please answer the following questions ...
[ Probably send your response off-list to me only, remove the CC ]

Q1:  What Type of Attendee Would You Be?

A. SOHO (Small Office, Home Office) User/Enthusiast
B. SMB (Small to Medium Business) IT Support
C. Independent SOHO/SMB Consultant
D. I wouldn't attend myself, but I'd send an employee/subordinate
D. Other (please comment)

Q2:  Course Track (Which would you prefer)?  

A. 5-day Track (GL091 + GL151), or
B. 3-day Track (GL151 only), or
C. 5-day Track (GL151 only), or
C. Other (please comment)

GL091 (2 day):  Pre-Administration Linux
- Command Line Interface (CLI) Linux
- Advanced CLI Linux, Streaming Text

GL151 (3 or 5 (?) day):  Network Security Foundations
- OSI Layer 2-4 Fundamentals (MAC, ARP, ICMP, IP, UDP, TCP)
- Configuring a Firewall Distribution (IPCop, WRT54G)
- Linux IP Security (IPTables/IPRoute2, Auditing/Inspection, Snort IDS)
- Linux IP Routing/VPN (gated/Zebra, HTTP proxy, OpenSWAN/OpenVPNd)

[ NOTE: GL091 is a course that is currently offered with our other
programs.  We're curious how many people would be interested in learning
advanced CLI concepts like streaming text redirection/editing that you
see in scripts, etc... and would be beneficial as part of the track.  Or
not?  We thought we'd offer it both ways, so if you take the GL091, you
arrive on Monday, if not and just the GL151, then on Wednesday. ]

Q3:  Which example platform would you prefer?  

A. Supported/Mainstream x86 (e.g., IPCop Linux/x86), or
B. Hacking/Blackbox non-x86 (e.g., WRT54G Linux/MIPS), or
C. Other (please comment)

Q4:  How much extra would you pay for hardware you get to keep?
[ NOTE: We would still provide hardware _during_ training regardless ]

A. WRT54G (or equivalent) plus mod kit ($100 extra)
B. Standard Form-factor PC (ATX) ($300 extra)
C. Small Form-factor PC (ITX, MicroATX, MiniBTX, 1U Rack) ($500 extra)
D. BYOB Option (you bring your own box if you want to keep it)
E. Other (please comment)

Q5:  How much would you (individually) pay per _day_ (x3 or x5 days)?

A.  $100/day
B.  $200/day
C.  $300/day
D.  $400/day
E.  Other (please comment)

Q6:  How much would your employer (or you if an employer) pay per _day_?

A.  $100/day
B.  $200/day
C.  $300/day
D.  $400/day
E.  Other (please comment)

Q7:  Which training location would you prefer?

A.  Orlando, FL
B.  South Bend, IN
C.  On-site (_if_ you have at least 5 people who would take it)
D.  Other (please comment)


-- 
     Linux Enthusiasts call me anti-Linux.
   Windows Enthusisats call me anti-Microsoft.
 They both must be correct because I have over a
decade of experience with both in mission critical
environments, resulting in a bigotry dedicated to
 mitigating risk and focusing on technologies ...
           not products or vendors
--------------------------------------------------
Bryan J. Smith, E.I.         b.j.smith at ieee.org