Free Network Security Engineer Roadmap
Networks first, then the security of them: Network+ and CCNA for the plumbing, Security+ for the controls, then firewalls, IDS, segmentation and packet analysis on real machines.
5 steps · 28 free videos · 10 free reads
Create your free account to open all 2,396 free items
The 38 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.
Before you start
Read these first
The free roadmap
5 steps, in order
The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually). Infrastructure Labs labs are a separate add-on.
Start here →
Step 1 — Networking foundation
Subnets, routing, switching — the fluency the job is built on. Pick Network+ or CCNA (Step 2): most learners need one of them, not both.
Follow the free CompTIA Network+ (N10-009) roadmap.
🔒 The full roadmap adds here: 4 full courses · hands-on labs 1–56 of 270 (courses in Membership · 12 labs in Membership · 44 labs in Infrastructure Labs)
- Course · CompTIA Network+ Cert. (N10-009): The Total Course · 🔒 Membership
- Course · CompTIA Network+ (N10-009) Crash Course · 🔒 Membership
- Course · CompTIA Network+ Labs · 🔒 Membership
- Course · Master Wireshark 3 in 5 Days · 🔒 Membership
- Lab 1 of 270 · Configure IP Addresses [Guided] · 🔒 Infrastructure Labs
- Lab 2 of 270 · Configure Network Services [Guided] · 🔒 Infrastructure Labs
- Lab 3 of 270 · Use Windows and Linux Network Command-Line Tools [Guided] · 🔒 Infrastructure Labs
- Lab 4 of 270 · Configure Windows Defender Firewall to Support Various Scenarios [Guided] · 🔒 Infrastructure Labs
- Lab 5 of 270 · Troubleshoot Network Issues [Guided] · 🔒 Infrastructure Labs
- Lab 6 of 270 · Examine Network Communications by Using Wireshark [Guided] · 🔒 Infrastructure Labs
- Lab 7 of 270 · Windows Network Command-Line Tools to Configure, Test, and Troubleshoot Network Connectivity [Guided] · 🔒 Infrastructure Labs
- Lab 8 of 270 · Perform Network Analysis [Guided] · 🔒 Infrastructure Labs
- Lab 9 of 270 · Use Wireshark to Perform Network Sniffing [Guided] · 🔒 Infrastructure Labs
- Lab 10 of 270 · Configure Remote Access [Guided] · 🔒 Infrastructure Labs
- Lab 11 of 270 · Perform Network Troubleshooting [Guided] · 🔒 Infrastructure Labs
- Lab 12 of 270 · Use IP Addressing [Guided] · 🔒 Infrastructure Labs
- Lab 13 of 270 · Configure Network Services [Guided] · 🔒 Infrastructure Labs
- Lab 14 of 270 · Use Linux and Windows Network Command-Line Tools [Guided] · 🔒 Infrastructure Labs
- Lab 15 of 270 · Perform Network Analysis [Guided] · 🔒 Infrastructure Labs
- Lab 16 of 270 · Use Wireshark to Examine Network Communications [Guided] · 🔒 Infrastructure Labs
- Lab 17 of 270 · Configure Remote Access [Guided] · 🔒 Infrastructure Labs
- Lab 18 of 270 · Implement Name Resolution [Guided] · 🔒 Infrastructure Labs
- Lab 19 of 270 · Implement DHCP [Guided] · 🔒 Infrastructure Labs
- Lab 20 of 270 · Analyze Network Communications [Guided] · 🔒 Infrastructure Labs
- Lab 21 of 270 · Configure an FTP Server with Linux [Guided] · 🔒 Infrastructure Labs
- Lab 22 of 270 · Configure Rsync and Scp File Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 23 of 270 · Can You Document the Server in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 24 of 270 · Can You Configure Security for SSH in Linux? [Expert] · 🔒 Infrastructure Labs
- Lab 25 of 270 · Manage Server Startup Options in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 26 of 270 · Can You Deploy an Apache Web Server in Linux? [Expert] · 🔒 Infrastructure Labs
- Lab 27 of 270 · Can You Configure ACL Permissions in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 28 of 270 · Can You Perform a Network Vulnerability Assessment by Using Nmap? [Advanced] · 🔒 Infrastructure Labs
- Lab 29 of 270 · Can You Configure Linux Rsyslog Forwarding? [Advanced] · 🔒 Infrastructure Labs
- Lab 30 of 270 · Configure IPv4 and IPv6 Addressing for Linux [Guided] · 🔒 Infrastructure Labs
- Lab 31 of 270 · Can You Configure Linux IPv4 Routing? [Advanced] · 🔒 Infrastructure Labs
- Lab 32 of 270 · Can You Install and Configure a Linux DNS Server [Advanced]? · 🔒 Infrastructure Labs
- Lab 33 of 270 · Can You Troubleshoot Linux Network Issues? [Expert] · 🔒 Infrastructure Labs
- Lab 34 of 270 · Implement Wireshark [Guided] · 🔒 Infrastructure Labs
- Lab 35 of 270 · Perform an Effective Capture [Guided] · 🔒 Infrastructure Labs
- Lab 36 of 270 · Use Display Filters [Guided] · 🔒 Infrastructure Labs
- Lab 37 of 270 · Modify Display Filter Functionality [Guided] · 🔒 Infrastructure Labs
- Lab 38 of 270 · Recreate Data Flows [Guided] · 🔒 Infrastructure Labs
- Lab 39 of 270 · Recreate Data Content [Guided] · 🔒 Infrastructure Labs
- Lab 40 of 270 · Use Wireshark to Discover Evidence of Network Attacks [Guided] · 🔒 Infrastructure Labs
- Lab 41 of 270 · Can You Customize Profiles and Filters in Wireshark? [Advanced] · 🔒 Infrastructure Labs
- Lab 42 of 270 · Can You Display Customizations and Exploration of Captured Traffic by Using Wireshark? [Advanced] · 🔒 Infrastructure Labs
- Lab 43 of 270 · Can You Extract Intercepted Files and Perform Password Attack Discovery? [Advanced] · 🔒 Infrastructure Labs
- Lab 44 of 270 · Can You Explore the Varied Uses of Wireshark? [Expert] · 🔒 Infrastructure Labs
- Lab 45 of 270 · Applying Filters to TCPDump and Wireshark · 🔒 Membership
- Lab 46 of 270 · DNS as a Remote Shell · 🔒 Membership
- Lab 47 of 270 · Firewall Setup and Configuration · 🔒 Membership
- Lab 48 of 270 · Gap Analysis of Firewall Rules · 🔒 Membership
- Lab 49 of 270 · Implementing Least-Privilege on Windows · 🔒 Membership
- Lab 50 of 270 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
- Lab 51 of 270 · Setting Up Zones in a Firewall · 🔒 Membership
- Lab 52 of 270 · Snorby Setup and Operation · 🔒 Membership
- Lab 53 of 270 · TCPDump · 🔒 Membership
- Lab 54 of 270 · Tweaking Firewall Rules for Detection · 🔒 Membership
- Lab 55 of 270 · Using Snort and Wireshark to Analyze Traffic · 🔒 Membership
- Lab 56 of 270 · Wireshark · 🔒 Membership
Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.
Step 2 — Enterprise networking
Configure real Cisco kit the way enterprises run it.
Follow the free Cisco CCNA (200-301) roadmap.
🔒 The full roadmap adds here: 5 full courses · hands-on labs 57–68 of 270 (courses in Membership · 12 labs in Infrastructure Labs)
- Course · CCNA v1.1 (200-301) Video Training Series · 🔒 Membership
- Course · Cisco CCNA (200-301) Master Class · 🔒 Membership
- Course · NEW Cisco CCNA IPv4 Course! · 🔒 Membership
- Course · Cisco CCNA: The A, B, C's of IPv6 · 🔒 Membership
- Course · Cisco CCNA Labs · 🔒 Membership
- Lab 57 of 270 · Configure Static Routes [Guided] · 🔒 Infrastructure Labs
- Lab 58 of 270 · Configure Switch VLANs [Guided] · 🔒 Infrastructure Labs
- Lab 59 of 270 · Configure Routers and Switches [Guided] · 🔒 Infrastructure Labs
- Lab 60 of 270 · Configure VLANs and Trunking on a Switch [Guided] · 🔒 Infrastructure Labs
- Lab 61 of 270 · Perform Subnetting and Network Segmentation [Guided] · 🔒 Infrastructure Labs
- Lab 62 of 270 · Implement Access Control Lists (ACLs) [Guided] · 🔒 Infrastructure Labs
- Lab 63 of 270 · Configure the OSPF Routing Protocol [Guided] · 🔒 Infrastructure Labs
- Lab 64 of 270 · Set Up Network Address Translation (NAT) [Guided] · 🔒 Infrastructure Labs
- Lab 65 of 270 · Configure DHCP on a Router [Guided] · 🔒 Infrastructure Labs
- Lab 66 of 270 · Configure IPv6 Addressing and Routing [Guided] · 🔒 Infrastructure Labs
- Lab 67 of 270 · Troubleshoot Network Connectivity [Guided] · 🔒 Infrastructure Labs
- Lab 68 of 270 · Configure CDP and LLDP [Guided] · 🔒 Infrastructure Labs
Step 3 — Security foundation
The controls you will be putting on the network.
Follow the free CompTIA Security+ (SY0-701) roadmap.
🔒 The full roadmap adds here: 6 full courses · hands-on labs 69–204 of 270 (courses in Membership · 59 labs in Membership · 77 labs in Infrastructure Labs)
- Course · CompTIA Security+ Certification (SY0-701): The Total Course · 🔒 Membership
- Course · Security+ (SY0-701) - Self-paced Course! · 🔒 Membership
- Course · CompTIA Security+ SY0-701: General Security Concepts · 🔒 Membership
- Course · CompTIA Security+: Viruses, Threats and Compromise Indicators · 🔒 Membership
- Course · CompTIA Security+ Labs · 🔒 Membership
- Course · Security+ Just Labs: The Ultimate Hands-On Bootcamp · 🔒 Membership
- Lab 69 of 270 · Additional Scanning Options · 🔒 Membership
- Lab 70 of 270 · Basics of Metasploit · 🔒 Membership
- Lab 71 of 270 · BCP DRP and Test Planning · 🔒 Membership
- Lab 72 of 270 · BitLocker Setup · 🔒 Membership
- Lab 73 of 270 · Block Incoming Traffic on Known Port · 🔒 Membership
- Lab 74 of 270 · Comparing Controls · 🔒 Membership
- Lab 75 of 270 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
- Lab 76 of 270 · Creation of BCP and DRP · 🔒 Membership
- Lab 77 of 270 · Data Backup to Prep for Recovery · 🔒 Membership
- Lab 78 of 270 · Event Log · 🔒 Membership
- Lab 79 of 270 · Host Data Integrity Baselining · 🔒 Membership
- Lab 80 of 270 · Installing Patches and Testing Software · 🔒 Membership
- Lab 81 of 270 · MITRE - Attack · 🔒 Membership
- Lab 82 of 270 · MITRE - Defend · 🔒 Membership
- Lab 83 of 270 · Network Discovery · 🔒 Membership
- Lab 84 of 270 · Network Topology Generation · 🔒 Membership
- Lab 85 of 270 · Open Source Collection · 🔒 Membership
- Lab 86 of 270 · Open Source Password Cracking · 🔒 Membership
- Lab 87 of 270 · Scanning From Windows · 🔒 Membership
- Lab 88 of 270 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
- Lab 89 of 270 · Manage Users and Groups in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 90 of 270 · Manage Users and Groups in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 91 of 270 · Can You Manage Users and Groups in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 92 of 270 · Configure Password Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 93 of 270 · Configure Password Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 94 of 270 · Can You Manage Password Requirements in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 95 of 270 · Configure Standard Linux Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 96 of 270 · Configure Standard Windows Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 97 of 270 · Can You Configure Standard Linux and Windows Permissions? [Advanced] · 🔒 Infrastructure Labs
- Lab 98 of 270 · Can You Manage Access in Linux and Windows? [Expert] · 🔒 Infrastructure Labs
- Lab 99 of 270 · Can You Harden the SSH Service on a Linux Server? [Advanced} · 🔒 Infrastructure Labs
- Lab 100 of 270 · Force Users to Change Password Upon First Sign In [Guided] · 🔒 Infrastructure Labs
- Lab 101 of 270 · Remove a User Account [Guided] · 🔒 Infrastructure Labs
- Lab 102 of 270 · Can You Add Server Access for a Group? [Advanced] · 🔒 Infrastructure Labs
- Lab 103 of 270 · Examine Log Files to Block Bad Actors [Guided] · 🔒 Infrastructure Labs
- Lab 104 of 270 · Harden a Server by Limiting Access to a Single Subnet [Guided] · 🔒 Infrastructure Labs
- Lab 105 of 270 · Can You Harden a Server by Restricting Access per Protocol? [Advanced] · 🔒 Infrastructure Labs
- Lab 106 of 270 · Can You Harden a Linux Web Server? [Expert] · 🔒 Infrastructure Labs
- Lab 107 of 270 · Deploy a Private Certificate Authority [Guided] · 🔒 Infrastructure Labs
- Lab 108 of 270 · Configure Custom Certificate Templates and Deployment Options [Guided] · 🔒 Infrastructure Labs
- Lab 109 of 270 · Manually Request a PKI Certificate [Guided] · 🔒 Infrastructure Labs
- Lab 110 of 270 · Can You Deploy a Certificate Authority and Issue Certificates? [Advanced] · 🔒 Infrastructure Labs
- Lab 111 of 270 · Enable DNSSEC [Guided] · 🔒 Infrastructure Labs
- Lab 112 of 270 · Use EFS To Encrypt Files on NTFS Volumes [Guided] · 🔒 Infrastructure Labs
- Lab 113 of 270 · Can You Secure DNS Resource Records and Windows NTFS Volume File Objects? [Advanced] · 🔒 Infrastructure Labs
- Lab 114 of 270 · Enable SSL/TLS on a Website [Guided] · 🔒 Infrastructure Labs
- Lab 115 of 270 · Enable Client SSL/TLS [Guided] · 🔒 Infrastructure Labs
- Lab 116 of 270 · Can You Secure a Website with an SSL/TLS Certificate? [Advanced] · 🔒 Infrastructure Labs
- Lab 117 of 270 · Can You Use PKI to Secure a Network Environment? [Expert] · 🔒 Infrastructure Labs
- Lab 118 of 270 · Cryptography: Attacking Classic Ciphers · 🔒 Membership
- Lab 119 of 270 · Cryptography: Breaking Repeated Key XOR Cipher · 🔒 Membership
- Lab 120 of 270 · Cryptography: Breaking Weak RSA Keys · 🔒 Membership
- Lab 121 of 270 · Cryptography: Decrypting Files With a Dictionary Attack · 🔒 Membership
- Lab 122 of 270 · Cryptography: Forging Digital Signatures · 🔒 Membership
- Lab 123 of 270 · Cryptography: Forging MACs With Side Channels · 🔒 Membership
- Lab 124 of 270 · Cryptography: Hidden Veracrypt Containers · 🔒 Membership
- Lab 125 of 270 · Cryptography: Man In the Middle Attack · 🔒 Membership
- Lab 126 of 270 · Cryptography: Password Cracking · 🔒 Membership
- Lab 127 of 270 · Cryptography: Setting Up HTTPS in Windows and Linux · 🔒 Membership
- Lab 128 of 270 · Cryptography: Setting Up Two Factor Authentication · 🔒 Membership
- Lab 129 of 270 · Cryptography: Steganography · 🔒 Membership
- Lab 130 of 270 · Cryptography: Using GPG for Encryption and Key Management · 🔒 Membership
- Lab 131 of 270 · Cryptography: Using the OpenSSL CLI Tool · 🔒 Membership
- Lab 132 of 270 · Getting Started with Security Concepts in Windows and Linux Environments [Getting Started] · 🔒 Infrastructure Labs
- Lab 133 of 270 · Configure Windows Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 134 of 270 · Configure Linux Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 135 of 270 · Configure Security Settings by Using Microsoft Group Policy [Guided] · 🔒 Infrastructure Labs
- Lab 136 of 270 · Identify Non-secure Network Traffic [Guided] · 🔒 Infrastructure Labs
- Lab 137 of 270 · Can You Secure Host Settings Through Firewall Settings and Group Policy? [Advanced] · 🔒 Infrastructure Labs
- Lab 138 of 270 · Configure IPSec [Guided] · 🔒 Infrastructure Labs
- Lab 139 of 270 · Configure a Windows PPTP VPN [Guided] · 🔒 Infrastructure Labs
- Lab 140 of 270 · Can You Secure Network Access? [Advanced] · 🔒 Infrastructure Labs
- Lab 141 of 270 · Can You Harden Windows Hosts? [Expert] · 🔒 Infrastructure Labs
- Lab 142 of 270 · Back Up and Restore Data in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 143 of 270 · Back Up and Restore Data in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 144 of 270 · Can You Back Up and Restore Data in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 145 of 270 · Configure and Test the Firewall in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 146 of 270 · Configure and Test the Firewall in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 147 of 270 · Can You Configure the Firewall in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 148 of 270 · Configure Patch Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 149 of 270 · Configure Update Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 150 of 270 · Can You Configure Update Management in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 151 of 270 · Can You Manage Windows and Linux Systems? [Expert] · 🔒 Infrastructure Labs
- Lab 152 of 270 · Getting Started with Cybersecurity Defensive Tools [Getting Started] · 🔒 Infrastructure Labs
- Lab 153 of 270 · Managing Log Files on a Windows Server [Guided] · 🔒 Infrastructure Labs
- Lab 154 of 270 · Configure Windows Defender on a Windows System [Guided] · 🔒 Infrastructure Labs
- Lab 155 of 270 · Configure a Local Security Policy on Server 2016 [Guided] · 🔒 Infrastructure Labs
- Lab 156 of 270 · Can You Use the Sysinternals Suite to Review Permissions on a Windows System? [Advanced] · 🔒 Infrastructure Labs
- Lab 157 of 270 · Using Encryption to Secure Information [Guided] · 🔒 Infrastructure Labs
- Lab 158 of 270 · Can You Configure Drive Encryption by Using LUKS and BitLocker? [Advanced] · 🔒 Infrastructure Labs
- Lab 159 of 270 · Can You Configure Remote Administration by Using PuTTY and SSH? [Expert] · 🔒 Infrastructure Labs
- Lab 160 of 270 · Use a Password Cracking Utility in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 161 of 270 · Can You Use PowerShell to Gather Computer Information in Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 162 of 270 · Escalate Privileges in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 163 of 270 · Can You Enumerate Network Services by Using Port Scanning in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 164 of 270 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
- Lab 165 of 270 · Centralized Monitoring · 🔒 Membership
- Lab 166 of 270 · CIRP Creation and Disaster · 🔒 Membership
- Lab 167 of 270 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
- Lab 168 of 270 · Data Downloads and Validation · 🔒 Membership
- Lab 169 of 270 · Force Point: DLP Email Overview · 🔒 Membership
- Lab 170 of 270 · Force Point: DLP Network Overview · 🔒 Membership
- Lab 171 of 270 · Identifying Key Assets · 🔒 Membership
- Lab 172 of 270 · Leveraging Internal Intelligence Resources · 🔒 Membership
- Lab 173 of 270 · Log Correlation & Analysis to Identify Potential IOC · 🔒 Membership
- Lab 174 of 270 · Monitoring and Verifying Management Systems · 🔒 Membership
- Lab 175 of 270 · Open and Close Ports on Windows 7 · 🔒 Membership
- Lab 176 of 270 · Phishing · 🔒 Membership
- Lab 177 of 270 · Post Incident Service Restoration · 🔒 Membership
- Lab 178 of 270 · Ransomware · 🔒 Membership
- Lab 179 of 270 · Recover from SQL Injection Attack · 🔒 Membership
- Lab 180 of 270 · Sensitive Information Identification · 🔒 Membership
- Lab 181 of 270 · Vulnerability Identification and Remediation · 🔒 Membership
- Lab 182 of 270 · Use Git to Manage Code [Guided] · 🔒 Infrastructure Labs
- Lab 183 of 270 · Analyze Log Files for Malicious Activity [Guided] · 🔒 Infrastructure Labs
- Lab 184 of 270 · Identify and Manage Old Software [Guided] · 🔒 Infrastructure Labs
- Lab 185 of 270 · Deploy a Docker Container [Guided] · 🔒 Infrastructure Labs
- Lab 186 of 270 · Deploy a Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 187 of 270 · Configure a Jump Box [Guided] · 🔒 Infrastructure Labs
- Lab 188 of 270 · Manage File Redundancy for Resilience and Recovery [Guided] · 🔒 Infrastructure Labs
- Lab 189 of 270 · Manage System Restore Using Windows 11 [Guided] · 🔒 Infrastructure Labs
- Lab 190 of 270 · Use Alerting and Monitoring Tools [Guided] · 🔒 Infrastructure Labs
- Lab 191 of 270 · Digitally Sign Code To Verify Authenticity [Guided] · 🔒 Infrastructure Labs
- Lab 192 of 270 · Configure a Wireless Access Point [Guided] · 🔒 Infrastructure Labs
- Lab 193 of 270 · Sanitize Storage Disks [Guided] · 🔒 Infrastructure Labs
- Lab 194 of 270 · Enhance Security by Using SELinux [Guided] · 🔒 Infrastructure Labs
- Lab 195 of 270 · Manage Configurations by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 196 of 270 · Configure Devices by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 197 of 270 · Perform Security Audits on Linux Services [Guided] · 🔒 Infrastructure Labs
- Lab 198 of 270 · Baseline Systems in Accordance with Policy Documentation · 🔒 Membership
- Lab 199 of 270 · Conduct Baseline Comparison for Indicators of Compromise · 🔒 Membership
- Lab 200 of 270 · Creating a Baseline Using Autopsy · 🔒 Membership
- Lab 201 of 270 · Creating a Secondary Baseline and Conducting Comparison · 🔒 Membership
- Lab 202 of 270 · Manually Creating a Baseline with MD5Deep · 🔒 Membership
- Lab 203 of 270 · Recovering Data and Data Integrity Checks · 🔒 Membership
- Lab 204 of 270 · Windows Deployment Services · 🔒 Membership
Step 4 — Firewalls, IDS and traffic analysis
Build and tune the controls, segment cloud and virtual networks, then read the traffic they see. Vendor firewall certification (PCNSE, Fortinet FCP) and CCNP Security come next on the job; they are not sold here.
🔒 The full roadmap adds here: 3 full courses · hands-on labs 205–259 of 270 (courses in Membership · 31 labs in Membership · 24 labs in Infrastructure Labs)
- Course · pfSense Fundamentals - Secure Your Network With pfSense · 🔒 Membership
- Course · Snort Intrusion Detection, Rule Writing, and PCAP Analysis · 🔒 Membership
- Course · The Complete Cyber Security Course! Volume 2: Network Security · 🔒 Membership
- Lab 205 of 270 · Assess A High-Risk System · 🔒 Membership
- Lab 206 of 270 · Auditing Service Accounts · 🔒 Membership
- Lab 207 of 270 · Holistic Network Identification and Protection · 🔒 Membership
- Lab 208 of 270 · Implement Single System Changes in Firewall · 🔒 Membership
- Lab 209 of 270 · Protect Against Beaconing · 🔒 Membership
- Lab 210 of 270 · Rogue Device Identification and Blocking · 🔒 Membership
- Lab 211 of 270 · Setting Up SYSLOG Forwarding From a Windows System · 🔒 Membership
- Lab 212 of 270 · Sinkholing C2 Traffic · 🔒 Membership
- Lab 213 of 270 · Threat Designation · 🔒 Membership
- Lab 214 of 270 · Windows System Hardening with PowerShell · 🔒 Membership
- Lab 215 of 270 · Comprehensive Threat Response · 🔒 Membership
- Lab 216 of 270 · Conduct Supplemental Monitoring · 🔒 Membership
- Lab 217 of 270 · Create Custom Snort Rules · 🔒 Membership
- Lab 218 of 270 · Monitoring for False Positives · 🔒 Membership
- Lab 219 of 270 · Monitoring Network Traffic · 🔒 Membership
- Lab 220 of 270 · Monitoring Network Traffic for Potential IOA/IOC · 🔒 Membership
- Lab 221 of 270 · SNORT Configuration and Operation Lab · 🔒 Membership
- Lab 222 of 270 · Analyze Browser-based Heap Spray Attack · 🔒 Membership
- Lab 223 of 270 · Automated in-Depth Packet Decoding · 🔒 Membership
- Lab 224 of 270 · Clonezilla_Network · 🔒 Membership
- Lab 225 of 270 · Identifying Intrusion and Mitigating Attacks with RHEL Server · 🔒 Membership
- Lab 226 of 270 · Identifying Malicious Callbacks · 🔒 Membership
- Lab 227 of 270 · Identifying Malicious Network Connections · 🔒 Membership
- Lab 228 of 270 · Incident Detection and Identification · 🔒 Membership
- Lab 229 of 270 · Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting) · 🔒 Membership
- Lab 230 of 270 · Parse Files Out of Network Traffic · 🔒 Membership
- Lab 231 of 270 · Searching for Indicators of Compromise · 🔒 Membership
- Lab 232 of 270 · Setting up Filters and Queries in Kibana · 🔒 Membership
- Lab 233 of 270 · Use pfTop to Analyze Network Traffic · 🔒 Membership
- Lab 234 of 270 · Verify Attributes of Identified SilentBanker Intrusion · 🔒 Membership
- Lab 235 of 270 · Verify Attributes of Intrusion Through Additional Analysis · 🔒 Membership
- Lab 236 of 270 · Implement a Virtual Network Gateway in Azure [Advanced] · 🔒 Infrastructure Labs
- Lab 237 of 270 · Implement an Azure ExpressRoute Circuit [Advanced] · 🔒 Infrastructure Labs
- Lab 238 of 270 · Implement Name Resolution in Azure [Advanced] · 🔒 Infrastructure Labs
- Lab 239 of 270 · Implement an Azure Virtual WAN [Advanced] · 🔒 Infrastructure Labs
- Lab 240 of 270 · Implement a Service Endpoint in Azure [Advanced] · 🔒 Infrastructure Labs
- Lab 241 of 270 · Implement a Private Endpoint in Azure [Advanced] · 🔒 Infrastructure Labs
- Lab 242 of 270 · Can You Implement and Harden an Azure Networking Solution? [Expert] · 🔒 Infrastructure Labs
- Lab 243 of 270 · Implement Azure Load Balancer in Azure [Advanced] · 🔒 Infrastructure Labs
- Lab 244 of 270 · Implement Azure Traffic Manager [Advanced] · 🔒 Infrastructure Labs
- Lab 245 of 270 · Implement Azure Application Gateway [Advanced] · 🔒 Infrastructure Labs
- Lab 246 of 270 · Implement Azure Front Door [Advanced] · 🔒 Infrastructure Labs
- Lab 247 of 270 · Implement Azure Firewall [Advanced] · 🔒 Infrastructure Labs
- Lab 248 of 270 · Monitor Azure Virtual Network [Advanced] · 🔒 Infrastructure Labs
- Lab 249 of 270 · Can You Implement and Monitor an Azure Networking Solution? [Expert] · 🔒 Infrastructure Labs
- Lab 250 of 270 · Configure VRF Lite [Guided] · 🔒 Infrastructure Labs
- Lab 251 of 270 · Configure the NSX Distributed Firewall [Guided] · 🔒 Infrastructure Labs
- Lab 252 of 270 · Configure the NSX Gateway Firewall [Guided] · 🔒 Infrastructure Labs
- Lab 253 of 270 · Configure Distributed Intrusion Detection [Guided] · 🔒 Infrastructure Labs
- Lab 254 of 270 · Can You Configure VRF Lite, NSX Distributed Firewall, NSX Gateway Firewall, and Distributed Intrusion Detection? [Advanced] · 🔒 Infrastructure Labs
- Lab 255 of 270 · Analyze web traffic with URL Analysis [Guided] · 🔒 Infrastructure Labs
- Lab 256 of 270 · Configure Network Address Translation [Guided] · 🔒 Infrastructure Labs
- Lab 257 of 270 · Configure Load Balancing [Guided] · 🔒 Infrastructure Labs
- Lab 258 of 270 · Can You Configure URL Analysis, Network Address Translation, Load Balancing, and VPNs? [Advanced] · 🔒 Infrastructure Labs
- Lab 259 of 270 · Can you manage and secure network traffic with NSX-T [Expert] · 🔒 Infrastructure Labs
Step 5 — Run the network
The operations skills that keep a secure network up: firewalls and syslog, routing and SSH, host discovery, Snort tuning and packet captures.
🔒 The full roadmap adds here: 1 full course · hands-on labs 260–270 of 270 (Membership)
- Course · Linux Network Administration · 🔒 Membership
- Lab 260 of 270 · Analyze Malicious Network Traffic · 🔒 Membership
- Lab 261 of 270 · Denial of Service PCAP Analysis · 🔒 Membership
- Lab 262 of 270 · Host Identification Scanning via Windows · 🔒 Membership
- Lab 263 of 270 · Host Identification Scanning with Linux · 🔒 Membership
- Lab 264 of 270 · Identify Access to a LINUX Firewall Through SYSLOG Service · 🔒 Membership
- Lab 265 of 270 · Intro to Linux - Routing and SSH Tunnels · 🔒 Membership
- Lab 266 of 270 · LNX101 - Setting Up a Firewall With UFW and Firewalld · 🔒 Membership
- Lab 267 of 270 · LNX101 - Telnet vs. SSH · 🔒 Membership
- Lab 268 of 270 · Scanning with Nmap · 🔒 Membership
- Lab 269 of 270 · Securing Linux - Firewalls · 🔒 Membership
- Lab 270 of 270 · Snort Signatures, IDS Tuning, and Blocking · 🔒 Membership
Where it leads
Where this career leads
Do it hands-on
The full Network Security Engineer roadmap
The same steps with every course and the hands-on labs, and your progress tracked.
The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytimeAdvanced
AI-Driven Security Engineering
Become the Cyber Security Expert the AI Era Needs.
StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”
Explore the AI Master’s →Create your free account to open all 2,396 free items
The 38 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.