Through this training, you’ll learn about and implement the advanced features of Stormshield Network Security firewalls in networks and operational environments. During the Certified Stormshield Network Operational Technology (CSNOT) training delivered by Stormshield, via the CyberRange platform, you’ll be able to choose to handle an industrial protocol (from S7, OPC UA and Modbus) in a practical exercise: an analysis of data flows through a pre-production industrial firewall, between a Man-Machine Interface (MMI) and two tanks - whose fill level must not exceed a critical threshold. After you’ve configured the firewall to protect the plant, you’ll test it by launching cyber attacks designed to disrupt the normal operation of the plant. The available arsenal includes a Man in the Middle-type attack with Modbus, deleted nodes on the OPC UA server and alterations to orders sent by S7. This practical day ends with work on customised contextual protection signatures.
Once you’ve completed this training, you’ll be able to understand the specifics of industrial protocols and integrate a Stormshield Network Security firewall into an existing operational architecture.
If you are an IT manager, network administrator, or IT and support technician: this course is for you!
However, you must have a valid CSNA certification or have already taken the FSNOT training.
At the heart of CSNOT training
The structure of the course includes both theory and practical exercises. Two methods are offered: in-person courses, either at Stormshield's offices or the client's offices, and online courses, including interaction with an instructor via videoconferencing and over the Airbus CyberRange platform for practical exercises.
You’ll receive course support consisting of a theoretical component, practical work (Labs) and marking. To help you put the course theory into practice, you’ll have a full technical environment at your disposal. And you’ll be able to keep your expertise current for three years by downloading updates to the course material in PDF format on our Stormshield Institute platform.
What our CSNOT training course will enable you to do
- Gain a better insight into the specific characteristics of industrial protocols including S7, OPC UA and Modbus TCP.
- Integrate an SNS box into an existing simple architecture.
- Set up safety rules specific to industrial protocols.
- Customise application signatures according to the controllers being used.
- Configure the safety mode (bypass).
Cost and register to CSNOT
The public price is €1,100 ex. VAT for 7 hours’ training in the classroom and two online certification sessions.
You can register via the training calendar.
CSNOT practical information
The CSNOT training lasts 7 hours. Stormshield offers face-to-face inter-company training sessions at its Paris, Lille and Lyon premises, or via distance learning.
Our trainers also conduct intra-company training (on-site or distance learning) for groups of 5 or more people. This training is provided in France exclusively by the ETN Group and Stormshield. There is a maximum of 8 trainees per session.
CSNOT: certification at your fingertips
Provided you pass the final exam at the end of the course, obviously! You sit the exam online (30 mins, 20 questions). The passmark is 70%. The exam is automatically available on the day following the end of training, for a period of three weeks, at the Institute’s website.
In the event of failure, or inability to take the exam within this time slot, a second and final exam opportunity automatically opens immediately afterwards for a duration of one additional week.
Re-certification
In common with all good software, you’ll need to update your network/security expertise before the third anniversary of your certification. You can do this using our online re-certification kits, which allow you to renew your certification for an additional three years.
As the e-learning, these re-certification kits are not considered training sessions.
CSNOT calendar
Want to find out about dates for network protection training courses? Discover our operational network protection training calendar.
Facilities for trainees with disabilities
Our course facilities are equipped to accommodate and cater to individuals with disabilities. However a prior assessment of the nature of the disability is necessary. To ensure that we anticipate trainees’ needs and make the necessary arrangements, we ask that they inform our training department of their requirements as soon as they get in touch.