Defend corporate network perimeter and segmentation: DMZs, stateful firewalls, IDS/IPS signatures, IPsec & WireGuard VPNs, and honeypot deception strategies.
What you'll practise: Harden a pfSense firewall in the practice network; Build a DMZ with NAT and port forwarding rules; Write Suricata rules that detect a simulated attack; Connect two practice sites with a WireGuard VPN; Deploy a Cowrie honeypot and study what it records.