CSNOT training course

Home > Our support  > Services  > Training  > OT environment training > CSNOT training course

Through this training, you’ll learn about and implement the advanced features of Stormshield Network Security firewalls in networks and operational environments.

During the Certified Stormshield Network Operational Technology (CSNOT) training delivered by Stormshield, via the CyberRange platform, you’ll be able to choose to handle an industrial protocol (from S7, OPC UA and Modbus) in a practical exercise: an analysis of data flows through a pre-production industrial firewall, between a Man-Machine Interface (MMI) and two tanks - whose fill level must not exceed a critical threshold. After you’ve configured the firewall to protect the plant, you’ll test it by launching cyber attacks designed to disrupt the normal operation of the plant. The available arsenal includes a Man in the Middle-type attack with Modbus, deleted nodes on the OPC UA server and alterations to orders sent by S7. This practical day ends with work on customised contextual protection signatures.

Once you’ve completed this training, you’ll be able to understand the specifics of industrial protocols and integrate a Stormshield Network Security firewall into an existing operational architecture.

At the heart of CSNOT training

If you are...

An automation expert, IT manager, network administrator, or an IT and support technician in OT environments: this training is for you! However, you must have a valid CSNA certification or have already taken the FSNOT training.

A CSNOT training course in person or via distance learning?

The training delivered by Stormshield is either face to face (face-to-face teaching in the classroom) or distance learning (trainer virtually present via a video system). After a short theoretical introduction, this training day is based on a large volume of practical work.

You’ll receive course support consisting of a theoretical component, practical work (Labs) and marking. To help you put the course theory into practice, you’ll have a full technical environment at your disposal.

And you’ll be able to keep your expertise current for three years by downloading updates to the course material in PDF format on our Institute platform.

What our CSNOT training will enable you to do

  • Gain a better insight into the specific characteristics of industrial protocols including S7, OPC UA and Modbus TCP.
  • Integrate an SNS box into an existing simple architecture.
  • Set up safety rules specific to industrial protocols.
  • Customise application signatures according to the controllers being used.
  • Configure the safety mode (bypass).

What does this CSNOT training cost, and how do I register?

The public price is €1,000 ex. VAT for 7 hours’ training in the classroom and two online certification sessions.

You can register via the training calendar.

Practical information about the CSNOT training course

The CSNOT training lasts 7 hours.

Stormshield offers face-to-face inter-company training sessions at its Paris, Lille and Lyon premises, or via distance learning. Our trainers also conduct intra-company training (on-site or distance learning) for groups of 5 or more people. This training is provided in France exclusively by the ETN Group and Stormshield.

There is a maximum of 8 trainees per session.

You must...

  • Have passed the CSNA exam in the last 3 years and have a good knowledge of industrial networks.
  • Or have completed the FSNOT training.

Basic hardware requirements:

  • A PC with 6 GB RAM and an i3-type processor, with no hard disk constraints.
  • A Chrome 50 (or higher) or Firefox 50 (or higher) web browser with JavaScript installed for access to the CyberRange platform for practical work (no other browsers are supported). You must have plugin installation rights for managing the videoconferencing software.

Distance learning:

  • Internet access with a minimum speed of 2 Mb/s.
  • A 2nd screen is strongly recommended (22'' or more).

CSNOT: certification at your fingertips

Provided you pass the final exam at the end of the course, obviously! You sit the exam online (30 minutes, 20 questions). The passmark is 70%.

The exam is automatically available on the day following the end of training, for a period of three weeks, at the Institute’s website.

In the event of failure, or inability to take the exam within this time slot, a second and final exam opportunity automatically opens immediately afterwards for a duration of one additional week.

Detailed description of the CSNOT training course

  • Individual introduction of trainees
  • Overview of industrial protocols
  • Presentation of Siemens S7 protocols
  • Presentation of OPC
  • Presentation of Modbus TCP
  • How to capture and analyze a network traffic
  • Creating custom signatures for a PLC and protecting the context in which it is used
  • How to simulate and analyze an attack
  • Presentation of safety (bypass) mode

re-certification kits

In common with all good software, you’ll need to update your network/security expertise before the third anniversary of your certification. You can do this using our online re-certification kits, which allow you to renew your certification for an additional three years.

Calendar

Want to find out about dates for operational network protection training courses?