FSNOT training course

This training will teach you about the Stormshield Network Security firewalls range and its essential features for deployment in operational environments.

During the Fundamentals of Stormshield Network Operational Technology (FSNOT) training, you’ll learn the essential features of Stormshield Network Security firewalls using operational architecture. Once you’ve completed this training, you’ll be able to handle a Stormshield Network Security firewall and configure it in a working network.

At the heart of FSNOT training

If you are...

An automation expert, IT manager, network administrator, or an IT and support technician in OT environments: this training is for you!

FSNOT training: face to face or remotely?

The training is delivered either face to face (face-to-face teaching in the classroom) or as distance learning (trainer virtually present via a video system). The labs are delivered via the Airbus CyberSecurity CyberRange platform. It alternates theoretical courses and practical work.

You’ll receive course support consisting of a theoretical component, practical work (Labs) and marking. To help you put the course theory into practice, you’ll have a full technical environment at your disposal.

And you’ll be able to keep your expertise current for three years by downloading updates to the course material in PDF format on our Institute platform.

What our FSNOT training will enable you to do

  • Handle an SNS firewall and understand how it works.
  • Configure a firewall in an operational network.
  • Define and implement filtering and routing policies.
  • Configure application network control on PLCs.
  • Configure authentication policies.
  • Set up virtual private networks (IPSec VPN).

What does this FSNOT training cost, and how do I register?

This training is offered exclusively via a package consisting of FSNOT (14 hours) + CSNOT (7 hours) training. CSNOT training is detailed in its own description sheet. The public price is €2,250 ex. VAT for three days’ training in the classroom and two online CSNOT certification sessions.

You can register via the training calendar.

Practical information about the FSNOT training course

The FSNOT training lasts 14 hours.

Stormshield offers face-to-face inter-company training sessions at its Paris, Lille and Lyon premises, or via distance learning.

Our trainers also conduct intra-company training (on-site or distance learning) for groups of 5 or more people.

There is a maximum of 8 trainees per session.

You must...

  • Be conversant with TCP/IP.
  • Previous network training would be a plus.

Basic hardware requirements:

  • A PC with 6 GB RAM and an i3-type processor, with no hard disk constraints.
  • A Chrome 50 (or higher) or Firefox 50 (or higher) web browser with JavaScript installed for access to the CyberRange platform for practical work (no other browsers are supported). You must have plugin installation rights for managing the videoconferencing software.

Distance learning:

  • Internet access with a minimum speed of 2 Mb/s.
  • A 2nd screen is strongly recommended (22'' or more).

Detailed FSNOT training program

  • Individual introduction of trainees
  • Training and certification program
  • Stormshield: introduction to the company and products
  • Handling the firewall
    • Registering the firewall in the client area and accessing technical resources
    • Resetting the firewall and introduction to the administration interface
    • System configuration and administration privileges
    • Installing licenses and updating the system version
    • Backing up and restoring configurations
  • Logs and monitoring
    • Log categories
  • Objects
    • Concept of objects and types of objects
    • Network objects
  • Network configuration
    • Configuration modes on networked appliances
    • Types of interfaces: Ethernet, bridge, VLAN and GRETAP
    • Routing types and priorities
  • Address translation (NAT)
    • Translation of outgoing traffic (masquerading)
    • Translation of incoming traffic (redirection)
  • Filtering
    • Overview of filtering and stateful tracking
    • Detailed presentation of settings in a filter rule
    • Sequencing of filter and translation rules
  • Industrial application protection
    • Protocol analysis
    • Standard application protection
    • Custom application protection
  • Users & authentication
    • Directory configuration
    • Introduction to the various authentication methods: LDAP, Kerberos, Radius, SSL certificate, SPNEGO and SSO
    • Setting up explicit authentication via a captive portal
  • Virtual private networks
    • IPSec VPN (IKEv1 and IKEv2): concepts and overview
    • Site-to-site tunnels with pre-shared keys


Want to find out about dates for operational network protection training courses?