Skip to content
Quest Training

Firewall & Next-Generation Firewall (NGFW) Management Training Course

Builds practical skills to configure firewall rules and policies, control application access and inspect traffic on traditional and next-generation firewalls.

NSIP · Network Security & Infrastructure ProtectionAll Levels#2746ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Information Technology & CybersecurityCategories:Network Security & Infrastructure Protection

Course Overview

This course develops practical skills in managing, configuring, and optimizing traditional firewalls and next-generation firewalls (NGFWs) to protect enterprise networks against evolving cyber threats. Participants learn how to establish security policies, control network traffic, manage application access, inspect network communications, and strengthen perimeter security. The programme covers firewall architecture, access control policies, network address translation, intrusion prevention, application awareness, threat intelligence, secure remote access, monitoring, and troubleshooting. It also addresses configuration management, security policy optimization, incident investigation, and operational best practices to help organizations maintain effective, reliable, and resilient network security.

Learning Objectives

  • By the end of the course, participants will be able to:
  • Explain firewall technologies, architectures, and their role in enterprise network security.
  • Differentiate between traditional firewalls and next-generation firewall capabilities.
  • Configure firewall rules, access control policies, and network address translation.
  • Apply network segmentation and traffic filtering to reduce unauthorized access.
  • Implement NGFW capabilities, including application control, intrusion prevention, and advanced threat detection.
  • Manage user-based policies, secure remote access, and virtual private network connectivity.
  • Monitor firewall logs, analyze traffic patterns, and investigate suspicious activities.
  • Identify configuration weaknesses and optimize firewall policies according to security requirements.
  • Troubleshoot connectivity problems, policy conflicts, and firewall performance issues.
  • Develop firewall management and maintenance procedures that support continuous security improvement.

Who Should Attend

This course is designed for network administrators, network security engineers, cybersecurity specialists, firewall administrators, systems engineers, and IT infrastructure professionals responsible for securing enterprise network environments. It is particularly relevant to professionals who configure firewall policies, manage network access, investigate security alerts, and maintain perimeter and internal network protection. The programme is also suitable for IT managers, security operations personnel, infrastructure supervisors, and technical specialists in government entities, ministries, banks, financial institutions, oil and gas companies, industrial organizations, and large corporations. Participants should have a basic understanding of TCP/IP networking, routing, switching, and common network security concepts.

Learning Outcomes

  • Describe firewall components, deployment models, and traffic inspection mechanisms.
  • Compare traditional firewall functions with NGFW security capabilities.
  • Design and implement firewall policies based on network requirements and least-privilege principles.
  • Configure network address translation and access control rules for common enterprise scenarios.
  • Apply application-aware controls, intrusion prevention, and threat inspection capabilities.
  • Establish secure remote connectivity and VPN access policies.
  • Interpret firewall logs and security events to identify potential threats and policy violations.
  • Diagnose firewall rule conflicts, connectivity failures, and performance bottlenecks.
  • Apply configuration backup, change control, policy review, and firmware maintenance practices.
  • Develop a structured firewall security improvement plan supported by monitoring and risk assessment.

Course Outline

Day 1

Firewall Fundamentals and Security Architecture

  • Understanding firewall principles, functions, and the role of network perimeter protection.
  • Reviewing packet-filtering, stateful inspection, proxy-based, and application-aware firewall technologies.
  • Comparing traditional firewalls with next-generation firewall architectures.
  • Examining firewall deployment models, including perimeter, internal segmentation, and distributed environments.
  • Understanding security zones, network interfaces, routing, and traffic flow.
  • Reviewing access control lists, security policies, and rule evaluation logic.
  • Applying least-privilege principles and reducing unnecessary network exposure.
  • Identifying common firewall misconfigurations and their security implications.
  • Practical Exercise: Develop a firewall deployment design for an enterprise network, including security zones, traffic flows, and baseline access policies.
Day 2

Firewall Configuration, Access Policies, and Network Address Translation

  • Configuring firewall interfaces, zones, routing parameters, and management access.
  • Developing inbound, outbound, and inter-zone security rules.
  • Applying source and destination network address translation (NAT).
  • Managing address objects, service objects, groups, and reusable policy components.
  • Implementing rule ordering, specific access permissions, and policy cleanup procedures.
  • Configuring logging, rule descriptions, expiration dates, and administrative accountability.
  • Understanding VPN fundamentals and secure remote access requirements.
  • Testing firewall policies and validating authorized and restricted traffic flows.
  • Practical Exercise: Configure a sample firewall policy set with NAT rules, service restrictions, logging, and validation tests.
Day 3

Next-Generation Firewall Features and Advanced Threat Prevention

  • Understanding NGFW architecture and the integration of multiple security functions.
  • Configuring application identification and application-based access policies.
  • Exploring intrusion detection and prevention system capabilities.
  • Understanding threat intelligence feeds, malicious destination filtering, and reputation-based controls.
  • Examining malware inspection, file security, and advanced threat prevention capabilities where supported.
  • Applying URL filtering, web access controls, and content inspection policies.
  • Understanding encrypted traffic inspection, certificate considerations, and privacy implications.
  • Managing user identity integration and identity-based security policies.
  • Practical Exercise: Develop an NGFW security policy that combines application control, intrusion prevention, web filtering, and threat inspection for a defined business environment.
Day 4

Firewall Monitoring, Troubleshooting, and Incident Investigation

  • Understanding firewall logs, session tables, traffic statistics, and security event records.
  • Monitoring connection attempts, denied traffic, policy matches, and unusual communication patterns.
  • Troubleshooting routing problems, NAT issues, asymmetric traffic, and blocked applications.
  • Investigating rule conflicts, overly permissive policies, and unexpected access behavior.
  • Analyzing performance indicators, resource utilization, and traffic-processing bottlenecks.
  • Using diagnostic tools and controlled testing to isolate firewall-related problems.
  • Investigating suspected malicious connections and potential policy violations.
  • Managing configuration backups, change records, firmware updates, and rollback procedures.
  • Practical Exercise: Analyze firewall logs and a simulated connectivity incident to identify the root cause, validate the correction, and document the security findings.
Day 5

Firewall Optimization, Governance, and Operational Best Practices

  • Reviewing firewall policies to identify redundant, unused, expired, or overly broad rules.
  • Applying policy recertification, access reviews, and rule optimization practices.
  • Establishing configuration baselines, administrative controls, and separation of duties.
  • Managing firewall high availability, redundancy, and failover considerations.
  • Defining monitoring requirements, alert thresholds, and escalation procedures.
  • Integrating firewall operations with security information and event management (SIEM) platforms where available.
  • Establishing patch management, maintenance schedules, change approval, and periodic security reviews.
  • Defining firewall performance and security indicators for operational reporting.
  • Final Workshop: Develop and present a firewall and NGFW management plan covering architecture, security policies, threat prevention, monitoring, troubleshooting, configuration governance, maintenance, and continuous improvement.

Upcoming Dates

Selected date

Marrakesh · 23 – 27 Nov 2026 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
MakkahScheduled
2 – 6 Nov 2026€4,800—
SelectDownload Brochure
ManamaScheduled
9 – 13 Nov 2026€5,300—
SelectDownload Brochure
MarbellaScheduled
16 – 20 Nov 2026€6,000—
SelectDownload Brochure
MarrakeshScheduled
23 – 27 Nov 2026€4,700€4,230until 2 Nov
✓ SelectedDownload Brochure
MilanScheduled
30 Nov – 4 Dec 2026€7,000€6,300until 9 Nov
SelectDownload Brochure
MuscatScheduled
7 – 11 Dec 2026€6,300€5,670until 16 Nov
SelectDownload Brochure
OnlineScheduled
13 – 17 Dec 2026€2,700€2,430until 23 Nov
SelectDownload Brochure
ParisScheduled
14 – 18 Dec 2026€6,700€6,030until 23 Nov
SelectDownload Brochure
RiyadhScheduled
21 – 25 Dec 2026€4,800€4,320until 30 Nov
SelectDownload Brochure
RomeScheduled
28 Dec 2026 – 1 Jan 2027€7,000€6,300until 7 Dec
SelectDownload Brochure
ViennaScheduled
4 – 8 Jan 2027€6,400€5,760until 14 Dec
SelectDownload Brochure
AbujaScheduled
11 – 15 Jan 2027€7,700€6,930until 21 Dec
SelectDownload Brochure
AccraScheduled
18 – 22 Jan 2027€7,700€6,930until 28 Dec
SelectDownload Brochure
AmsterdamScheduled
25 – 29 Jan 2027€6,000€5,400until 4 Jan
SelectDownload Brochure
BakuScheduled
25 – 29 Jan 2027€5,300€4,770until 4 Jan
SelectDownload Brochure
BarcelonaScheduled
1 – 5 Feb 2027€6,000€5,400until 11 Jan
SelectDownload Brochure
CairoScheduled
8 – 12 Feb 2027€3,800€3,420until 18 Jan
SelectDownload Brochure
Cape TownScheduled
15 – 19 Feb 2027€7,700€6,930until 25 Jan
SelectDownload Brochure
CasablancaScheduled
22 – 26 Feb 2027€4,700€4,230until 1 Feb
SelectDownload Brochure
DammamScheduled
1 – 5 Mar 2027€4,800€4,320until 8 Feb
SelectDownload Brochure
DohaScheduled
8 – 12 Mar 2027€4,700€4,230until 15 Feb
SelectDownload Brochure
DubaiScheduled
14 – 18 Mar 2027€4,700€4,230until 22 Feb
SelectDownload Brochure
IstanbulScheduled
15 – 19 Mar 2027€5,300€4,770until 22 Feb
SelectDownload Brochure
JeddahScheduled
21 – 25 Mar 2027€4,800€4,320until 1 Mar
SelectDownload Brochure
KigaliScheduled
29 Mar – 2 Apr 2027€7,700€6,930until 8 Mar
SelectDownload Brochure
Kuala LumpurScheduled
5 – 9 Apr 2027€4,700€4,230until 15 Mar
SelectDownload Brochure
LisbonScheduled
12 – 16 Apr 2027€6,000€5,400until 22 Mar
SelectDownload Brochure
LondonScheduled
19 – 23 Apr 2027€5,800€5,220until 29 Mar
SelectDownload Brochure
MadinahScheduled
26 – 30 Apr 2027€4,800€4,320until 5 Apr
SelectDownload Brochure
MakkahScheduled
3 – 7 May 2027€4,800€4,320until 12 Apr
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team