Snow 303: Mac OS X Security and Mobility 10.6 March 21, 2011

This three-day course focuses on strategies for providing secure access from mobile devices to services running on private networks. Working with Mac OS X Server, students learn how to securely provide network services such as web, mail, and calendar to mobile computers and devices, such as the iPhone. Students will also learn the basics of deploying both web and native applications on mobile devices such as the iPhone using Xcode, Dashcode, and the iPhone Configuration Utility. The course is a combination of lecture and hands-on exercises that provide practical real-world experience.
Who Should Attend
This course is designed for system administrators and IT professionals who need to:
Gain specific knowledge about DNS, VPN, firewalls, certificates and proxy servers
Effectively configure mobile devices that are connected to public networks to access services running on a private network
Configure Mac OS X Server to provide trusted authentication to proxied services such as web, mail, and calendar
Prerequisites
Students should have the following prerequisite knowledge prior to attending the course:
Basic troubleshooting experience or Snow 101
Basic Mac OS X Server experience or Snow 201
Understanding of basic IP networking, including IP address, subnet masks, ports, and protocols
Experience using the command-line interface with Mac OS X
Course Outline
Note: The curricula below comprise activities typically covered in a class at this skill level. The instructor may, at his/her discretion, adjust the lesson plan to meet the needs of the class.

Providing Network Services
Lesson 1 - DNS
Creating and editing zones
Verifying forward and reverse lookups
Configuring split-DNS
Creating secure and private DNS servers
Troubleshooting name resolution
Lesson 2 - DHCP
Configuring Mac OS X client computer to obtain an IP address from a DHCP server
Configuring secure DHCP address distribution
Troubleshooting host configuration issues
Troubleshooting address conflicts
Lesson 3 - NAT/Gateway
Configuring Mac OS X Server to provide network address translation services
Configuring Mac OS X client computer to access public services through a gateway server
Troubleshooting address translation issues

Securing Systems and Services
Lesson 4 - Firewalls
Configuring Mac OS X Server computer to restrict IP access to services
Lesson 5 - VPN
Establish secure connections between clients connected to a public network and services running on private intranets
Lesson 6 - Keys & Certificates
Establish trusted and validated connections between clients and services

Providing Services for Mobile Devices
Lesson 7 - Providing iPhone Applications
Create, distribute, and install configuration profiles with the iPhone Configuration Utility (iPCU)
Using Xcode and Dashcode to develop and deploy native and web application for iPhone and iPod touch
Lesson 8 - Mobile Access Server
Provide secure, public access via proxy servers connected to a public network to Address Book, iCal, Mail, and Web services hosted on origin servers located on a private intranet