MTCSE – MikroTik Certified Security Engineer (2-Day Training)

MTCSE – MikroTik Certified Security Engineer

2-Day Hands-On Training

This instructor-led course focuses on planning and implementing security measures for MikroTik RouterOS–based networks.

The training is practical, attack-driven, and lab-heavy.

Course Outcomes

By the end of this training, participants will be able to:

• Identify common network attacks

• Secure RouterOS devices and services

• Implement advanced firewall protections

• Deploy secure tunnels and encrypted access

Course Modules

Module 1 – Introduction to Network Security (LAB)

• Attacks, mechanisms, and services

• Common network threats

• RouterOS security deployment strategies

Module 2 – Firewall Security (LAB)

• Packet flow & firewall chains

• Stateful firewall behavior

• RAW table usage

• SYN flood mitigation using RAW

• RouterOS default configuration review

• Best practices for management access

• Detecting attacks on critical services

• Bridge firewall filtering

• Advanced firewall filter options

• ICMP filtering

Module 3 – OSI Layer Attacks & Mitigation (LAB)

• MNDP attacks & prevention

• DHCP attacks (rogue servers, starvation)

• TCP SYN attacks

• UDP attacks

• ICMP smurf attacks

• FTP, Telnet & SSH brute-force protection

• Port scan detection & prevention

Module 4 – Cryptography (LAB)

• Cryptography fundamentals & terminology

• Encryption methods

• Symmetric vs asymmetric algorithms

• Public Key Infrastructure (PKI)

• Certificates

• Self-signed certificates

• Free valid certificates

• Certificate usage in RouterOS

Module 5 – Securing the Router (LAB)

• Port knocking

• Secure management access

  • HTTPS

  • SSH

  • WinBox

• Default service ports

• SSH tunneling

Module 6 – Secure Tunnels (LAB)

• IPsec fundamentals

• L2TP + IPsec

• SSTP using certificates

Schedule

• Time: 9:00 AM – 5:00 PM

• Morning break: 10:30 AM (30 min)

• Lunch: 12:00 – 1:00 PM (included)

• Afternoon break: 3:00 PM (30 min)

Exam

• Day 2, after class

• 25 questions, open-book

• Passing score: 60%

Successful students receive an official MikroTik digital certificate.
Printed certificates available separately via MikroTik.

Prerequisites

• MTCNA certification (required)

Target Audience

• Network engineers

• Network technicians

• IT professionals securing MikroTik networks

Training Location

Unit 13, 20 Seelcase Road West
Markham, Ontario, Canada

Early Bird

30% discount for registrations completed 30 days before course start.