APP 3620: Sensible Cybersecurity Using the Ethernet Security Gateway

To effectively mitigate evolving cyber threats, the cybersecurity posture of the modern substation must be aligned with modern defense-in-depth strategies. SEL University designed APP 3620 to bridge the gap between foundational cybersecurity competencies and practical application.

APP 3620 is interactive and activity-based. During this course, you will configure and implement a realistic defense-in-depth cybersecurity scheme that uses the robust security features of the SEL-3620 Ethernet Security Gateway and modern security practices. Each unit of this course will guide you, step by step, through configuring this comprehensive cybersecurity scheme.

Audience

This course is intended for utility IT personnel, regulatory agency personnel, and communications and automation engineers.

Agenda

Day 1

• Product and Security Overview
• SEL-3620 Initial Setup and Networking
• SEL-3620 User Management
• SEL-3620 Port Switch Configuration
• acSELerator QuickSet SEL-5030 Software Configuration

Day 2

• Using the SEL-3620 Proxy Services
• Password Management, Reports, and Auditing of SEL-3620 Managed Devices
• SEL-3620 IPsec and VPN Configuration
• SEL-3620 Firewall Configuration

Course Objectives

At the conclusion of this course, students can:

• Describe the security expectations of modern integrated protection and control systems.
• Identify the SEL-3620 feature set and role within the defense-in-depth strategy.
• Configure local and network security.
• Commission the SEL-3620 using the web interface.
• Create user accounts for authenticated privileges.
• Configure syslog event collection in the SEL-3620.
• Configure secure communications using certificates and IPsec.
• Create firewall rules to filter transgressing packets.
• Configure event collection and logging.
• Configure secure communications at the device level.
• Use the SEL-3620 for device management.
• Access devices through the SEL-3620.
• Use the SEL-3620 for password management.