APP 3620: Sensible Cybersecurity Using the Ethernet Security Gateway

This course is intended for utility IT personnel, regulatory agency personnel, and communications and automation engineers.

To effectively mitigate evolving cyber threats, the cybersecurity posture of the modern substation must be aligned with modern defense-in-depth strategies. SEL University designed APP 3620 to bridge the gap between foundational cybersecurity competencies and practical application.

APP 3620 is interactive and activity based. During this course, you will configure and implement a realistic defense-in-depth cybersecurity scheme that uses the robust security features of the SEL-3620 Ethernet Security Gateway and modern security practices. Each unit of this course will guide you, step-by-step, through configuring this comprehensive cybersecurity scheme.

Agenda

• Product and Security Overview
• SEL-3620 Initial Setup and Networking
• SEL-3620 User Management
• SEL-3620 Port Switch Configuration
• acSELerator QuickSet SEL-5030 Software Configuration

• Using the SEL-3620 Proxy Services
• Password Management, Reports, and Auditing of SEL-3620 Managed Devices
• SEL-3620 IPsec and VPN Configuration
• SEL-3620 Firewall Configuration

Course Objectives

At the conclusion of this course, students can:

• Describe the security expectations of modern integrated protection and control systems
• Identify the SEL-3620 feature set and role within the defense-in-depth strategy
• Configure local and network security
• Commission the SEL-3620 using the web interface
• Create user accounts for authenticated privileges
• Configure syslog event collection in the SEL-3620
• Configure secure communications using certificates and IPsec
• Create firewall rules to filter transgressing packets
• Configure event collection and logging
• Configure secure communications at the device level
• Use the SEL-3620 for device management
• Access devices through the SEL-3620
• Use the SEL-3620 for password management

Prerequisites

Before you attend this class, you must meet the following requirements:

• Ability to operate a personal computer

Course Preparation

Please check the General Course Information page for what you should bring to class. In addition, please make sure that the laptop you bring to class has the following software/features:

• acSELerator QuickSet SEL-5030 Software, Version 6.1.2.1 or newer, with the SEL-2411 driver, the QuickSet Device Manager plug-in, and the SEL-3620 and SEL-2411 instruction manuals, installed and updated through SEL Compass
• SEL-C662 USB Driver
• Microsoft Internet Explorer or Mozilla Firefox
• Ethernet port