Huawei HCIA-Security (H12-711 V4.0) case studies
Huawei HCIA-Security (H12-711 V4.0) · Put your knowledge to work in context.
HCIA-Security (exam code H12-711, currently V4.0) is Huawei's associate-level security certification, aimed at engineers who are moving into firewall and network-security operations, and at candidates building a foundation before higher-level Huawei security tracks. It is an entry credential: it assumes basic TCP/IP and routing knowledge rather than deep cryptography or large-scale security architecture experience. The Huawei HCIA-Security (H12-711 V4.0) case studies are 5 cases and about 4,030 words.
1Internal Users Cannot Reach a Published Web Portal After NAT Server Configuration
An enterprise runs a Huawei USG6000E firewall with three zones: Trust (10.10.10.0/24), DMZ (172.16.10.0/24) and Untrust. A web portal at 172.16.10.50 is published as 203.0.113.10:443 by a NAT Server rule on the Untrust interface.
841 words, about 4 min2Designing Zones and Interzone Policy for a Campus with Guest Wi-Fi
A university is deploying a Huawei USG6650 firewall with four network segments: staff VLAN 10.20.0.0/16, guest Wi-Fi 192.168.30.0/24, a DMZ web server farm 172.16.20.0/24, and the Internet. A database server for the web application sits on the staff segment at 10.20.5.10.
793 words, about 4 min3Branch with Dynamic IP Needs OSPF over an IPsec Tunnel
A manufacturer has a headquarters firewall with a static public address 198.51.100.10 and a branch firewall that receives a dynamic PPPoE address and sits behind a carrier NAT. HQ LAN is 10.1.0.0/16; branch LAN is 10.2.0.0/16.
810 words, about 4 min4Tuning IPS and URL Filtering Without Weakening Protection
An online retailer uses a Huawei USG firewall with IPS, antivirus, and URL filtering enabled on the outbound policy. The IPS profile is set to block all signatures at severity high and above.
782 words, about 4 min5SSL VPN Certificate Authentication Fails for Remote Users
A company has deployed a Huawei USG firewall as an SSL VPN gateway. Employees authenticate with client certificates issued by the company's internal Microsoft CA, and the firewall has a certificate signed by the same root.
804 words, about 4 min