MTCSE Engineer level · Security

MikroTik Certified Security Engineer

Defend RouterOS networks against real attacks: stateful and RAW firewalling, layer-specific attacks, cryptography and certificates, router hardening and secure tunnels.

Prerequisites
MTCNA certificate.
Duration
2 days (suggested in the official outline; trainers may adjust)
Format
Classroom with hands-on labs; online theory possible by agreement
Next class
To be announced

Course overview

MTCSE is a engineer-level MikroTik certification course focused on security. It builds on the MTCNA foundation and goes deep into one area of RouterOS. Each module is taught with live demonstrations and finishes with a hands-on lab, and the course ends with the official MikroTik certification exam.

Who this course is for

Network engineers and technicians who deploy and maintain secure networks built on MikroTik devices.

Main learning areas

  • Threat landscape
  • Stateful & RAW firewall
  • Attack prevention
  • PKI & certificates
  • Router hardening
  • Secure tunnels

Course outline

6 modules · 20 topic groups · Checked against official outline

Security Fundamentals3 items
  • Attack types, security mechanisms and services
  • Common threats and how RouterOS security is deployed
  • Hands-on lab
Firewall6 items
  • Packet flow, chains and stateful filtering
  • The RAW table and SYN-flood mitigation
  • The RouterOS default configuration and management-access best practice
  • Spotting attacks on critical services
  • Bridge filtering, advanced filter options and ICMP filtering
  • Hands-on lab
Attacks Across the OSI Layers5 items
  • MNDP abuse, rogue DHCP servers and DHCP starvation
  • TCP SYN, UDP and ICMP smurf attacks
  • Brute force against FTP, Telnet and SSH
  • Detecting and stopping port scans
  • Hands-on lab
Cryptography4 items
  • Terminology, symmetric and asymmetric encryption
  • PKI, self-signed and free trusted certificates
  • Using certificates in RouterOS
  • Hands-on lab
Securing the Router4 items
  • Port knocking
  • Secure management over HTTPS, SSH and WinBox; default service ports
  • Tunnelling through SSH
  • Hands-on lab
Secure Tunnels4 items
  • IPsec basics
  • L2TP with IPsec
  • SSTP with certificates
  • Hands-on lab

About this outline. This is an original summary of the topics in MikroTik’s official MTCSE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.

Official source: MikroTik MTCSE training outline · document last edited 22 Mar 2019 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.

Training format

Classes are trainer-led with a practical lab at the end of every module. MikroTik’s training rules describe courses as classroom-based; the theory part may be delivered online when the trainer and participants agree, while the practical part and certification exam stay in the classroom. Session-specific details — dates, venue, language and fee — are listed on each class page.

The certification exam follows MikroTik’s published rules (25 questions, 60 minutes, 60% to pass). Certificates are valid for three years.

Upcoming MTCSE classes

No MTCSE dates announced yet.

Register your interest below and you will be contacted when the next batch is confirmed.

Related tutorials & articles

Frequently asked questions

Is this the official MikroTik website?

No. This is an independent training site run by a MikroTik Certified Trainer. Course topics are summarised from MikroTik’s official outline, linked above.

Express interest in MTCSE

Example: +8801XXXXXXXXX
For example: network engineer at an ISP, student
No dates are scheduled for this course yet — we will contact you when the next batch is confirmed.
Networking experience

Submitting this form reserves nothing yet — the trainer will confirm your seat, fee and payment details personally.