Catalogue > Courses

Prerequisites

The class does not cover introductory material and candidates are expected to have, at a minimum, a CCSP level knowledge of the topics covered in order to receive the full benefits of the class.

Who should attend?

• System Engineers

What you will learn

• Thorough hands-on experiences of Cisco configuration scenarios in a CCIE Security lab environment utilizing equipment and techniques that resembles the complexity of the test.
• Polished your skills and assessed your strengths and weaknesses in a wide range of Cisco topics.
• Extensive hands-on experience.
• Maximized your productivity and demand as a networking security professional with more knowledge.

At the end of the course each student will know what areas to focus on for further study, and what they personally need to focus on to successfully pass the hands-on CCIE Lab Exam.

Course content

IOS Firewall Feature Set

• IOS Firewall – (CBAC, Standard, Extended, Named, Reflexive, and dynamic access lists)
• IDS – (Configuring and Monitoring)
• NAT – (Static, dynamic, and PAT)
• IOS Privilege Levels – (Configure different user privilege levels)
• AAA – (Configuring authentication, authorization, and accounting)

PIX

• Interface configuration – (Naming, providing security, and enabling)
• ASA Exceptions – (ACLs and conduits)
• NAT – (Port Redirection, Static, Dynamic, and outside)
• Failover – (Utilizing failover)
• Guards – (Utilizing filter guards)
• IDS – (Configuring PIX IDS support)

VPN

• IKE and IPSec
• Configuring VPN between VPN Concentrators/PIX and Routers with Pre-share and RSA-nonce support
• CA support – (Configuring the CA and devices)
• Utilizing NAT with VPN
• Utilizing AAA with VPN
• Cisco Secure Access Control Server
• Configuring the security devices for AAA
• Managing your Secure Network
• Logging – (Syslog and Console)
• Login options – (Telnet, Console, Aux, and SSH)
• NTP – (Configuring and maintaining secure NTP support)
• SNMP – (Configuring and maintaining secure SNMP support)
• Security Needs
• Attacks – (DoS, Man-in-the-Middle, Reconnaissance, etc…)
• Attack Mitigation – (Defending against attacks)
• Understanding the well-known attacks and configuring the devices to protect against them.