Catalogue > Courses

Prerequisites

Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites:

• Certification as a CCNA or the equivalent knowledge/SND.
• Basic knowledge of the Windows operating system Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications).

Who should attend?

• Cisco customers who implement and maintain Cisco PIX Firewalls
• Cisco Channel Partners, who sell, implement and maintain Cisco PIX Firewalls
• Cisco Systems engineers who support the sales of the Cisco PIX Firewall

What you will learn

Successful graduates will be able to secure a network using existing Cisco IOS security including Trust and Identity with Identity Based Networking Service; Network Foundation Protection including securing the Control, Management and Data Plane. They will be able to invoke Secured Connectivity with IPsec and VPNs, and implement Adaptive Threat Defence by configuring Cisco Classic and Zone-Based Firewalls and Cisco IOS IPS.

Successful graduates will be able to secure a network using Layer 2 Security including Port Security and DHCP Snooping. Trust and Identity including Cisco Secure ACS 4.0, Network Access Profiles and 802.1x with VLAN assignment, guest and restricted VLANs are covered in detail. Network Foundation Protection including Control Plane Protection with CPPr, CoPP; Management Plane Protection with the MPP feature and Data Plane Protection with FPM are explored. There is a new module featuring Secured Connectivity highlighting VPN additions to SNRS1.0 including GRE/IPsec S2SVPN; DMVPN and SSL VPN (WebVPN).
Finally there is a new module about Adaptive Threat Defence that covers IOS Firewall. Application Firewalls and Zone Based Firewalls are covered in depth. IPS is also described.

Course content

Module 1 – Layer 2 Security

• Lesson 1: Company ABC Unsecured
• Lesson 2: Examining Layer 2 Attacks
  • Lab 1–1: Configure Layer 2 Security
• Lesson 3: Configuring DHCP Snooping
  • Lab 1–2: Configure DHCP Snooping

Module 2 – Trust and Identity

• Lesson 1: Implementing Identity Management
  • Lab 2–1: Configure Cisco Secure ACS as an AAA server
• Lesson 2: Implementing Cisco IBNS
  • Lab 2–2: Configure 802.1X Port-Based Authentication

Module 3 – Cisco Network Foundation Protection

• Lesson 1: Introducing Cisco NFP
  • Lab 3–1: Configure Cisco NFP
• Lesson 2: Securing the Control Plane
• Lesson 3: Securing the Management Plane
• Lesson 4: .Securing the Data Plane

Module 4 – Secured Connectivity

• Lesson 1: Introducing IPsec.
• Lesson 2: Examining Cisco IOS SSL VPN (WebVPN)
• Lesson 3: Implementing IPsec VPNs Using Pre-shared Keys
  • Lab 4–1: Configure a site-to site VPN using pre-shared keys
• Lesson 4: Implementing IPsec VPNs with PKI
  • Lab 4–2: Configure a site-to site VPN using certificates
• Lesson 5: Configuring GRE Tunnels
  • Lab 4–3: Configure a GRE Tunnel to a Remote Site
• Lesson 6: Configuring a DMVPN.
  • Lab 4–4: Configure a DMVPN
• Lesson 7: Configuring Cisco IOS SSL VPN (WebVPN)
  • Lab 4–5: Configure a Cisco IOS SSL VPN (WebVPN)
• Lesson 8: Configuring Cisco Easy VPN Remote Access
  • Lab 4–6: Configure Cisco Easy VPN Remote Access

Module 5 – Adaptive Threat Defense

• Lesson 1: Examining Cisco IOS Firewall
• Lesson 2: Configuring Cisco IOS Classic Firewall
  • Lab 5–1: Configure Cisco IOS Classic Firewall
  • Lab 5–2: Configure Cisco IOS Application Policy Firewall
• Lesson 3: Configuring Cisco IOS Zone-Based Policy Firewall
  • Lab 5–3: Configure a Cisco IOS Zone-Based Policy Firewall
• Lesson 4: Configuring Cisco IOS Firewall Authentication Proxy
  • Lab 5–4: Configure Cisco IOS Firewall Authentication Proxy on a Cisco Router
• Lesson 5: Configuring Cisco IOS IPS
  • Lab 5–5: Configure a Cisco Router with Cisco IOS IPS
• Lesson 6: Examining Company ABC Secured