Cisco - CCNP Security

Lehrplan

Implementing Cisco Edge Network Security Solutions - SENSS:

• Understanding and implementing Cisco modular Network Security Architectures such as SecureX and TrustSec.
• Deploy Cisco Infrastructure management and control plane security controls.
• Configuring Cisco layer 2 and layer 3 data plane security controls.
• Implement and maintain Cisco ASA Network Address Translations (NAT).
• Implement and maintain Cisco IOS Software Network Address Translations (NAT).
• Designing and deploying Cisco Threat Defense solutions on a Cisco ASA utilizing access policy and application and identity based inspection.
• Implementing Botnet Traffic Filters.
• Deploying Cisco IOS Zone-Based Policy Firewalls (ZBFW).
• Configure and verify Cisco IOS ZBFW Application Inspection Policy.

Implementing Cisco Secure Mobility Solutions - SIMOS:

• Describe the various VPN technologies and deployments as well as the cryptographic algorithms and protocols that provide VPN security.
• Implement and maintain Cisco site-to-site VPN solutions.
• Implement and maintain Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs.
• Implement and maintain Cisco clientless SSL VPNs.
• Implement and maintain Cisco AnyConnect SSL and IPsec VPNs.
• Implement and maintain endpoint security and dynamic access policies (DAP).

Implementing Cisco Secure Access Solutions - SISAS:

• Understand Cisco Identity Services Engine architecture and access control capabilities.
• Understand 802.1X architecture, implementation and operation.
• Understand commonly implemented Extensible Authentication Protocols (EAP).
• Implement Public-Key Infrastructure with ISE.
• Understand the implement Internal and External authentication databases.
• Implement MAC Authentication Bypass.
• Implement identity based authorization policies.
• Understand Cisco TrustSec features.
• Implement Web Authentication and Guest Access.
• Implement ISE Posture service.
• Implement ISE Profiling.
• Understand Bring Your Own Device (BYOD) with ISE.
• Troubleshoot ISE.

Implementing Cisco Threat Control Solutions - SITCS:

• Understand Cisco ASA Next-Generation Firewall (NGFW)
• Deploy Cisco Web Security appliance to mitigate malware
• Configure Web Security appliance for acceptable use controls
• Configure Cisco Cloud Web Security Connectors
• Describe Cisco Email Security Solution
• Configure Cisco Email Appliance Incoming and Outgoing Policies
• Describe IPS Threat Controls
• Configure and Implement Cisco IPS Sensor into a Network