Cisco - CCNP Security

Learn how to plan and implement end-to-end network security measures on the CCNP Security course. You'll also be able to reduce the risk to your IT infrastructures and applications using Cisco Switches, Cisco ASA, and the router security appliance feature.

This certification proves your skills in the design, deployment, maintenance and management of enterprise wide network security. You'll prepare for and sit four exams at the Firebrand Training Centre. In order to pass, you'll learn about:

• Configuring and implementing security on Cisco network perimeter edge devices such as a Cisco switch, Cisco router, and Cisco ASA firewall.
• Various Virtual Private Network (VPN) systems that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms.
• The components and architecture of secure access, by utilising 802.1X and Cisco TrustSec.
• Advanced firewall architecture and configuration with the Cisco next-generation firewall, utilising access and identity policies.

CCNP Security is an evolution of the CCSP (Cisco Certified Security Professional) certification and is aligned specifically to the job role of the Cisco Network Security Engineer.

The CCNP Security program is designed to provide the skills necessary to function as a network security engineer responsible for Security in Routers, Switches, Networking devices and appliances. Students will learn through a mix of lecture and practical exercises how to choose, deploy, support, and troubleshoot Firewalls, VPNs and IDS/IDP solutions for their networking environments. The course will comprise all the modules needed for the complete CCNP Security certification.

Your CCNP Security certification will prove that you can:

• Secure the network infrastructure using Cisco security products and integrated technologies
• Deploy perimeter security, VPNs, and intrusion protection technologies and solutions
• Monitor and detect relevant security events
• Manage network security to protect productivity gains and reduce costs

Cisco certifications also afford you special membership benefits:

• A certificate of accomplishment.
• A wallet card, logo and designation for your personal promotion to clients or potential employers.
• Access to the secure Cisco on-line tracking system so you can download logos, and track your Cisco certification progress throughout your career.

Implementing Cisco Edge Network Security Solutions - SENSS:

• Understanding and implementing Cisco modular Network Security Architectures such as SecureX and TrustSec.
• Deploy Cisco Infrastructure management and control plane security controls.
• Configuring Cisco layer 2 and layer 3 data plane security controls.
• Implement and maintain Cisco ASA Network Address Translations (NAT).
• Implement and maintain Cisco IOS Software Network Address Translations (NAT).
• Designing and deploying Cisco Threat Defense solutions on a Cisco ASA utilizing access policy and application and identity based inspection.
• Implementing Botnet Traffic Filters.
• Deploying Cisco IOS Zone-Based Policy Firewalls (ZBFW).
• Configure and verify Cisco IOS ZBFW Application Inspection Policy.

Implementing Cisco Secure Mobility Solutions - SIMOS:

• Describe the various VPN technologies and deployments as well as the cryptographic algorithms and protocols that provide VPN security.
• Implement and maintain Cisco site-to-site VPN solutions.
• Implement and maintain Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs.
• Implement and maintain Cisco clientless SSL VPNs.
• Implement and maintain Cisco AnyConnect SSL and IPsec VPNs.
• Implement and maintain endpoint security and dynamic access policies (DAP).

Implementing Cisco Secure Access Solutions - SISAS:

• Understand Cisco Identity Services Engine architecture and access control capabilities.
• Understand 802.1X architecture, implementation and operation.
• Understand commonly implemented Extensible Authentication Protocols (EAP).
• Implement Public-Key Infrastructure with ISE.
• Understand the implement Internal and External authentication databases.
• Implement MAC Authentication Bypass.
• Implement identity based authorization policies.
• Understand Cisco TrustSec features.
• Implement Web Authentication and Guest Access.
• Implement ISE Posture service.
• Implement ISE Profiling.
• Understand Bring Your Own Device (BYOD) with ISE.
• Troubleshoot ISE.

Implementing Cisco Threat Control Solutions - SITCS:

• Understand Cisco ASA Next-Generation Firewall (NGFW)
• Deploy Cisco Web Security appliance to mitigate malware
• Configure Web Security appliance for acceptable use controls
• Configure Cisco Cloud Web Security Connectors
• Describe Cisco Email Security Solution
• Configure Cisco Email Appliance Incoming and Outgoing Policies
• Describe IPS Threat Controls
• Configure and Implement Cisco IPS Sensor into a Network

You'll sit the following exams at the Firebrand Training Centre, covered by your certification guarantee:

• Implementing Cisco Edge Network Security Solutions - 300-206 SENSS
• Implementing Cisco Secure Mobility Solutions - 300-209 SIMOS
• Implementing Cisco Secure Access Solutions - 300-208 SISAS
• Implementing Cisco Threat Control Solutions - 300-210 SITCS

Official Cisco courseware Included:

• Implementing Cisco Edge Network Security Solutions (SENSS)
• Implementing Cisco Secure Mobility Solutions (SIMOS)
• Implementing Cisco Secure Access Solutions (SISAS)
• Implementing Cisco Threat Control Solutions (SITCS)

To attend this course, you must have

• Either a valid Cisco CCNA Security certification or any CCIE certification.
• Prior knowledge of GETVPN and EASYVPN

It's important that you also have extensive knowledge of the Cisco security product range before attending the CCNP Security course.