Cisco - CCNA Security & CCNP Security

Opinto Ohjelma

CCNA Security

Common Security Threats

• Common security threats

Security and Cisco Routers

• Implementing security on Cisco routers
• Securing the data, control and management plane
• Cisco Security Manager
• Transition from IPv4 to IPv6

AAA on Cisco Devices

• Implementing AAA (authentication, authorization, and accounting)
• TACACS+
• RADIUS
• AAA
• AAA functionality

IOS ACLs

• Standard, extended, and named IP IOS access control lists (ACLs) to filter packets
• Considerations when building ACLs
• Implementing IP ACLs to mitigate threats in a network

Securing Network Management and Reporting

• Securing network management
• Implementing secure network management

Common Layer 2 Attacks

• Layer 2 security using Cisco switches
• VLAN security
• Implementing VLANs and trunking
• Implementing spanning tree

Cisco Firewall Technologies

• Operational strengths and weaknesses of the different firewall technologies
• Stateful firewalls
• Types of NAT used in firewall technologies
• Implementing zone-based policy firewall using CCP
• Implementing the Cisco Adaptive Security Appliance (ASA)
• Implementing Network Address Translation (NAT) and Port Address Translation (PAT)

Cisco IPS

• Considerations when deploying Cisco Intrusion Prevention System (IPS)
• IPS technologies
• Configuring Cisco IOS IPS using CCP

VPN Technologies

• Different methods used in cryptography
• VPN technologies
• The building blocks of IPSec
• Implementing an IOS IPSec site-to-site VPN with pre-shared key authentication
• Verify VPN operations
• Implementing Secure Sockets Layer (SSL) VPN using ASA device manager

CCNP Security

Cisco ASA adaptive security appliance Basic Configurations

• Identifying the ASA product family
• ASA licensing Implementation
• Managing the ASA boot process
• ASA interface settings Implementation
• ASA management features Implementation
• ASA access control features Implementation
• Network Address Translation (NAT) on the ASA Implementation
• ASDM public server feature Implementation
• ASA quality of service (QoS) settings Implementation
• ASA transparent firewall Implementation

ASA Routing Features

• Implementing ASA static routing
• Implementing ASA dynamic routing

ASA Inspection Policy

• Implementing ASA inspections features

ASA Advanced Network Protections

• Implementing ASA Botnet traffic filter

ASA High Availability

• Implementing ASA Interface redundancy and load sharing features
• Implementing ASA virtualization feature
• Implementing ASA stateful failover

Common Cisco ASA adaptive security appliance VPN Configurations Components

• Identifying ASA VPN licensing requirements
• Identifying the components and features of AnyConnect 3.0 Mobility (VPN, NAM, Web Sec (ScanSafe), an Telemetry)
• Implementing ASA VPN connection profiles, group policies, and user policies
• Implementing Simple Certificate Enrollment Protocol (SCEP) proxy operations using Cisco Adaptive Security Device Manager (ASDM)
• Implementing local and external VPN authorization using ASDM
• Implementing VPN session accounting using ASDM
• Implementing Cisco Secure Desktop and Independent Host Scan operations using ASDM
• Implementing DAP operations using ASDM
• Implementing LOCAL CA operations for Secure Sockets Layer (SSL) VPNs using ASDM
• Implementing certificate maps using ASDM
• Identifying the ASA IPv6 VPN capabilities
• Monitor and verify the resulting CLI commands resulting from the various VPN configurations on the ASA

ASA IP SEC S2S VPN

• Implementing a security high-level design according to policy and environmental requirements by identifying Cisco ASA IPSec S2S VPN features and supporting technologies
• Implementing basic IPSEC S2S VPN operations with PSK and digital certificates using ASDM
• Implementing basic IKEv2 based IPSEC S2S VPN operations using ASDM
• Troubleshooting the initial provisioning IPSec S2S VPN applications due to misconfiguration

ASA EZVPN

• Implementing a security high level design according to policy and environmental requirements by identifying Cisco ASA VPN client features and supporting technologies
• Implementing basic EZVPN server operations on the ASA using ASDM

Basic EZVPN remote operations on the ASA 5505 using ASDM

• Implementing AnyConnect 3.0 IKEv2 RA VPN operations
• Implementing Client Services Server (CSS) feature
• Troubleshooting the initial provisioning IPSec RA VPN applications due to misconfiguration

ASA AnyConnect SSL VPNs

• Implementing a security high-level design according to policy and environmental requirements by identifying Cisco ASA AnyConnect client features and supporting technologies
• Implementing DTLS operations using ASDM
• Implementing basic AnyConnect 3.0 full tunnel SSL VPN operations
• Troubleshoot AnyConnect SSL VPN operations using DART
• Implementing AnyConnect Profiles using ASDM
• Implementing advanced authentication in AnyConnect Full Tunnel SSL VPNs (certificate and multi-authentication) using ASDM
• Troubleshooting the initial provisioning client-based SSL VPN applications due to misconfiguration

ASA Clientless SSL VPNs

• Implementing a security high level design according to policy and environmental requirements by identifying Cisco ASA clientless SSL VPN features and supporting technologies
• Implementing basic Clientless SSL VPN operations using ASDM
• Implementing advanced applications access using ASDM
• Implementing the SSO features on the ASA in a clientless SSL

VPN environment

• Implementing advanced authentication in clientless SSL VPNs (certificate and multi-authentication) using ASDM
• Managing the clientless SSL VPN user interface and portal using
ASDM
• Implementing basic portal customization
• Troubleshooting the initial provisioning of Clientless SSL VPN applications due to misconfiguration

SSL VPN High Availability

• Implementing SSL and IPSEC VPN high availability features

Pre-Production Design

• Choosing Cisco IOS technologies to implement HLD
• Choosing Cisco products to implement HLD
• Choosing Cisco IOS features to implement HLD 2
• Integrating Cisco network security solutions with other security technologies
• Creating and testing initial Cisco IOS configurations for new devices/services

Complex Operations Support

• Optimising Cisco IOS security infrastructure device performance
• Creating complex network security rules to meet the security policy requirements
• Optimising security functions, rules, and configuration
• Configuring & verifying NAT to dynamically mitigate identified threats to the network
• Configuring & verifying IOS Zone Based Firewalls including advanced application inspections and URL filtering
• Configuring & verifing the IPS features to identify threats and dynamically block them from entering the network
• Maintaining, updating and tuning IPS signatures
• Configuring & verifying IOS VPN features
• Configuring & verifying Layer 2 and Layer 3 security features

Advanced Troubleshooting

• Cisco IOS security software configuraiton fault finding and repairing
• Cisco routers and switches hardware fault finding and repairing

Pre-Production Design

• Choosing Cisco IPS technologies to implement HLD
• Choosing Cisco products to implement HLD
• Choosing Cisco IPS features to implement HLD
• Integrating Cisco network security solutions with other security technologies
• Creating and testing initial Cisco IPS configurations for new devices/services

Complex Support Operations

• Optimising Cisco IPS security infrastructure device performance
• Creating complex network security rules, to meet the security policy requirements
• Configuring and verifing the IPS features to identify threats and dynamically block them from entering the network
• Maintaining, updating and tuning IPS signatures
• Using CSM and MARS for IPS management, deployment, and advanced event correlation.
• Optimising security functions, rules, and configuration

Advanced Troubleshooting

• Cisco IPS security software configuraiton fault finding and repairing
• Cisco IPS sensor and module hardware fault finding and repairing

8 syytä, miksi kannattaa hankkia Cisco Security Firebrand Trainingiltä:

1. Koulutuksen ja todistuksen saaminen kestää vain 17 päivän. Meidän kanssamme saat Cisco Security -koulutuksen ja -todistuksen ennätysajassa. Todistuksen ansaitset koulutuskeskuksessamme osana intensiivistä ja nopeutettua koulutusta.
2. Hintaan sisältyy kaikki.Kertamaksu kattaa kaikki kurssimateriaalit, kokeet, kuljetuksen, majoituksen ja ateriat ja tarjoaa kustannustehokkaimman tavan hankkia Cisco Security koulutus ja todistus. Ilman mitään lisäkustannuksia.
3. Suorita tutkinto ensimmäisellä kerralla tai kertaa koulutus ilmaiseksi. Tämä on takuumme. Olemme varmoja, että läpäiset Cisco Security -kurssin ensimmäisellä kerralla. Mutta jos näin ei käy, voit tulla takaisin vuoden kuluttua ja maksaa vain majoituksesta ja kokeista. Kaikki muu on ilmaista.
4. Opit enemmän.Päivä perinteisen koulutuksen tarjoajan kanssa on yleensä klo 9–17, mihin sisältyy pitkä lounastauko. Firebrand Trainingiltä saat vähintään 12 tuntia päivässä keskittynyttä ja häiriötöntä laatukoulutusaikaa opettajasi kanssa.
5. Opit Cisco Security nopeammin. Yhdistämme 3 eri oppimistyyliä (visuaalisen|kuuloon perustuvan|kosketukseen perustuvan) tarjotaksemme materiaalin tavalla joka varmistaa, että opit nopeammin ja helpommin.
6. Opiskelet huippujen kanssa.Olemme kouluttaneet ja sertifioineet 134.561 ammattilaista ja olemme kumppaneita kaikkien alan suurien nimien kanssa ja olemme saaneet lukuisia palkintoja, mm. Microsoftin Danmarki Vuoden koulutuspartneri 2010, 2011, 2012 ja 2013, Institue of IT Trainingin ”Training Company of the Year 2006, 2007, 2008” Englannissa, ISC(2):n ”Highest Performing Affiliate of the Year 2009 & 2010 – EMEA” sekä EC-Councilin ”Accredited Training Centre of the Year 2010 og 2011”, ”Newcomer of the Year 2011” ja ”Instructors Circle of Excellence”.
7. Opit enemmän kuin pelkän teorian. Olemme kehittäneet Cisco Security kurssia edelleen käyttämällä laboratorioita, esimerkkitapauksia ja harjoittelukokeita varmistaaksemme, että osaat soveltaa uutta tietoa työympäristöön.
8. Opit parhailta. Ohjaajamme Cisco Security kurssilla ovat alan parhaita. He tarjoavat ainutlaatuisen yhdistelmän asiantuntemusta, kokemusta ja intohimoa opetukseen.