Cisco - CCNA Security & CCNP Security

Duration

Duration:

Just 17 Days

Method

Method:

Classroom / Online / Hybrid

Next date

Next date:

10/2/2025 (Monday)

Overview

Firebrand Training Official Cisco Learning Partner

This certification retired on 24th February 2020. Our closest replacement is CCNA.

Get both your CCNA Security and CCNP Security certifications in 17 days. On this course you'll learn how to reduce the risk to your IT infrastructures and applications using Cisco Switches, Cisco ASA, and the router security appliance feature.

CCNA Security

Develop your own security policies and protect your IT infrastructure with the CCNA Security certification. As prerequisite for the CCNP Security cert, this course will teach you how to:

  • Develop security infrastructures
  • Recognise threats and vulnerabilities to networks
  • Mitigate and respond to security threats

CCNP Security

During the CCNP Security part of the course you'll learn how to plan and implement end-to-end network security measures using Cisco Switches, Cisco ASA, and the router security appliance feature.

You'll also learn about:

  • How to configure and implement security on Cisco network perimeter edge devices such as a Cisco switch, Cisco router, and Cisco ASA firewall.
  • Various Virtual Private Network (VPN) systems that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms.
  • The different components and architecture of secure access, by utilising 802.1X and Cisco TrustSec.
  • Advanced firewall architecture and configuration with the Cisco next-generation firewall, using access and identity policies.

Four reasons why you should sit your Cisco Security course with Firebrand Training

  1. You'll be Cisco Security trained and certified faster. Learn more on this 17-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your Cisco Security course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass Cisco Security first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study Cisco Security with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 134.561 students saving more than one million hours since 2001

Benefits

Exam 640-554 IINS is a prerequisite for the CCNP Security certification. You will study for, and take, the exam at the beginning of the course.

The CCNP Security program is designed to provide the skills necessary to function as a network security engineer responsible for Routers, Switches and other Cisco Security appliances. Students will learn through a mix of lecture and practical exercises how to deploy, support, and troubleshoot Firewalls VPNs and IDS solutions. The course will comprise all the modules needed for the complete CCNP Security certification.

Your CCNP Security certification will prove that you can:

  • Secure the network infrastructure using Cisco security products and integrated technologies
  • Deploy perimeter security, VPNs, and intrusion protection technologies and solutions
  • Monitor and detect relevant security events
  • Manage network security to protect productivity gains and reduce costs

Cisco certifications also afford you special membership benefits:

  • A certificate of accomplishment.
  • A wallet card, logo and designation for your personal promotion to clients or potential employers.
  • Access to the secure Cisco on-line tracking system so you can download logos, and track your Cisco certification progress throughout your career.

Curriculum

CCNA Security

Common Security Threats

  • Common security threats

Security and Cisco Routers

  • Implementing security on Cisco routers
  • Securing the data, control and management plane
  • Cisco Security Manager
  • Transition from IPv4 to IPv6

AAA on Cisco Devices

  • Implementing AAA (authentication, authorization, and accounting)
  • TACACS+
  • RADIUS
  • AAA
  • AAA functionality

IOS ACLs

  • Standard, extended, and named IP IOS access control lists (ACLs) to filter packets
  • Considerations when building ACLs
  • Implementing IP ACLs to mitigate threats in a network

Securing Network Management and Reporting

  • Securing network management
  • Implementing secure network management

Common Layer 2 Attacks

  • Layer 2 security using Cisco switches
  • VLAN security
  • Implementing VLANs and trunking
  • Implementing spanning tree

Cisco Firewall Technologies

  • Operational strengths and weaknesses of the different firewall technologies
  • Stateful firewalls
  • Types of NAT used in firewall technologies
  • Implementing zone-based policy firewall using CCP
  • Implementing the Cisco Adaptive Security Appliance (ASA)
  • Implementing Network Address Translation (NAT) and Port Address Translation (PAT)

Cisco IPS

  • Considerations when deploying Cisco Intrusion Prevention System (IPS)
  • IPS technologies
  • Configuring Cisco IOS IPS using CCP

VPN Technologies

  • Different methods used in cryptography
  • VPN technologies
  • The building blocks of IPSec
  • Implementing an IOS IPSec site-to-site VPN with pre-shared key authentication
  • Verify VPN operations
  • Implementing Secure Sockets Layer (SSL) VPN using ASA device manager

CCNP Security

Implementing Cisco Edge Network Security Solutions - SENSS:

  • Understanding and implementing Cisco modular Network Security Architectures such as SecureX and TrustSec.
  • Deploy Cisco Infrastructure management and control plane security controls.
  • Configuring Cisco layer 2 and layer 3 data plane security controls.
  • Implement and maintain Cisco ASA Network Address Translations (NAT).
  • Implement and maintain Cisco IOS Software Network Address Translations (NAT).
  • Designing and deploying Cisco Threat Defense solutions on a Cisco ASA utilizing access policy and application and identity based inspection.
  • Implementing Botnet Traffic Filters.
  • Deploying Cisco IOS Zone-Based Policy Firewalls (ZBFW).
  • Configure and verify Cisco IOS ZBFW Application Inspection Policy.

Implementing Cisco Secure Mobility Solutions - SIMOS:

  • Describe the various VPN technologies and deployments as well as the cryptographic algorithms and protocols that provide VPN security.
  • Implement and maintain Cisco site-to-site VPN solutions.
  • Implement and maintain Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs.
  • Implement and maintain Cisco clientless SSL VPNs.
  • Implement and maintain Cisco AnyConnect SSL and IPsec VPNs.
  • Implement and maintain endpoint security and dynamic access policies (DAP).

Implementing Cisco Secure Access Solutions - SISAS:

  • Understand Cisco Identity Services Engine architecture and access control capabilities.
  • Understand 802.1X architecture, implementation and operation.
  • Understand commonly implemented Extensible Authentication Protocols (EAP).
  • Implement Public-Key Infrastructure with ISE.
  • Understand the implement Internal and External authentication databases.
  • Implement MAC Authentication Bypass.
  • Implement identity based authorization policies.
  • Understand Cisco TrustSec features.
  • Implement Web Authentication and Guest Access.
  • Implement ISE Posture service.
  • Implement ISE Profiling.
  • Understand Bring Your Own Device (BYOD) with ISE.
  • Troubleshoot ISE.

Implementing Cisco Threat Control Solutions - SITCS:

  • Understand Cisco ASA Next-Generation Firewall (NGFW)
  • Deploy Cisco Web Security appliance to mitigate malware
  • Configure Web Security appliance for acceptable use controls
  • Configure Cisco Cloud Web Security Connectors
  • Describe Cisco Email Security Solution
  • Configure Cisco Email Appliance Incoming and Outgoing Policies
  • Describe IPS Threat Controls
  • Configure and Implement Cisco IPS Sensor into a Network

Exam Track

You will be prepared for, and sit, the following exams on site:

  • Implementing IOS Network Security v2.0 - 640-554
  • Implementing Cisco Edge Network Security Solutions - 300-206 SENSS
  • Implementing Cisco Secure Mobility Solutions - 300-209 SIMOS
  • Implementing Cisco Secure Access Solutions - 300-208 SISAS
  • Implementing Cisco Threat Control Solutions -300-207 SITCS

What's Included

Courseware Included:

  • Implementing Cisco IOS Network Security (IINS)
  • Implementing Cisco Edge Network Security Solutions (SENSS)
  • Implementing Cisco Secure Mobility Solutions (SIMOS)
  • Implementing Cisco Secure Access Solutions (SISAS)
  • Implementing Cisco Threat Control Solutions (SITCS)

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Prerequisites

Exam 640-554 IINS is a prerequisite for the CCNP Security certification - this is included as part of the course. Valid CCNA in good standing is also recommended.

Are you ready to get certified in record time?

We interview all applicants for the course on their technical background, degrees and certifications held, and general suitability. If you get through this screening process, it means you stand a great chance of passing.

Firebrand Training is an immersive training environment. You must be committed to the course. The above prerequisites are guidelines, but many students with less experience have other background or traits that have enabled their success in accelerated training through Firebrand Training.

If you have any doubts as to whether you meet the pre-requisites please call 21 96 61 82 and speak to one of our enrolment consultants, who can help you with a training plan.

Reviews

We've currently trained 134.561 students in 12 years. We asked them all to review our Accelerated Learning. Currently,
94,90% have said Firebrand exceeded their expectations:

"Exceptionally Professional Delivery!!"
Tony Faulkner. (2/2/2009 (Monday) to 15/2/2009 (Sunday))

"The labs, in particular, make this course stand out from other training courses that I have taken. All other courses offer labs, but quite often the student is left to flounder around through the course work to figure out what the required commands are. The student eventually gets the job done, but is left with nothing that can be referred to a week, or a month later. The instructors labs, in contrast were incredibly well-detailed and presented in a spiral binder. The required steps were all spelled out, making it easy to make notes in the lab books and to refer to those notes and commands in the future, when I am attempting to incorporate this course at work. Test-preparation labs were also provided - when all the steps were not given to the student. The course could easily be considered to be worth the money - just for the labs."
Keith Terrell, Intergence Systems. (2/2/2009 (Monday) to 15/2/2009 (Sunday))

"I have just finished my CCSP course, and i would say instructor has gone through every single point and cleared all concepts. Spot on and highly recommended."
Asim Mukhtar. (2/2/2009 (Monday) to 15/2/2009 (Sunday))

"Overall a tough course, lots of material to cover and successful results."
Vernon Grandison, Real Solutions Ltd. (2/2/2009 (Monday) to 15/2/2009 (Sunday))

"I thoroughly enjoyed my Cisco CCSP course and came away with not only a conceptual understanding of the kit, but a good grounding in its application and possible uses."
Steve Wilde, Game Group. (2/2/2009 (Monday) to 15/2/2009 (Sunday))

Course Dates

Start

Finish

Status

Location

Book now

26/8/2024 (Monday)

11/9/2024 (Wednesday)

Finished - Leave feedback

-

 

 

10/2/2025 (Monday)

26/2/2025 (Wednesday)

Limited availability

Nationwide

 

24/3/2025 (Monday)

9/4/2025 (Wednesday)

Open

Nationwide

 

5/5/2025 (Monday)

21/5/2025 (Wednesday)

Open

Nationwide

 

16/6/2025 (Monday)

2/7/2025 (Wednesday)

Open

Nationwide

 

Latest Reviews from our students