Cisco - CCNA Security & CCNP Security

Du lär dig

CCNA Security

Common Security Threats

• Common security threats

Security and Cisco Routers

• Implementing security on Cisco routers
• Securing the data, control and management plane
• Cisco Security Manager
• Transition from IPv4 to IPv6

AAA on Cisco Devices

• Implementing AAA (authentication, authorization, and accounting)
• TACACS+
• RADIUS
• AAA
• AAA functionality

IOS ACLs

• Standard, extended, and named IP IOS access control lists (ACLs) to filter packets
• Considerations when building ACLs
• Implementing IP ACLs to mitigate threats in a network

Securing Network Management and Reporting

• Securing network management
• Implementing secure network management

Common Layer 2 Attacks

• Layer 2 security using Cisco switches
• VLAN security
• Implementing VLANs and trunking
• Implementing spanning tree

Cisco Firewall Technologies

• Operational strengths and weaknesses of the different firewall technologies
• Stateful firewalls
• Types of NAT used in firewall technologies
• Implementing zone-based policy firewall using CCP
• Implementing the Cisco Adaptive Security Appliance (ASA)
• Implementing Network Address Translation (NAT) and Port Address Translation (PAT)

Cisco IPS

• Considerations when deploying Cisco Intrusion Prevention System (IPS)
• IPS technologies
• Configuring Cisco IOS IPS using CCP

VPN Technologies

• Different methods used in cryptography
• VPN technologies
• The building blocks of IPSec
• Implementing an IOS IPSec site-to-site VPN with pre-shared key authentication
• Verify VPN operations
• Implementing Secure Sockets Layer (SSL) VPN using ASA device manager

CCNP Security

Cisco ASA adaptive security appliance Basic Configurations

• Identifying the ASA product family
• ASA licensing Implementation
• Managing the ASA boot process
• ASA interface settings Implementation
• ASA management features Implementation
• ASA access control features Implementation
• Network Address Translation (NAT) on the ASA Implementation
• ASDM public server feature Implementation
• ASA quality of service (QoS) settings Implementation
• ASA transparent firewall Implementation

ASA Routing Features

• Implementing ASA static routing
• Implementing ASA dynamic routing

ASA Inspection Policy

• Implementing ASA inspections features

ASA Advanced Network Protections

• Implementing ASA Botnet traffic filter

ASA High Availability

• Implementing ASA Interface redundancy and load sharing features
• Implementing ASA virtualization feature
• Implementing ASA stateful failover

Common Cisco ASA adaptive security appliance VPN Configurations Components

• Identifying ASA VPN licensing requirements
• Identifying the components and features of AnyConnect 3.0 Mobility (VPN, NAM, Web Sec (ScanSafe), an Telemetry)
• Implementing ASA VPN connection profiles, group policies, and user policies
• Implementing Simple Certificate Enrollment Protocol (SCEP) proxy operations using Cisco Adaptive Security Device Manager (ASDM)
• Implementing local and external VPN authorization using ASDM
• Implementing VPN session accounting using ASDM
• Implementing Cisco Secure Desktop and Independent Host Scan operations using ASDM
• Implementing DAP operations using ASDM
• Implementing LOCAL CA operations for Secure Sockets Layer (SSL) VPNs using ASDM
• Implementing certificate maps using ASDM
• Identifying the ASA IPv6 VPN capabilities
• Monitor and verify the resulting CLI commands resulting from the various VPN configurations on the ASA

ASA IP SEC S2S VPN

• Implementing a security high-level design according to policy and environmental requirements by identifying Cisco ASA IPSec S2S VPN features and supporting technologies
• Implementing basic IPSEC S2S VPN operations with PSK and digital certificates using ASDM
• Implementing basic IKEv2 based IPSEC S2S VPN operations using ASDM
• Troubleshooting the initial provisioning IPSec S2S VPN applications due to misconfiguration

ASA EZVPN

• Implementing a security high level design according to policy and environmental requirements by identifying Cisco ASA VPN client features and supporting technologies
• Implementing basic EZVPN server operations on the ASA using ASDM

Basic EZVPN remote operations on the ASA 5505 using ASDM

• Implementing AnyConnect 3.0 IKEv2 RA VPN operations
• Implementing Client Services Server (CSS) feature
• Troubleshooting the initial provisioning IPSec RA VPN applications due to misconfiguration

ASA AnyConnect SSL VPNs

• Implementing a security high-level design according to policy and environmental requirements by identifying Cisco ASA AnyConnect client features and supporting technologies
• Implementing DTLS operations using ASDM
• Implementing basic AnyConnect 3.0 full tunnel SSL VPN operations
• Troubleshoot AnyConnect SSL VPN operations using DART
• Implementing AnyConnect Profiles using ASDM
• Implementing advanced authentication in AnyConnect Full Tunnel SSL VPNs (certificate and multi-authentication) using ASDM
• Troubleshooting the initial provisioning client-based SSL VPN applications due to misconfiguration

ASA Clientless SSL VPNs

• Implementing a security high level design according to policy and environmental requirements by identifying Cisco ASA clientless SSL VPN features and supporting technologies
• Implementing basic Clientless SSL VPN operations using ASDM
• Implementing advanced applications access using ASDM
• Implementing the SSO features on the ASA in a clientless SSL

VPN environment

• Implementing advanced authentication in clientless SSL VPNs (certificate and multi-authentication) using ASDM
• Managing the clientless SSL VPN user interface and portal using
ASDM
• Implementing basic portal customization
• Troubleshooting the initial provisioning of Clientless SSL VPN applications due to misconfiguration

SSL VPN High Availability

• Implementing SSL and IPSEC VPN high availability features

Pre-Production Design

• Choosing Cisco IOS technologies to implement HLD
• Choosing Cisco products to implement HLD
• Choosing Cisco IOS features to implement HLD 2
• Integrating Cisco network security solutions with other security technologies
• Creating and testing initial Cisco IOS configurations for new devices/services

Complex Operations Support

• Optimising Cisco IOS security infrastructure device performance
• Creating complex network security rules to meet the security policy requirements
• Optimising security functions, rules, and configuration
• Configuring & verifying NAT to dynamically mitigate identified threats to the network
• Configuring & verifying IOS Zone Based Firewalls including advanced application inspections and URL filtering
• Configuring & verifing the IPS features to identify threats and dynamically block them from entering the network
• Maintaining, updating and tuning IPS signatures
• Configuring & verifying IOS VPN features
• Configuring & verifying Layer 2 and Layer 3 security features

Advanced Troubleshooting

• Cisco IOS security software configuraiton fault finding and repairing
• Cisco routers and switches hardware fault finding and repairing

Pre-Production Design

• Choosing Cisco IPS technologies to implement HLD
• Choosing Cisco products to implement HLD
• Choosing Cisco IPS features to implement HLD
• Integrating Cisco network security solutions with other security technologies
• Creating and testing initial Cisco IPS configurations for new devices/services

Complex Support Operations

• Optimising Cisco IPS security infrastructure device performance
• Creating complex network security rules, to meet the security policy requirements
• Configuring and verifing the IPS features to identify threats and dynamically block them from entering the network
• Maintaining, updating and tuning IPS signatures
• Using CSM and MARS for IPS management, deployment, and advanced event correlation.
• Optimising security functions, rules, and configuration

Advanced Troubleshooting

• Cisco IPS security software configuraiton fault finding and repairing
• Cisco IPS sensor and module hardware fault finding and repairing

Sju anledningar till varför du bör välja din kurs med Firebrand Training

1. Två utbildningsalternativ. Välj mellan boende på plats med klassrumsundervisning eller onlinekurser
2. Du blir certifierad snabbt. Hos oss blir du utbildad rekordsnabbt
3. Vår kurs är heltäckande. En engångsavgift täcker alla kursmaterial, examina**, boende* och måltider*. Inga dolda extra kostnader.
4. Godkänn första gången eller träna om gratis. Detta är vår garanti. Vi är övertygade om att du kommer klara kursen på första försöket. Men om inte, kom tillbaka inom ett år och betala endast för boende, examina och tillkommande kostnader
5. Du kommer lära dig mer. En dag med en traditionell utbildningsleverantör brukar generellt pågå från kl. 9 till 17, med en lång paus för lunch. Med Firebrand Training får du minst 12 timmar/dag av kvalitativ inlärningstid med din instruktör
6. Du kommer lära dig snabbare. Sannolikheten är att du har en annan inlärningsstil än de omkring dig. Vi kombinerar visuella, auditiva och taktila stilar för att leverera materialet på ett sätt som säkerställer att du lär dig snabbare och enklare
7. Du kommer studera med de bästa. Vi har varit med på Training Industrys lista "Top 20 IT Training Companies of the Year" varje år sedan 2010. Förutom många fler utmärkelser har vi utbildat och certifierat över 100 000 yrkesverksamma