Network Security

CCNA Security course is the ultimate training program for engineers pursuing the Cisco Certified Network Associate Security (CCNA Security) certification. Cisco Certified Network Associate Security (CCNA Security) validates associate-level knowledge and skills required to secure Cisco networks. With a CCNA Security certification, a network professional demonstrates the skills required to develop a security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats.
The CCNA Security curriculum emphasizes core security technologies, the installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices, and competency in the technologies that Cisco uses in its security structure.

Course Objectives

Upon completing this course, the learner will be able to meet these overall objectives :

• Develop a comprehensive network security policy to counter threats against information security.
• Configure routers on the network perimeter with Cisco IOS Software security features.
• Configure a Cisco IOS zone-based firewall to perform basic security operations on a network.
• Configure site-to-site VPNs using Cisco IOS features.
• Configure IPS on Cisco network routers.
• Configure LAN devices to control access, resist attacks, shield other network devices and systems, and protect the integrity and confidentiality of network traffic.

Prerequisites:

The knowledge and skills that a learner must have before attending this course are as follows:

• Skills and knowledge equivalent to those learned in Cisco Certified Network Associate Course (CCNA)
• Working knowledge of the Windows operating system

Course Outline

• Introduction to Network Security Principles
• Perimeter Security
• Network Security Using Cisco IOS Firewalls
• Site-to-Site VPNs
• Network Security Using Cisco IOS IPS
• LAN, SAN, Voice, and Endpoint Security Overview

Intended Audience

The CCNA Security course is designed for students seeking career-oriented, entry-level security specialist skills and networking professionals wish to enhance their basic security skills. CCNA Security provides a next step for CCNA students who want to expand their CCNA-level skill set to prepare for a career in network security.

Cisco Certified Network Professional Security (CCNP Security) training and certification focuses on the daily job tasks of experienced network security professionals and engineers. The training at Netmetric Solutions confirms that you have the knowledge and skills needed to test, deploy, configure, maintain, and troubleshoot the Cisco network security appliances and the Cisco IOS Software devices that comprise your network’s security.

Prerequisites

Knowledge of Microsoft Windows operating system
Cisco Certified Network Associate Training/Certification
Cisco Certified Network Professional Training/Certification
Cisco Certified Network Associate Security Training/Certification

Course Outline

The following modules would be covered during the training program

SISAS – Implementing Cisco Secure Access Solutions
SENSS – Implementing Cisco Edge Network Security Solutions
SIMOS – Implementing Cisco Secure Mobility Solutions
SITCS – Implementing Cisco Threat Control Solutions

SISAS – Implementing Cisco Secure Access Solutions

Threat Mitigation Through Identity Services
Cisco Identity Services Engine (ISE) Fundamentals
Advanced Access Control
Web Authentication and Guest Access
Endpoint Access Control Enhancements
Troubleshooting Network Access Control

SENSS – Implementing Cisco Edge Network Security Solutions

Cisco Secure Design Principles
Deploying Network Infrastructure Protection
Deploying NAT on Cisco IOS and Cisco ASA
Deploying Threat Controls on Cisco ASA
Deploying Threat Controls on Cisco IOS Software

SIMOS – Implementing Cisco Secure Mobility Solutions

Fundamentals of VPN Technologies and Cryptography
Deploying Secure Site-to-Site Connectivity Solutions
Deploying Cisco IOS Site-to-Site FlexVPN Solutions
Deploying Basic Cisco Clientless SSL VPN
Deploying Cisco AnyConnect VPNs
Deploying Endpoint Security and Dynamic Access Policies

SITCS – Implementing Cisco Threat Control Solutions

Cisco ASA Next-Generation Firewall (NGFW) Services
Cisco Web Security Appliance
Cisco Cloud Web Security
Cisco Email Security Appliance
Cisco Intrusion Prevention Systems

Cisco has responded to the challenge in the internetworking technology with the Cisco Certified Internetwork Expert (CCIE) Program. This is a high-level certification program designed to identify and serve the best of the internetworking experts and to improve your hands-on skills. The CCIE certification is currently the most significant certification in the industry.
CCIE Security 4.0 is unusual among security certificates for its up-to-date, real-world content. It emphasizes security competency and efficient problem solving in networks that use cloud services, carry voice and multimedia traffic, and are accessed by a variety of wireless devices.

Course Objective

The Netmetric Solutions CCIE Security Bootcamp consists of a set of practice exercises covering all protocols tested in the CCIE lab exam. They are aimed at engineers preparing for the CCIE lab exam who already understand the theory of the protocols being tested
This bootcamp is the next step to fully understanding complex CCIE level technologies. Every possible technology you need to know for the CCIE Security lab will be described in extremely verbose detail using what we call a “Cavernous” approach. This approach combines an overview with a instructor-led class walk through the every interface found in the CCIE Lab Exam. In the walk-through, the instructor will discuss with the students all possible aspects of configuration, then demonstrate those technologies, and go into expert level troubleshooting. This will all be done live, while fielding questions from students throughout the demonstration. This live question-taking will facilitate diving even deeper into subjects than if an instructor simply recorded demonstrations, as different students will inevitably pose questions and scenarios in different ways.
CCIE certified and experienced Cisco instructor will facilitate the class. The instructor will provide detailed explanation and facilitate group discussion. Students will also receive individual attention from the instructor if needed. Throughout the course students will have access to their own personal rack of equipment matching the CCIE Security Lab blueprint. Immersing students in an environment without the distraction of work and personal obligations, students will maintain focus required to benefit from the volume of material. Delegates should be prepared to work beyond the usual classroom hours. The course is frequently reviewed to ensure that it is up to date and meets the latest topics tested on the CCIE Security 4.0 Lab exam blueprint.

Description

• Designed specifically to prepare students to pass the CCIE Security Lab Exam CCIE Security Certified Instructor
• 50% hands-on and 50% lecture
• Choice of on-site instructor-led training at any of our locations
• CCIE Security Lab bootcamp will have a maximum of 15 students
• Dedicated instructor mentoring to ensure all concepts are completely understood our workbook is updated to reflect the current content of the CCIE Security Lab Exam. The CCIE workbook is updated after each class based on previous feedback
• Student receives dedicated instructor mentoring to ensure all concepts are completely understood
• Each student has their own rack. The CCIE Lab Exam is not a team effort, so your preparation should not be either!
• Courseware and rack hardware have been updated to reflect the current content of the CCIE Security Lab Exam Version 4.0

Course Outline

• Lab Strategy
• ASA Firewalls
• IOS Firewalls
• WSA – Web Security Appliance (Cisco IronPort)
• VPN solutions
• Identity Services Engine (ISE)
• ACS Server
• Intrusion Prevention (IPS)
• Network Attacks
• Superlab

Intended Audience

CCIE Security candidates who have already obtained their CCNP Security or have equivalent level-of-knowledge. This bootcamp is also beneficial to those CCIE candidates who have attempted the actual CCIE lab exam without passing and need to build on their understanding of the fundamental topics.