Overview

Cisco Certified Network Professional Security (CCNP Security) certification program is aligned specifically to the job role of the Cisco Network Security Engineer responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNS, and IDS/IPS solutions for their networking environments.

Duration: 160 hours

Course Outline

Implementing Cisco Secure Access Solutions (SISAS)

Threat Mitigation through Identity Services

1. Identity Services
2. 802.1X and EAP
3. Configure 802.1X Components

ISE Fundamentals

1. Describe Cisco ISE Features and configure the fundamentals
2. Cisco ISE with PKI
3. Cisco ISE Authentication
4. Cisco ISE with External Authentication

Advance Access Control

1. Certificate Based User Authentication
2. Authorization
3. Cisco TrustSec

Web Authentication and Guest Access

1. Web Authentication
2. Guest Access Services

Endpoint

1. Posture
2. Profiler
3. BYOD

Troubleshooting Network Access Control

1. Troubleshooting ISE

Implementing Cisco Edge Network Security Solutions (SENSS)

Secure Design Principles

1. Course Overview
2. Network Security Zoning
3. Cisco Module Network Security Architecture
4. Cisco SecureX Architecture
5. Cisco TrustSec Solution

Deploying Network Infrastructure Protection

1. Introducing Cisco Network Infrastructure Protection
2. Deploying Cisco IOS Control Plane Security Controls
3. Deploying Cisco IOS Management Plane Security Controls
4. Deploying Cisco ASA Management Plane Security Controls
5. Deploying Cisco Traffic Telemetry Methods
6. Deploying Cisco IOS Layer 2 and Layer 3 Data Plane Security Controls

Deploying NAT on Cisco IOS and Cisco ASA

1. Introducing Network Address Translation
2. Deploying Cisco ASA Network Address Translation
3. Deploying Cisco IOS Software Network Address Translation

Deploying Threat Controls on Cisco ASA

1. Introducing Cisco Firewall Threat Controls
2. Deploying Basic Cisco ASA Access Policies
3. Deploying Advanced Cisco ASA Application Inspection Policies
4. Deploying Cisco ASA Botnet Traffic Filtering
5. Deploying Cisco ASA Identity Based Firewall

Deploying Threat Controls on Cisco IOS Software

1. Deploying Basic Cisco IOS Software with Basic Zone-Based Firewall Access Policies
2. Deploying Advanced Cisco IOS Software ZBFW with Application Inspection Policies

Implementing Cisco Secure Mobility Solutions (SIMOS)

Fundamentals of VPN Technologies and Cryptography

1. The Role of VPNs in Network Security
2. VPNs and Cryptography

Deploying Secure Site-to-Site Connectivity Solutions

1. Introducing Cisco Secure Site-to-Site Connectivity Solutions
2. Deploying Point-to-Point IPsec VPNs on the Cisco ASA
3. Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs
4. Deploying Cisco IOS DMVPNs

Deploying Cisco IOS Site-to-Site FlexVPN Solutions

1. Introducing Cisco IOS Site-to-Site FlexVPN Solutions
2. Deploying Point-to-Point IPsec VPNs Using Cisco IOS FlexVPN
3. Deploying Hub-and-Spoke IPsec VPNs Using Cisco IOS FlexVPN
4. Deploying Spoke-to-Spoke IPsec VPNs Using Cisco IOS FlexVPN
5. Deploying Basic Cisco Clientless SSL VPN
6. Clientless SSL VPN Overview
7. Deploying Basic Cisco Clientless SSL VPN on Cisco ASA
8. Deploying Application Access in Cisco ASA Clientless SSL VPN
9. Deploying Advanced Authentication and Authorization in Clientless SSL VPN

Deploying Cisco AnyConnect VPNs

1. Deploying Basic Cisco AnyConnect SSL VPN on Cisco ASA
2. Deploying Advanced Cisco AnyConnect SSL VPN on Cisco ASA
3. Deploying Advanced Authentication and Authorization in Cisco AnyConnect VPNs
4. Deploying Cisco AnyConnect IPsec/IKEv2 VPNs

Deploying Endpoint Security and Dynamic Access Policies

1. Implementing Host Scan
2. Implementing DAP for SSL VPNs

Implementing Cisco Threat Control Solutions (SITCS)

Cisco ASA (CX) NGFW

1. Describing the Cisco (CX) NGFW Services
2. Describing the Cisco ASA (CX) NGFW Management Architecture
3. Configuring Cisco ASA (CX) NGFW Policy Objects
4. Monitoring Cisco ASA (CX) NGFW Operations
5. Configuring Cisco ASA (CX) NGFW Access Policies
6. Configuring Cisco ASA (CX) NGFW Identity Policies
7. Configuring Cisco ASA (CX) NGFW Decryption Policies

Cisco Web Security Appliance

1. Describing the Cisco Web Security Appliance Solutions
2. Integrating the Cisco Web Security Appliance
3. Configuring Cisco Web Security Appliance Identities and User Authentication Controls
4. Configuring Cisco Web Security Appliance Acceptable Use Controls
5. Configuring Cisco Web Security Appliance Anti-Malware Controls
6. Configuring Cisco Web Security Appliance Decryption Configuring
7. Configuring Cisco Web Security Appliance Data Security Controls

Cisco Cloud Web Security

1. Describing the Cisco Cloud Web Security Solutions
2. Configuring Cisco Cloud Web Security Connectors
3. Describing the Web Filtering Policy in Cisco ScanCenter

Cisco Email Security Appliance

1. Describing the Cisco Email Security Solutions
2. Describing the Cisco Email Security Appliance Basic Configuration Concepts
3. Configuring Cisco Email Security Appliance Incoming and Outgoing Mail Policies
4. Describing IPS Threat Controls

Cisco Intrusion Prevention Systems

1. Integrating Cisco IPS Sensor into a Network
2. Configuring Basic Cisco IPS Settings
3. Tuning Cisco IPS Signatures
4. Configuring Custom Cisco IPS Signatures
5. Configuring Cisco IPS Anomaly-Detection
6. Configuring Cisco IPS Reputation-Based Features

Certification & exams

This training prepares students for the following exams:

300-208 SISAS           Implementing Cisco Secure Access Solutions (SISAS)

300-206 SENSS          Implementing Cisco Edge Network Security Solutions (SENSS)

300-209 SIMOS         Implementing Cisco Secure Mobility Solutions (SIMOS)

300-207 SITCS           Implementing Cisco Threat Control Solutions (SITCS)