CISCO

Cisco Certified Security Professional

Cisco Certified Security Professional (CCNP Security®) validates advanced knowledge and skills required to secure Cisco networks. With a CCSP certification, a network professional demonstrates the skills required to secure and manage network infrastructures to protect productivity, mitigate threats, and reduce costs. The CCSP curriculum emphasizes Cisco Router IOS (ISR) and Catalyst Switch security features, Adaptive Security Appliance (ASA), secure VPN connectivity, Intrusion Prevention Systems (IPS), Cisco Security Agent (CSA), Security Enterprise and Device Management, Network Admission Control (NAC) as well as techniques to optimize these technologies in a single, integrated network security solution. In addition, CCSP leverages the new CCNA Security certification as a prerequisite.

Course Outline

• Securing Networks with Cisco Routers and Switches
  • Cisco Secure ACS for Windows configuration
  • Configuring Cisco IOS Security Feature Set including IOS Firewall CBAC(Context-Based Access Control), Authentication Proxy and IPS (Intrusion Prevention System)
  • Layer 2 Security, including Cisco IBNS (Identity Based Network Services), and 802.1x Port-Based Authentication
  • Building Cisco IOS-based VPNs Using Cisco Routers and Pre-Shared Keys
  • Building Cisco IOS-based VPNs Using Cisco Routers and Certificate Authorities - Cisco IOS Remote Access Using Cisco Easy VPN
  • Cisco Security Device Manager (SDM).

  
  
• Securing Networks with PIX and ASA
  • Cisco Security Appliance Technology and Features
  • Cisco PIX Security Appliance and ASA Adaptive Security Appliance Families
  • Getting Started with Cisco Security Appliances
  • Translations and Connections
  • Access Control Lists and Content Filtering
  • Object Grouping
  • Authentication, Authorization, and Accounting
  • Switching and Routing
  • Modular Policy Framework
  • Configuring Security Appliance Remote Access Using Cisco Easy VPN
  • Configuring ASA for WebVPN
  • Configuring Transparent Firewall
  • Configuring Security Contexts
  • Failover
  • Cisco Security Appliance Device Manager
  • Configuring PIX Security Appliance Remote Access Using Cisco Easy VPN

  
  
• Cisco Secure Virtual Private Networks
  • Network Security and the Cisco Virtual Private Network
  • Overview of VPN and IPSec Technologies
  • Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview
  • Configure Cisco VPN 3000 for Remote Access Using Pre-shared Keys
  • Configure Cisco VPN 3000 for Remote Access Using Digital Certificates
  • Configure Cisco VPN Firewall Feature for IPSec Software Client
  • Configure Cisco VPN Client Auto-initiation
  • Monitor and Administrator Cisco Virtual Private Network 3000 Remote Access Networks
  • Configure Cisco Virtual Private Network 3002 Hardware Client Remote Access
  • Configuring Cisco 3002 Hardware Client for user and unit authentication
  • Configuring Cisco 3002 Hardware Client for backup server, load balancing and reverse route
  • Configuring Cisco 3002 Hardware Client for software auto-update
  • Configuring Cisco 3002 Hardware Client for IPSec over TCP and UDP
  • Cisco VPN 3000 LAN-to-LAN with Pre-Shared Keys
  • Configure Cisco VPN Concentrator for LAN-toLAN Using NAT
  • Configure Cisco Virtual Private Network 3000 LAN-to-LAN Using Digital Certificates

  
  
• Implementing Cisco Intrusion Prevention System
  • Security Fundamentals
  • Intrusion Prevention Overview
  • Getting Started with the IDS Command Line Interface
  • Using IDM
  • Basic Sensor Configuration
  • Cisco Intrusion Detection System Alarms and Signatures
  • Signature Engines
  • Signature Configuration
  • Sensor Tuning
  • Alarm Monitoring and Management
  • Blocking Configuration
  • Capturing Network Traffic for Intrusion Detection Systems

  
  
• Securing Cisco Network Devices
  • Introduction to Network Security Policies
  • Securing the Perimeter
  • Securing the LAN Devices
  • Configuring a Cisco IOS Firewall
  • Securing Networks with Cisco IOS IPS
  • Building IPSec VPNs

  
  

Back to top