CISCO CCNP SECURITY Cisco Certified Network Professional (Security)

Transcription

1 CISCO CCNP SECURITY Cisco Certified Network Professional (Security) thinqtank Learning is offering an industry unique twelve day training camp in which students can receive the Cisco CCNP Security certification. As with all of our Cisco Training Experiences exams are delivered in the classroom. In our classroom, students receive gigabytes of take-home CBT and lab material with labs to keep practicing and refining the skills learned in the classroom. Additionally, our students receive: thinqtank Accelerated Exam Study Guides for SENSS, SIMOS, SITCS, and SISAS Exam Delivery in the classroom with a 95% success rate Custom and focused exam preparation software and materials Course specific thinqtank Learning publications to promote a fun and exciting learning Membership to the thinqtank Learning University Online Extended hours of training including 30+ hands-on lab exercises WE DO NOT TEACH THE TEST We always deliver valuable hands-on experience Receive all of the reading material and exam study guides as soon as you register Cisco Certified Network Professional Security (CCNP Security) certification focuses on the daily job tasks of experienced network security professionals and engineers. Achieving CCNP Security certification confirms that you have the knowledge and skills needed to test, deploy, configure, maintain, and troubleshoot the Cisco network security appliances and the Cisco IOS Software devices that comprise your network's security.

2 The value of CCNP Security Certification to Organizations Improve productivity and performance of network staff Better return on investment in a secure network infrastructure Reduce costs through better maintenance and troubleshooting of security architectures Increase customer satisfaction through better service and support Value of CCNP Security Certification to Professionals Structure for continuing education and professional development Range of learning products to match learning style Be part of a connected security community Recertification The CCNP Security certification is valid for three years. Cisco Professional-level certifications are valid for three years. To recertify, you must do one of the following before your certification expiration date: Pass any current 642-XXX Professional-level exam Pass any current CCIE Written Exam or hold any CCIE certification Pass the current CCDE Written Exam OR current CCDE Practical Exam Pass the CCAr interview and the CCAr board review

3 What Courses are Included in this Training Camp? SENSS - Implementing Cisco Edge Network Security Solutions SIMOS - Implementing Cisco Secure Mobility Solutions SITCS - Implementing Cisco Threat Control Solutions SISAS - Implementing Cisco Secure Access Solutions Are There Any Prerequisites? A valid CCNA and CCNA Security certification is required. We also recommend familiarity with internetworking technologies and the ability to perform basic router configuration. In addition, experience installing, operating, and maintaining Cisco routers and switches in an enterprise environment is recommended. A decent knowledge of Microsoft Windows operating system is recommended. Material Covered Days One through Three Implementing Cisco Edge Network Security Solutions (SENSS) v1.0 is designed to prepare security engineers with the knowledge and hands-on experience to prepare them to configure Cisco perimeter edge security solutions utilizing Cisco Switches, Cisco Routers, and Cisco Adaptive Security Appliance (ASA) Firewalls. The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed security on Cisco ASA firewalls, Cisco Routers with the firewall feature set, and Cisco Switches. The student will gain hands-on experience with configuring various perimeter security solutions for mitigating outside threats and securing

4 network zones. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco Switches, Cisco ASA, and Router security appliance feature and provide detailed operations support for these products. The Implementing Cisco Edge Network Security (SENSS) exam delivered on the last day of this section tests the knowledge of a network security engineer to configure and implement security on Cisco network perimeter edge devices such as a Cisco Switch, Cisco Router, and Cisco ASA Firewall. This exam focuses on the technologies used to secure the perimeter of a network such as Network Address Translation (NAT), ASA policy and application inspect, and Zone-Based Firewall on Cisco routers. Material Covered Days Four through Seven Implementing Cisco Secure Mobility Solutions (SIMOS) v1.0 is a newly created five-day instructorled training (vilt) course that is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. This course is designed to prepare network security engineers with the knowledge and skills they need to protect data traversing a public or shared infrastructure such as the Internet by implementing and maintaining Cisco VPN solutions. Students of this course will gain hands-on experience with configuring and troubleshooting remote access and site-to-site VPN solutions, using Cisco ASA adaptive security appliances and Cisco IOS routers.

5 The Implementing Cisco Secure Mobility Solutions (SIMOS) exam delivered on Day 6 tests a network security engineer on the variety of Virtual Private Network (VPN) solutions that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms. The exam assesses the knowledge necessary to properly implement secure remote communications through VPN technology such as remote access SSL VPN and Site-to-Site VPN (DMVPN, FlexVPN). Material Covered Days Eight through Ten Implementing Cisco Threat Control Solutions (SITCS) v1.0 is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco s Next Generation Firewall (NGFW) as well as Web Security, Security and Cloud Web Security. The goal of this portion of the course is to provide students with foundational knowledge and the capabilities to implement and managed security on Cisco ASA firewalls utilizing Cisco Next Generation product solution which integrates Cisco Prime Security Manager for managing identity policies. The student will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing traffic traversing the firewall. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco s Next Generation Firewall security appliance feature and provide operational support for Intrusion Prevention Systems, Security, and Web based security appliances. The Implementing Cisco Threat Control Solutions (SITCS) exam tests a network security engineer on advanced firewall architecture and configuration with Cisco's Next Generation Firewall (NGFW) utilizing access and identity polices. This exam covers integration of Intrusion Prevention System (IPS) and context-aware firewall components, as well as Web (Cloud) and Security solutions.

6 Material Covered Days Eleven and Twelve Implementing Cisco Secure Access Solutions (SISAS) v1.0 is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco s Identity Services Engine and 802.1X secure network access. The goal of this portion of the course is to provide students with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution. The student will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco s ISE appliance feature and provide operational support identity and network access control. The Implementing Cisco Secure Access Solutions (SISAS) exam tests whether a network security engineer knows the components and architecture of secure access by utilizing 802.1X and TrustSec. This exam covers Cisco Identity Services Engine (ISE) architecture, solution and components as an overall network threat mitigation and endpoint control solutions. It also includes the fundamental concepts of BYOD using posture and profiling services of ISE.

7 What You Should Expect to Learn SENSS Security threat landscape Implement Cisco modular network security architectures such as SecureX and TrustSec Deploy Cisco infrastructure management and control plane security controls Configure Cisco layer 2 and layer 3 data plane security controls Implement and maintain Cisco ASA Network Address Translations (NAT) Implement and maintain Cisco IOS Software NAT Designing and deploying Cisco Cyber Threat Defense solutions on a Cisco ASA utilizing access policy and application and identity based inspection Implement Botnet Traffic Filters Deploy Cisco IOS Zone-Based Policy Firewalls (ZBFW) Configure and verify Cisco IOS ZBFW application inspection policy SIMOS Various VPN technologies and deployments Cryptographic algorithms and protocols that provide VPN security Cisco site-to-site VPN solutions Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs Cisco clientless SSL VPNs Cisco AnyConnect SSL and IPsec VPNs Endpoint security and dynamic access policies (DAP)

8 SITCS Cisco ASA NGFW Deploy and configure Cisco Web Security Appliance Configure Cisco Cloud Web Security Connectors Cisco Security solution Configure Cisco Appliance incoming and outgoing policies Cisco IPS Threat Control Configure and Implement Cisco IPS Sensor into a network SISAS Cisco ISE architecture and access control capabilities 802.1X architecture, implementation, and operation Commonly implemented Extensible Authentication Protocols (EAP) Implement public-key infrastructure (PKI) with ISE Implement internal and external authentication databases Implement MAC authentication bypass Implement identity based authorization policies Cisco TrustSec features Implement web authentication and guest access Implement ISE posture service Implement ISE profiling Bring Your Own Device (BYOD) with ISE Troubleshoot ISE

9 Once I Succesfully Complete This Course, What is Next? CCIE SEC Cisco Internetwork Expert Security Course Outline SENSS Cisco Secure Design Principles Deploying Network Infrastructure Protection Deploying NAT on Cisco IOS and Cisco ASA Deploying Threat Controls on Cisco ASA Deploying Threat Controls on Cisco IOS Software SENSS Labs Lab 1: Configuring Configure Cisco Policy Protection (CPP) and Management Plane Protection (MPP) Lab 2: Configure Traffic Telemetry Methods Lab 3: Configure Layer 2 Data Plan Security Lab 4: Configure Layer 2 Data Plan Security Lab 5: Configure NAT on Cisco Adaptive Security Appliance (ASA) Firewall Lab 6: Configure NAT on Cisco IOS Software Lab 7: Configure Cisco ASA Access Policy Lab 8: Configure Cisco ASA Application Inspection Policy

10 Lab 9: Configure Cisco ASA Botnet Traffic Filter Lab 10: Configure Cisco ASA Identity Based Firewall Lab 11: Configure Cisco IOS Software Zone-Based Firewall (ZBFW) Lab 12: Configure Cisco IOS Software ZBFW Application Inspection Policy Lab Activity Solutions SIMOS Fundamentals of VPN Technologies and Cryptography Deploying Secure Site-to-Site Connectivity Solutions Deploying Cisco IOS Site-to-Site FlexVPN Solutions Lesson 2: Deploying Basic Cisco Clientless SSL VPN Deploying Cisco AnyConnect VPNs Deploying Endpoint Security and Dynamic Access Policies SIMOS Labs Lab 1: Implement Site-to-Site Secure Connectivity on the Cisco ASA Lab 2: Implement Cisco IOS Static VTI Point-to-Point Tunnel Lab 3: Implement DMVPN Lab 4: Implement Site-to-Site Secure Connectivity Using Cisco IOS FlexVPN Lab 5: Implement Hub-to-Spoke Secure Connectivity Using Cisco IOS Flex VPN Lab 6: Implement Spoke-to-Spoke Secure Connectivity Using Cisco IOS Flex VPN Lab 7: Implement ASA Basic Clientless SSL VPN Lab 8: Application Access Clientless SSL Lab 9: Advanced AAA Clientless SSL Lab 10: Implement ASA Basic AnyConnect SSL VPN

11 Lab 11: Configure Advanced Cisco AnyConnect SSL VPN on Cisco ASA Lab 12: Configure Cisco AnyConnect IPsec/IKEv2 VPNs on Cisco ASA Lab 13: Configure Advanced Authentication for Cisco AnyConnect VPN on Cisco ASA Lab 14: Configure Hostscan and DAP for AnyConnect SSL VPNs SITCS Cisco ASA Next-Generation Firewall (NGFW) Services Cisco Web Security Appliance Cisco Cloud Web Security Cisco Security Appliance Cisco Intrusion Prevention Systems SITCS Labs Lab 1 Exploring Cisco ASA (CX) NGFW and PRSM Lab 2 Configuring Cisco ASA (CX) NGFW Access Policy Lab 3 Configuring Cisco ASA (CX) NGFW Identity Policy Lab 4 Configuring Cisco ASA (CX) NGFW Decryption Policy Lab Lab 5: Configuring Cisco Web Security Appliance Lab 6: Configuring Cisco Cloud Web Security Connector on AnyConnect and ISR G2 Lab 7: Configuring Basic Cisco Security Mail Policies Lab 8: Configuring Cisco Basic Cisco IPS Settings Lab 9: Tuning Cisco IPS Signatures and Anomaly Detection

12 SISAS Threat Mitigation Through Identity Services Cisco Identity Services Engine (ISE) Fundamentals Advanced Access Control Web Authentication and Guest Access Endpoint Access Control Enhancements Troubleshooting Network Access Control SISAS Labs Lab 1: Bootstrap Identity System Lab 2: Enroll Cisco ISE in PKI Lab 3: Implement MAB and Internal Authentication Lab 4: Implement External Authentication Lab 5: Implement EAP-TLS Lab 6: Implement Authorization Lab 7: Implement Central WebAuth and Guest Services Lab 8: Implement Posture Service Lab 9: Implement the Profile Service Lab 10: Troubleshooting Network Access Control (Optional)

13 Exam Information Implementing Cisco Edge Network Security Solutions (SENSS) Implementing Cisco Secure Mobility Solutions (SIMOS) Implementing Cisco Threat Control Solutions (SITCS) Implementing Cisco Secure Access Solutions (SISAS)