ACADEMIA LOCAL CISCO UCV-MARACAY CONTENIDO DE CURSO CURRICULUM CCNA. SEGURIDAD SEGURIDAD EN REDES. NIVEL I. VERSION 2.0

Transcription

1 ACADEMIA LOCAL CISCO UCV-MARACAY CONTENIDO DE CURSO CURRICULUM CCNA. SEGURIDAD SEGURIDAD EN REDES. NIVEL I. VERSION 2.0 Module 1: Vulnerabilities, Threats, and Attacks 1.1 Introduction to Network Security The need for network security Identifying potential risks to network security Open versus closed security models Trends driving network security Information security organizations 1.2 Introduction to Vulnerabilities, Threats, and Attacks Vulnerabilities Threats Attacks 1.3 Attack Examples Reconnaissance attacks Access attacks Denial of service attacks Distributed denial of service attacks Malicious code 1.4 Vulnerability Analysis Policy review Network analysis Host analysis Analysis tools Module 2: Security Planning and Policy 2.1 Discussing Network Security and Cisco The security wheel Network security policy 2.2 Endpoint Protection and Management Host and server based security components and technologies PC management 2.3 Network Protection and Management Network based security components and technologies Network security management 2.4 Security Architecture Security architecture (SAFE) The Cisco Self-Defending Network Cisco integrated security Plan, Design, Implement, Operate, Optimize (PDIOO)

2 Curso CCNA: Seguridad en Redes. Nivel I. Versión Basic Router Security Control access to network devices Remote configuration using SSH Router passwords Router privileges and accounts IOS network services Routing, proxy ARP and ICMP Routing protocol authentication and update filtering NTP, SNMP, router name, DNS Module 3: Security Devices 3.1 Device Options Appliance-based, server-based, and integrated firewalls Cisco IOS Firewall feature set PIX Security Appliance Adaptive Security Appliance Finesse Operating System Firewall Services Module 3.2 Using Security Device Manager SDM overview SDM software Using the SDM startup wizard SDM user interface SDM wizards Using SDM to configure a WAN Using the factory reset wizard Monitor mode 3.3 Introduction to the Cisco Security Appliance Family PIX Security Appliance models Adaptive Security Appliance models Security appliance licensing Expanding the features of the security appliance 3.4 Getting Started with the PIX Security Appliance User interface Configuring the PIX Security Appliance Security levels Basic PIX Security Appliance configuration commands Additional PIX Security Appliance configuration commands Examining the PIX Security Appliance status Time setting and NTP support Syslog configuration 3.5 PIX Security Appliance Translations and Connections Transport protocols Network address translation (NAT) Port address translation (PAT) The static command The identity nat command Connections and translations Configuring multiple interfaces

3 Curso CCNA: Seguridad en Redes. Nivel I. Versión Manage a PIX Security Appliance with Adaptive Security Device Manager ASDM overview ASDM operating requirements Prepare for ASDM Using ASDM to configure the PIX Security Appliance 3.7 PIX Security Appliance Routing Capabilities Virtual LANs Static and RIP routing OSPF Multicast routing 3.8 Firewall Services Module Operation Firewall Services Module overview Getting started with the FWSM Using PDM with the FWSM Module 4: Trust and Identity Technology 4.1 AAA TACACS RADIUS Comparing TACACS+ and RADIUS 4.2 Authentication Technologies Static passwords One-time passwords and token cards Digital certificates Biometrics 4.3 Identity Based Networking Services (IBNS) Introduction to IBNS x Wired and wireless implementations 4.4 Network Admission Control (NAC) NAC components NAC phases NAC operation NAC vendor participation Module 5: Cisco Secure Access Control Server 5.1 Cisco Secure Access Control Server for Windows Cisco Secure Access Control Server product overview Authentication and user databases The Cisco Secure ACS user database Keeping databases current Cisco Secure ACS for Windows architecture How Cisco Secure ACS authenticates users User changeable passwords 5.2 Configuring RADIUS and TACACS+ with CSACS Installation steps Administering Cisco Secure ACS for Windows Troubleshooting Enabling TACACS Verifying TACACS Configuring RADIUS

4 Curso CCNA: Seguridad en Redes. Nivel I. Versión Module 6: Configure Trust and Identity at Layer Cisco IOS Firewall Authentication Proxy Cisco IOS Firewall authentication proxy AAA server configuration AAA configuration Allow AAA traffic to the router Authentication proxy configuration Test and verify authentication proxy 6.2 Introduction to PIX Security Appliance AAA Features PIX Security Appliance authentication PIX Security Appliance authorization PIX Security Appliance accounting AAA server support 6.3 Configure AAA on the PIX Security Appliance PIX Security Appliance access authentication Interactive user authentication The local user database Authentication prompts and timeout Cut-through proxy authentication Authentication of Non-Telnet, FTP, or HTTP traffic Authorization configuration Downloadable ACLs Accounting configuration Troubleshooting the AAA configuration Module 7: Configure Trust and Identity at Layer Identity-Based Networking Services (IBNS) IBNS overview IEEE 802.1x x components x applications with Cisco IOS Software How 802.1x works Selecting the correct EAP IBNS and Cisco Secure ACS ACS deployment considerations Cisco Secure ACS RADIUS profile configuration 7.2 Configuring 802.1x Port-Based Authentication x port-based authentication configuration tasks Enabling 802.1x authentication Configuring the switch-to-radius-server communication Enabling periodic re-authentication Manually re-authenticating a client connected to a port Enabling multiple hosts Resetting the 802.1x configuration to the default values Displaying 802.1x statistics and status

5 Curso CCNA: Seguridad en Redes. Nivel I. Versión Module 8: Configure Filtering on a Router 8.1 Filtering Technologies Packet filtering Stateful filtering URL filtering 8.2 Cisco IOS Firewall Context-Based Access Control Context-based Access Control (CBAC) Cisco IOS ACLs How CBAC works CBAC supported protocols 8.3 Configure Cisco IOS Firewall Context-Based Access Control CBAC configuration tasks Prepare for CBAC Set audit trails and alerts Set global timeouts Set global thresholds Half-open connection limits by host System-defined port-to-application mapping User-defined port-to-application mapping Define inspection rules for applications Define inspection rules for IP fragmentation Define inspection rules for ICMP Apply inspection rules and ACLs to interfaces Test and verify CBAC Configure an IOS firewall using SDM Module 9: Configure Filtering on a PIX Security Appliance 9.1 Configure ACLs and Content Filters PIX Security Appliance ACLs Configuring ACLs ACL line numbers The icmp command nat 0 ACLs Turbo ACLs Using ACLs Malicious code filtering URL filtering 9.2 Object Grouping Overview of object grouping Getting started with object groups Configure object groups Nested object groups Manage object groups 9.3 Configure a Security Appliance Modular Policy Modular policy overview Configure a class map Configure a policy map Configure a service policy

6 Curso CCNA: Seguridad en Redes. Nivel I. Versión Configure Advanced Protocol Inspection Introduction to advanced protocol inspection Default traffic inspection and port numbers FTP inspection FTP deep packet inspection HTTP inspection Protocol application inspection Multimedia support Real-Time Streaming Protocol (RTSP) Protocols required to support IP telephony DNS inspection Module 10: Configure Filtering on a Switch 10.1 Introduction to Layer 2 Attacks Types of attacks 10.2 MAC Address, ARP, and DHCP Vulnerabilities CAM table overflow attack Mitigating the CAM table overflow attack MAC spoofing man in the middle attacks Mitigating MAC spoofing attacks Using dynamic ARP inspection to mitigate MAC spoofing attacks DHCP starvation attacks Mitigating DHCP starvation attacks 10.3 VLAN Vulnerabilities VLAN hopping attacks Mitigating VLAN hopping attacks Private VLAN vulnerabilities Defending private VLANs 10.4 Spanning-Tree Protocol Vulnerabilities Spanning-Tree Protocol vulnerabilities Preventing Spanning-Tree Protocol manipulation