Course Objectives

The objective of this course is for students to successfully prepare and take the 4 certification exams required for CCNP Security Certification.

• Securing Networks with Cisco Routers and Switches (SECURE) 1.0
• Deploying Cisco ASA Firewall Features (FIREWALL) 1.0
• Deploying Cisco ASA VPN Solutions (VPN) 1.0
• Implementing Cisco Intrusion Prevention System (IPS) v7.0

 

 Upon completing this course, the learner will be able to meet these overall objectives:

• Implement and maintain Cisco IOS Software infrastructure protection controls in a Cisco router- and switch-based network infrastructure.
• Implement and maintain Cisco IOS Software threat control and containment technologies in a Cisco router-based perimeter infrastructure.
• Implement and maintain Cisco IOS Software VPN technologies in a Cisco router-based WAN.
• Implement and maintain Cisco IOS Software remote access VPN technologies in a Cisco router-based remote access solution.
• Evaluate the basic technology, features, and hardware models of the Cisco ASA adaptive security appliance product line.
• Implement and maintain basic Cisco ASA adaptive security appliance connectivity and device management plane features.
• Implement and maintain data plane access control features of the Cisco ASA adaptive security appliance product family.
• Implement and maintain Cisco ASA adaptive security appliance features that integrate it with the local and global routing and switching infrastructure.
• Implement and maintain Cisco ASA adaptive security appliance virtualization and high availability features.
• Evaluate Cisco ASA adaptive security appliance SSM modules, their major features, and integrate them with the Cisco ASA adaptive security appliance.
• Evaluate the Cisco ASA adaptive security appliance VPN subsystem
• Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
• Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
• Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
• Deploy advanced Cisco ASA adaptive security appliance VPN solutions
• Evaluate products and deployment architectures for the Cisco IPS product line.
• Perform an initial implementation of a Cisco IPS sensor.
• Implement an initial security policy using a Cisco IPS sensor according to local policies and environmental requirements.
• Deploy customized policies to adapt Cisco IPS traffic analysis and response to the target environment.
• Implement a basic Cisco IPS data management and analysis solution.
• Implement complex Cisco IPS policy virtualization, high availability, and high performance solutions according to policy and environmental requirements.
• Perform the initial setup of, and maintain specific Cisco IPS hardware.

 

Course Description:

• Designed specifically to prepare students to pass all four CCNP Security Exams.
• On-site instructor-led training at any of our locations
• CCNP Security class will have a maximum of 20 students.
• Dedicated instructor mentoring to ensure all concepts are completely understood.
• Access is provided to the racks 14 hours a day.
• Free practice questions.
• Class length is 20 consecutive days or 80 hours, and runs Monday through Saturday, typically from 10:00 AM to 2:00 PM. In addition to classroom time, there will be daily lab assignments to be completed.

Prerequisites:

The knowledge and skills that a learner must have before attending this course are as follows:

• Skills and knowledge equivalent to those learned in Cisco Certified Network Associate Course (CCNA) and/or Cisco Certified Network Professional Course (CCNP)

Course Outline:

Secure 1.0

Module 1: Deploying Cisco IOS Software Network Foundation Protection Lesson

• Deploying Network Foundation Protection Controls
• Deploying Advanced Switched Data Plane Security Controls
• Implementing Cisco Identity-Based Network Services
• Deploying Basic 802.1X Features
• Deploying Advanced Routed Data Plane Security Controls
• Deploying Advanced Control Plane Security Controls
• Deploying Advanced Management Plane Security Controls

 

Module 2: Deploying Cisco IOS Software Threat Control and Containment

• Deploying Cisco IOS Software Network Address Translation
• Deploying Basic Zone-Based Policy Firewalls
• Deploying Advanced Zone-Based Policy Firewalls
• Deploying Cisco IOS Software IPS

 

Module 3: Deploying Cisco IOS Software Site-to-Site Transmission Security

• Site-to-Site VPN Architectures and Technologies
• Deploying VTI-Based Site-to-Site IPsec VPNs
• Deploying Scalable Authentication in Site-to-Site IPsec VPNs
• Deploying DMVPNs
• Deploying High Availability in Tunnel-Based IPsec VPNs
• Deploying GET VPN

 

Module 4: Deploying Secure Remote Access with Cisco IOS Software

• Remote Access VPN Architectures and Technologies
• Deploying Remote Access Solutions Using SSL VPN
• Deploying Remote Access Solutions Using Cisco Easy VPN

Firewall 1.0

• Introduction to the Cisco ASA Adaptive Security Appliance
• Implementation of Basic Connectivity and Device Management
• Deployment of Cisco ASA Adaptive Security Appliance Access Control Features
• Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features
• Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High-Availability Features
• Integration of Cisco ASA Adaptive Security Appliance Security Service Modules

VPN 1.0

• Evaluate the Cisco ASA adaptive security appliance VPN subsystem
• Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
• Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
• Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
• Deploy advanced Cisco ASA adaptive security appliance VPN

IPS 7.0

• Introduction to Intrusion Prevention and Detection, Cisco IPS Software and Supporting Devices
• Installing and Maintaining Cisco IPS Sensors
• Applying Cisco IPS Security Policies
• Adapting Traffic Analysis and Response to the Environment
• Managing and Analyzing Events
• Deploying Virtualization, High Availability and High Performance Solutions
• Configuring and Maintaining Specific Cisco IPS Hardware

 

Intended Audience

The CCNP Security course is aligned specifically to the job role of the Cisco Network Security Engineer responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNs, and IDS/IPS solutions for their networking environments. This course is also recommended for Internetwork professionals
who seek Cisco Certified Network Professional (CCNP) Security certification. The certification replaces the CCSP certification and is tuned specifically to the role of the Cisco Network Security Engineer.