Network Security Technologies

• • Defense-in-Depth Strategy
• • Defending Across the Attack Continuum
• • Network Segmentation and Virtualization Overview
• • Stateful Firewall Overview
• • Cisco IOS Zone-Based Policy Firewall Overview
• • Security Intelligence Overview
• • Threat Information Standardization
• • Network-Based Malware Protection Overview
• • IPS Overview
• • Next Generation Firewall Overview
• • Email Content Security Overview
• • Web Content Security Overview
• • Threat Analytic Systems Overview
• • DNS Security Overview
• • Authentication, Authorization, and Accounting Overview
• • Identity and Access Management Overview
• • Virtual Private Network (VPN) Technology Overview
• • Network Security Device Form Factors Overview

Cisco Secure Firewall ASA Deployment

• • Cisco Secure Firewall ASA Deployment Types
• • Cisco Secure Firewall ASA Interface Security Levels
• • Cisco Secure Firewall ASA Objects and Object Groups
• • Network Address Translation
• • Cisco Secure Firewall ASA Interface ACLs
• • Cisco Secure Firewall ASA Global ACLs
• • Cisco Secure Firewall ASA Advanced Access Policies
• • Cisco Secure Firewall ASA High Availability Overview

Cisco Secure Firewall Threat Defense Basics

• • Cisco Secure Firewall Threat Defense Deployments
• • Cisco Secure Firewall Threat Defense Packet Processing and Policies
• • Cisco Secure Firewall Threat Defense Objects
• • Cisco Secure Firewall Threat Defense NAT
• • Cisco Secure Firewall Threat Defense Prefilter Policies
• • Cisco Secure Firewall Threat Defense Access Control Policies
• • Cisco Secure Firewall Threat Defense Security Intelligence
• • Cisco Secure Firewall Threat Defense Discovery Polices

Cisco Cisco Secure Firewall Threat Defense IPS, Malware and File Policies

• • Cisco Secure Firewall Threat Defense IPS Policies
• • Cisco Secure Firewall Threat Defense Malware and File Policies

Cisco Secure Email Gateway Basics

• • Cisco Secure Email Overview
• • SMTP Overview
• • Email Pipeline Overview
• • Public and Private Listeners
• • Host Access Table Overview
• • Recipient Access Table Overview

Cisco Secure Email Policy Configuration

• • Mail Policies Overview
• • Protection Against Spam and Graymail
• • Anti-virus and Anti-malware Protection
• • Outbreak Filters
• • Content Filters
• • Data Loss Prevention
• • Email Encryption

Cisco Secure Web Appliance Deployment

• • Cisco Secure Web Appliance Overview
• • Deployment Options
• • Network Users Authentication
• • HTTPS Traffic Decryption
• • Access Policies and Identification Profiles
• • Acceptable Use Controls Settings
• • Anti-Malware Protection

VPN Technologies and Cryptography Concepts

• • VPN Definition
• • VPN Types
• • Secure Communication and Cryptographic Services
• • Keys in Cryptography
• • Public Key Infrastructure

Cisco Secure Site-to-Site VPN Solutions

• • Site-to-Site VPN Topologies
• • IPsec VPN Overview
• • IPsec Static Crypto Maps
• • IPsec Static Virtual Tunnel Interface
• • Dynamic Multipoint VPN
• • Cisco IOS FlexVPN

Cisco IOS VTI-Based Point-to-Point IPsec VPNs

• • Cisco IOS VTIs
• • Static VTI Point-to-Point IPsec IKEv2 VPN Configuration

Point-to-Point IPsec VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense

• • Point-to-Point VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense
• • Cisco Secure Firewall ASA Point-to-Point VPN Configuration
• • Cisco Secure Firewall Threat Defense Point-to-Point VPN Configuration

Cisco Secure Remote Access VPN Solutions

• • Remote Access VPN Components
• • Remote Access VPN Technologies
• • SSL Overview

Remote Access SSL VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense

• • Remote Access Configuration Concepts
• • Connection Profiles
• • Group Policies
• • Cisco Secure Firewall ASA Remote Access VPN Configuration
• • Cisco Secure Firewall Threat Defense Remote Access VPN Configuration

Describing Information Security Concepts (Self-Study)

• • Information Security Overview
• • Assets, Vulnerabilities and Countermeasures
• • Managing Risk
• • Vulnerability Assessment
• • Understanding CVSS

Describe Common TCP/IP Attacks (Self-Study)

• • Legacy TCP/IP Vulnerabilities
• • IP Vulnerabilities
• • ICMP Vulnerabilities
• • UDP Vulnerabilities
• • Attack Surface and Attack Vectors
• • Reconnaissance Attacks
• • Access Attacks
• • Man-In-The-Middle Attacks
• • Denial of Service and Distributed Denial of Service Attacks
• • Reflection and Amplification Attacks
• • Spoofing Attacks
• • DHCP Attacks

Describe Common Network Application Attacks (Self-Study)

• • Password Attacks
• • DNS Tunneling
• • Web-Based Attacks
• • HTTP 302 Cushioning
• • Command Injections
• • SQL Injections
• • Cross-Site Scripting and Request Forgery
• • Email-Based Attacks

Common Endpoint Attacks (Self-Study)

• • Buffer Overflow
• • Malware
• • Reconnaissance Attack
• • Gaining Access and Control
• • Gaining Access via Social Engineering
• • Gaining Access via Web-Based Attacks
• • Exploit Kits and Rootkits
• • Privilege Escalation
• • Post-Exploitation Phase
• • Angler Exploit Kit

Cisco Umbrella Deployment (Self-Study)

• • Cisco Umbrella Capabilities
• • Cisco Umbrella Identities and Policies Overview
• • Cisco Umbrella DNS Security
• • Cisco Umbrella Investigate Overview
• • Cisco Umbrella Secure Web Gateway
• • Cisco Umbrella CASB Functionalities

Endpoint Security Technologies (Self-Study)

• • Host-Based Personal Firewall
• • Host-Based Anti-Virus
• • Host-Based Intrusion Prevention System
• • Application Allowed Lists and Blocked Lists
• • Host-Based Malware Protection
• • Sandboxing Overview
• • File Integrity Checking

Cisco Secure Endpoint (Self-study)

• • Cisco Secure Endpoint Architecture
• • Cisco Secure Endpoint Engines
• • Retrospective Security with Cisco Secure Endpoint
• • Cisco Secure Endpoint Device and File Trajectory
• • Managing Cisco Secure Endpoint for Endpoints

Cisco Secure Network Access Solutions (Self-study)

• • Cisco Secure Network Access
• • Cisco Secure Network Access Components
• • AAA Role in Cisco Secure Network Access Solution
• • Cisco ISE
• • Cisco TrustSec

Describing 802.1X Authentication (Self-study)

• • 802.1X and EAP
• • EAP Methods
• • Role of RADIUS in 802.1X Communications
• • RADIUS Change of Authorization

Configuring 802.1X Authentication (Self-study)

• • Cisco Catalyst Switch 802.1X Configuration
• • Cisco IBNS 2.0 Configuration on Cisco Catalyst Switch
• • Cisco WLC 802.1X Configuration
• • Cisco ISE 802.1X Configuration
• • Supplicant 802.1x Configuration
• • Cisco Central Web Authentication

Network Infrastructure Protection (Self-Study)

• • Network Device Planes
• • Control Plane Security Controls
• • Management Plane Security Controls
• • Network Telemetry
• • Layer 2 Data Plane Security Controls
• • Layer 3 Data Plane Security Controls

Control Plane Security Controls (Self-Study)

• • Infrastructure ACLs
• • Control Plane Policing
• • Control Plane Protection
• • Routing Protocol Security

Layer 2 Data Plane Security Controls (Self-Study)

• • Overview of Layer 2 Data Plane Security Controls
• • VLAN-Based Attacks Mitigation
• • STP Attacks Mitigation
• • Port Security
• • Private VLANs
• • DHCP Snooping
• • ARP Inspection
• • Storm Control
• • MACsec Encryption

Layer 3 Data Plane Security Controls (Self-Study)

• • Infrastructure Antispoofing ACLs
• • Unicast Reverse Path Forwarding
• • IP Source Guard

Management Plane Security Controls (Self-Study)

• • Cisco Secure Management Access
• • Simple Network Management Protocol Version 3
• • Secure Access to Cisco Devices
• • AAA or Management Access

Traffic Telemetry Methods (Self-Study)

• • Network Time Protocol
• • Device and Network Events Logging and Export
• • Network Traffic Monitoring Using NetFlow

Cisco Secure Network Analytics Deployment (Self-Study)

• • Cisco Secure Network Analytics Overview
• • Cisco Secure Network Analytics Required Components
• • Flow Stitching and Deduplication
• • Cisco Secure Network Analytics Optional Components
• • Cisco Secure Network Analytics and ISE Integration
• • Cisco Secure Network Analytics with Global Threat Alerts
• • Cisco Encrypted Traffic Analytics (ETA)
• • Host Groups
• • Security Events and Alarms
• • Host, Role and Default Policies

Cloud Computing and Cloud Security (Self-Study)

• • Evolution of Cloud Computing
• • Cloud Service Models
• • Security Responsibilities in the Cloud
• • Cloud Deployment Models
• • Patch Management in the Cloud
• • Security Assessment in the Cloud

Cloud Security (Self-Study)

• • Cisco Threat-Centric Approach to Network Security
• • Cloud Physical Environment Security
• • Application and Workload Security
• • Cloud Management and API Security
• • Network Functions Virtualization (NFV) and Virtual Network Function (VNF)
• • Cisco NFV Examples
• • Reporting and Threat Visibility in Cloud
• • Cloud Access Security Broker
• • Cisco Cloudlock
• • OAuth and OAuth Attacks

Cisco Secure Cloud Analytics Deployment (Self-Study)

• • Cisco Secure Cloud Analytics for Public Cloud Monitoring
• • Cisco Secure Cloud Analytics for Private Network Monitoring
• • Cisco Secure Cloud Analytics Operations

Software-Defined Networking (Self-Study)

• • Software-Defined Networking Concepts
• • Network Programmability and Automation
• • Cisco Platforms and APIs
• • Basic Python Scripts for Automation

Labs

• • Discovery Lab 1: Configure Network Settings And NAT On Cisco Secure Firewall ASA
• • Discovery Lab 2: Configure Cisco Secure Firewall ASA Access Control Policies
• • Discovery Lab 3: Configure Cisco Secure Firewall Threat Defense NAT
• • Discovery Lab 4: Configure Cisco Secure Firewall Threat Defense Access Control Policy
• • Discovery Lab 5: Configure Cisco Secure Firewall Threat Defense Discovery and IPS Policy
• • Discovery Lab 6: Configure Cisco Secure Firewall Threat Defense Malware and File Policy
• • Discovery Lab 7: Configure Listener, HAT, and RAT on Cisco Secure Email Gateway
• • Discovery Lab 8: Configure Cisco Secure Email Policies
• • Discovery Lab 9: Configure Proxy Services, Authentication, and HTTPS Decryption
• • Discovery Lab 10: Enforce Acceptable Use Control and Malware Protection
• • Discovery Lab 11: Configure Static VTI Point-to-Point IPsec IKEv2 Tunnel
• • Discovery Lab 12: Configure Point-to-Point VPN between the Cisco Secure Firewall Threat Defense Devices
• • Discovery Lab 13: Configure Remote Access VPN on the Cisco Secure Firewall Threat Defense
• • Discovery Lab 14: Examine Cisco Umbrella Dashboard and DNS Security
• • Discovery Lab 15: Explore Cisco Umbrella Secure Web Gateway and Cloud-Delivered Firewall
• • Discovery Lab 16: Explore Cisco Umbrella CASB Functionalities
• • Discovery Lab 17: Explore Cisco Secure Endpoint
• • Discovery Lab 18: Perform Endpoint Analysis Using Cisco Secure Endpoint Console
• • Discovery Lab 19: Explore File Ransomware Protection by Cisco Secure Endpoint Console
• • Discovery Lab 20: Explore Secure Network Analytics v7.4.2
• • Discovery Lab 21: Explore Global Threat Alerts Integration and ETA Cryptographic Audit
• • Discovery Lab 22: Explore Cloud Analytics Dashboard and Operations
• • Discovery Lab 23: Explore Secure Cloud Private and Public Cloud Monitoring