Secure Design Principles

• Course Overview
• Network Security Zoning
• Cisco Module Network Security Architecture
• Cisco SecureX Architecture
• Cisco TrustSec Solution

Deploying Network Infrastructure Protection

• Introducing Cisco Network Infrastructure Protection
• Deploying Cisco IOS Control Plane Security Controls
• Deploying Cisco IOS Management Plane Security Controls
• Deploying Cisco ASA Management Plane Security Controls
• Deploying Cisco Traffic Telemetry Methods
• Deploying Cisco IOS Layer 2 and Layer 3 Data Plane Security Controls

 Deploying NAT on Cisco IOS and Cisco ASA

• Introducing Network Address Translation
• Deploying Cisco ASA Network Address Translation
• Deploying Cisco IOS Software Network Address Translation

 Deploying Threat Controls on Cisco ASA

• Introducing Cisco Firewall Threat Controls
• Deploying Basic Cisco ASA Access Policies
• Deploying Advanced Cisco ASA Application Inspection Policies
• Deploying Cisco ASA Botnet Traffic Filtering
• Deploying Cisco ASA Identity Based Firewall

 Deploying Threat Controls on Cisco IOS Software

• Deploying Basic Cisco IOS Software with Basic Zone-Based Firewall Access Policies
• Deploying Advanced Cisco IOS Software ZBFW with Application Inspection Policies

Cisco Web Security Appliance

• Cisco Web Security Appliance (WSA) Solutions
• Integrating the Cisco Web Security Appliance
• Configuring Cisco Web Security Appliance Identities and User Authentication Controls
• Configuring Cisco Web Security Appliance Acceptable Use Control
• Configuring Cisco Web Security Appliance Anti-Malware Controls
• Configuring Cisco Web Security Appliance Decryption
• Configuring Cisco Web Security Appliance Data Security Controls

 Cisco Cloud Web Security

• Cisco Cloud Web Security Solutions
• Configuring Cisco Cloud Web Security Connectors
• Web Filtering Policy in Cisco ScanCenter

Cisco Email Security Appliance

• Cisco Email Security Solutions
• Cisco Email Security Appliance Basic Setup Components
• Configuring Cisco Email Security Appliance Basic Incoming and Outgoing Mail Policies

Advanced Malware Protection for Endpoints

• AMP for Endpoints Overview and Architecture
• Customizing Detection and AMP Policy
• IOCs and IOC Scanning
• Deploying AMP Connectors
• AMP Analysis Tools

Cisco FirePOWER Next-Generation IPS

• Cisco FireSIGHT System
• Configuring and Managing Cisco FirePOWER Devices
• Implementing an Access Control Policy
• Discovery Technology
• Configuring File-Type and Network Malware Detection
• Managing SSL Traffic with Cisco FireSIGHT
• IPS Policy and Configuration Concepts
• Network Analysis Policy
• Creating Reports
• Correlation Rules and Policies
• Basic Rule Syntax and Usage

Cisco ASA FirePOWER Services

• Installing Cisco ASA 5500-X Series FirePOWER Services (SFR)

Threat Mitigation through Identity Services

• Identity Services
• 802.1X and EAP
• Configure 802.1X Components

 ISE Fundamentals

• Describe Cisco ISE Features and configure the fundamentals
• Cisco ISE with PKI
• Cisco ISE Authentication
• Cisco ISE with External Authentication

Advance Access Control

• Certificate Based User Authentication
• Authorization
• Cisco TrustSec

 Web Authentication and Guest Access

• Web Authentication
• Guest Access Services

 Endpoint

• Posture
• Profiler
• BYOD

Troubleshooting Network Access Control

• Troubleshooting ISE

Fundamentals of VPN Technologies and Cryptography

• The Role of VPNs in Network Security
• VPNs and Cryptography

Deploying Secure Site-to-Site Connectivity Solutions

• Introducing Cisco Secure Site-to-Site Connectivity Solutions
• Deploying Point-to-Point IPsec VPNs on the Cisco ASA
• Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs
• Deploying Cisco IOS DMVPNs

Deploying Cisco IOS Site-to-Site FlexVPN Solutions

• Introducing Cisco IOS Site-to-Site FlexVPN Solutions
• Deploying Point-to-Point IPsec VPNs Using Cisco IOS FlexVPN
• Deploying Hub-and-Spoke IPsec VPNs Using Cisco IOS FlexVPN
• Deploying Spoke-to-Spoke IPsec VPNs Using Cisco IOS FlexVPN
• Deploying Basic Cisco Clientless SSL VPN
• Clientless SSL VPN Overview
• Deploying Basic Cisco Clientless SSL VPN on Cisco ASA
• Deploying Application Access in Cisco ASA Clientless SSL VPN
• Deploying Advanced Authentication and Authorization in Clientless SSL VPN

Deploying Cisco AnyConnect VPNs

• Deploying Basic Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Authentication and Authorization in Cisco AnyConnect VPNs
• Deploying Cisco AnyConnect IPsec/IKEv2 VPNs

 Deploying Endpoint Security and Dynamic Access Policies

• Implementing Host Scan
• Implementing DAP for SSL VPNs