Securing Cisco Network Devices (SND) 2.0 Expert Encore

Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number

---

Overview/Description
In networks today, security can no longer be treated as an afterthought. This course provides an introduction to a wide range of the critical security components, both hardware and software, which are embedded in Cisco SAFE. The SAFE Blueprint from Cisco is a blueprint for security and VPN networks, based on Cisco AVVID (Architecture for Voice, Video and Integrated Data). This course is an entry level network security course offered as a pre-requisite to the Cisco Qualified Specialist curriculum. In this course, students will learn to recognize threats and vulnerabilities to networks, and more importantly, how to implement basic mitigation measures using the tools and techniques in Cisco's armory.

Target Audience
This course is a necessity for any student tasked with implementing or maintaining a secure network:

• Entry level network engineers and technicians requiring knowledge and skills as a prerequisite for further development and responsibilities
• Network administrators, technicians and engineers who need a comprehensive knowledge of security matters to assist them in assessing risk and assigning responsibilities for mitigation

Prerequisites
To fully benefit Students should first complete the following programs, or have the equivalent knowledge and experience:

• Cisco Certified Network Associate certification
• Basic knowledge of the Windows operating system
• Basic knowledge of Cisco IOS networking and concepts

Certification
CCSP, Cisco IOS Security Specialist

Exams
642-552 SND (EOL 11/17/08)

Included Labs

• Discovering Network Vulnerabilities and Threats
• Using Cisco SDM Security Audit
• Configuring a Cisco IOS Firewall Part 1
• Configuring a Cisco IOS Firewall Part 2
• Configuring Cisco IOS IPS
• Configuring Site-to-Site IPSec VPNs
• Configuring a Remote-Access VPN Client

Outline
Securing Cisco Network Devices (SND) 2.0

• Session 1 Welcome Loop
• Lesson 1: Understanding the Requirement for a Network Security Policy
• Lesson 2: Introducing Network Attack Mitigation Techniques
• Lesson 3: Thinking Like a Hacker
• Lesson 4: Designing a Secure Network Life-Cycle Model
• Lesson 5: Developing a Comprehensive Security Policy
• Lesson 6: Building Cisco Self-Defending Networks
• Summary
• Discovering Network Vulnerabilities and Threats
• Session 2 Welcome Loop
• Module 2: Securing the Perimeter
• Using Cisco SDM Security Audit
• Session 3 Welcome Loop
• Lesson 1: Applying Security Policies to Network Switches
• Lesson 3: Using Cisco Catalyst Switch Security Features
• Lesson 4: Securing WLANs
• Session 4 Welcome Loop
• Module 4: Cisco IOS Firewall Configuration
• Configuring a Cisco IOS Firewall Part 1
• Configuring a Cisco IOS Firewall Part 2
• Session 5 Welcome Loop
• Lesson 1: Introducing IDS and IPS
• Lesson 2: Configuring Cisco IOS IPS
• Summary
• Configuring Cisco IOS IPS
• Session 6 Welcome Loop
• Lesson 1: Introducing IPsec VPNs
• Lesson 2: Building a Site-to-Site IPsec VPN Operation
• Lesson 3: Configuring IPsec Site-to-Site VPNs Using Cisco SDM
• Summary
• Configuring Site-to-Site IPSec VPNs
• Configuring a Remote-Access VPN Client

Expected Duration (hours)
30.0

Lesson Objectives

Securing Cisco Network Devices (SND) 2.0 Expert Encore

Describe network security vulnerabilities and how a security policy plus the Cisco security product portfolio provide network security

Configure Layer 2 devices on the network perimeter using security features in Cisco IOS software

Configure a Cisco IOS Firewall to perform basic security operations on a network, including the IOS based Intrusion Prevention System (IPS)

Implement IPSec VPNs on the IOS using Security Device Manager (SDM)

Course Number:
LLCS0032