CISCO - CCNP Security

Cisco Certified Network Professional -Security validates advanced knowledge and skills required to secure Cisco networks. With a CCNP Security certification, a network professional demonstrates the skills required to secure and manage network infrastructures to protect productivity, mitigate threats, and reduce costs. The CCNP Security curriculum emphasizes Cisco Router IOS (ISR) and Catalyst Switch security features, Adaptive Security Appliance (ASA), secure VPN connectivity, Intrusion Prevention Systems (IPS), Cisco Security Agent (CSA), Security Enterprise and Device Management, Network Admission Control (NAC) as well as techniques to optimize these technologies in a single, integrated network security solution.

Prerequisites: Students are expected to have a CCNA Security-level of knowledge. 

Course Contents

642-637 SECURE v1.0 (Secure v1.0 Securing Networks with Cisco Routers and Switches)

Deploying Cisco IOS Software Network Foundation Protection Lesson

• Deploying Network Foundation Protection Controls
• Deploying Advanced Switched Data Plane Security Controls
• Implementing Cisco Identity-Based Network Services
• Deploying Basic 802.1X Features
• Deploying Advanced Routed Data Plane Security Controls
• Deploying Advanced Control Plane Security Controls
• Deploying Advanced Management Plane Security Controls

Deploying Cisco IOS Software Threat Control and Containment

• Deploying Cisco IOS Software Network Address Translation
• Deploying Basic Zone-Based Policy Firewalls
• Deploying Advanced Zone-Based Policy Firewalls
• Deploying Cisco IOS Software IPS

Deploying Cisco IOS Software Site-to-Site Transmission Security

• Site-to-Site VPN Architectures and Technologies
• Deploying VTI-Based Site-to-Site IPsec VPNs
• Deploying Scalable Authentication in Site-to-Site IPsec VPNs
• Deploying DMVPNs
• Deploying High Availability in Tunnel-Based IPsec VPNs
• Deploying GET VPN

Deploying Secure Remote Access with Cisco IOS Software

• Remote Access VPN Architectures and Technologies
• Deploying Remote Access Solutions Using SSL VPN
• Deploying Remote Access Solutions Using Cisco Easy VPN

642-627 (IPS v7.0 Implementing Cisco Intrusion Prevention System v7.0)

• Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices
• Installing and Maintaining Cisco IPS Sensors
• Applying Cisco IPS Security Policies
• Adapting Traffic Analysis and Response to the Environment
• Managing and Analyzing Events
• Deploying Virtualization, High Availability, and High Performance Solutions
• Configuring and Maintaining Specific Cisco IPS Hardware

642-617 FIREWALL v1.0 Deploying Cisco ASA Firewall Solutions

• Introduction to the Cisco ASA Adaptive Security Appliance
• Implementation of Basic Connectivity and Device Management
• Deployment of Cisco ASA Adaptive Security Appliance Access Control Features
• Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features
• Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High-Availability Features
• Integration of Cisco ASA Adaptive Security Appliance Security Service Modules
• Configuring Routing on the Cisco ASA Adaptive Security Appliance
• Lab (Optional): Configuring Dynamic Routing

642-647 VPN v1.0 Deploying Cisco ASA VPN Solutions

• Evaluate the Cisco ASA adaptive security appliance VPN subsystem
• Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
• Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
• Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
• Deploy advanced Cisco ASA adaptive security appliance VPN