Securing Cisco Network Devices (SND) — A 5-Day Course

 Open Public Course Closed In-House Course

Synopsis

The SND training course is a five-day, instructor led entry level security course ,offered as a pre-requisite to the Cisco Qualified Specialist curriculum. It provides an opportunity to learn about a broad range of the components embedded in Cisco SAFE. The course provides an introduction to the Cisco products and solutions that form the basis of the Cisco Security Portfolio. Delegates will be able to perform basic tasks to secure network devices at Layer 2 and Layer 3 using CLI and web-based GUI's, they will also be able to recognise recognize threats and vulnerabilities to networks and learn how to implement basic mitigation measures. Devices include routers, switches, access control servers, IPS sensors and VPN Concentrators.

Course Objectives

After completing the course, the student will be able to:

• Describe network security vulnerabilities and how a security policy plus the Cisco security product portfolio provide network security
• Configure Layer 2 and 3 devices on the network perimeter with Cisco Catalyst switch security features and Cisco IOS software
• Configure a Cisco PIX Security Appliance to perform basic security operations on a network
• Secure a network with host-and network-based IPS. Build an IPSec VPN network using Cisco products and technologies

Intended Audience

• Entry level network engineers and technicians requiring knowledge and skills as a prerequisite for further development and responsibilities
• Network administrators, technicians and engineers who need a comprehensive knowledge of security matters to assist them in assessing risk and assigning responsibilities for mitigation

Prerequisites

Delegates are required to meet the following prerequisites:

• Cisco CCNA certification
• Basic knowledge of the Windows operating system
• Familiarity with the networking and security terms and concepts

Certification

The SND training course is recommended as preparation for exam:

• 642-55 SND

SND is part of the CCSP Certification Path as well as the focused Firewall, VPN and IDS Specialisations.

Publicly scheduled dates, locations, and prices

Outline Course Contents

Introduction to Network Security

• Planning a Secure Network
• Mitigating Network Attacks
• The Cisco Security Portfolio
• Building Cisco Self-Defending Networks

Securing the Perimeter

• Securing Admiistrative Access to Routers
• Configuring AAA for Cisco Routers
• Introducing the Cisco Secure Access Control Server for Windows Server
• Configuring Basic Services on the Cisco Secure ACS for Windows
• Disabling Unused Cisco Router Network Services and Interfaces
• Mitigating Threats and Attacks with Access Lists
• Implementing Secure Management and Reporting
• Securing Catalyst Switches
• Mitigating Layer 2 Attacks
• Using Catalyst Switch Security Features

Cisco Security Appliance

• Introducing the Cisco PIX Security Appliance Series
• Configuring a Cisco PIX Security Appliance from the CLI
• Configuring a PIX Security Appliance with the Cisco PDM

Securing Networks with Host and Network-Based IPS

• Introducing Intrusion Prevention Systems
• Configuring the Sensor Using the IDM
• Introducing the Cisco Security Agent
• Deploying HIPs with the CSA MC

Building IPSec VPN's

• Introducing IPSec VPNs
• Building Cisco VPN Solutions
• Completing the Quick Configuration of a Cisco VPN 3000 Series Concentrator
• Configuring the Cisco VPN 3000 Series Concentrator for Remote Access
• Configuring the Cisco VPN Software Client for Windows.