| Describing Information Security Concepts |
- Information Security Overview
|
|
- Assets, Vulnerabilities, and Countermeasures
|
- Understanding Common Vulnerability Scoring System (CVSS)
|
|
|
|
| Describing Common TCP/IP Attacks |
- Legacy TCP/IP Vulnerabilities
|
|
|
|
- Man-in-the-Middle Attacks
|
- Internet Control Message Protocol (ICMP) Vulnerabilities
|
- Denial of Service and Distributed Denial of Service Attacks
|
|
|
- Reflection and Amplification Attacks
|
- User Datagram Protocol (UDP) Vulnerabilities
|
|
- Attack Surface and Attack Vectors
|
- Dynamic Host Configuration Protocol (DHCP) Attacks
|
|
|
|
| Describing Common Network Application Attacks |
|
|
|
- Domain Name System (DNS)-Based Attacks
|
|
|
|
- Cross-Site Scripting and Request Forgery
|
|
|
|
|
|
|
| Describing Common Endpoint Attacks |
|
|
- Gaining Access via Web-Based Attacks
|
|
|
- Exploit Kits and Rootkits
|
|
|
|
- Gaining Access and Control
|
|
- Gaining Access via Social Engineering
|
|
| Describing Network Security Technologies |
- Defense-in-Depth Strategy
|
- Web Content Security Overview
|
- Defending Across the Attack Continuum
|
- Threat Analytic Systems Overview
|
- Network Segmentation and Virtualization Overview
|
|
- Stateful Firewall Overview
|
- Authentication, Authorization, and Accounting Overview
|
- Security Intelligence Overview
|
- Identity and Access Management Overview
|
- Threat Information Standardization
|
- Virtual Private Network Technology Overview
|
- Network-Based Malware Protection Overview
|
- Network Security Device Form Factors Overview
|
- Intrusion Prevention System (IPS) Overview
|
- Email Content Security Overview
|
- Next Generation Firewall Overview
|
|
| Deploying Cisco ASA Firewall |
- Cisco ASA Deployment Types
|
- Cisco ASA Interface Access Control Lists (ACLs)
|
- Cisco ASA Interface Security Levels
|
|
- Cisco ASA Objects and Object Groups
|
- Cisco ASA Advanced Access Policies
|
- Network Address Translation
|
- Cisco ASA High Availability Overview
|
| Deploying Cisco Firepower Next-Generation Firewall |
- Cisco Firepower NGFW Deployments
|
- Cisco Firepower NGFW Access Control Policies
|
- Cisco Firepower NGFW Packet Processing and Policies
|
- Cisco Firepower NGFW Security Intelligence
|
- Cisco Firepower NGFW Objects
|
- Cisco Firepower NGFW Discovery Policies
|
- Cisco Firepower NGFW Network Address Translation (NAT)
|
- Cisco Firepower NGFW IPS Policies
|
- Cisco Firepower NGFW Pre-filter Policies
|
- Cisco Firepower NGFW Malware and File Policies
|
| Deploying Email Content Security |
- Cisco Email Content Security Overview
|
- Protection Against Spam and Graymail
|
- Simple Mail Transfer Protocol (SMTP) Overview
|
- Anti-virus and Anti-malware Protection
|
|
|
|
- Public and Private Listeners
|
|
- Host Access Table Overview
|
|
- Recipient Access Table Overview
|
|
|
|
|
| Deploying Web Content Security |
- Cisco Web Security Appliance (WSA) Overview
|
- Access Policies and Identification Profiles
|
|
|
- Acceptable Use Controls Settings
|
- Network Users Authentication
|
|
- Secure HTTP (HTTPS) Traffic Decryption
|
|
| Deploying Cisco Umbrella |
- Cisco Umbrella Architecture
|
|
|
|
- Cisco Umbrella Investigate Overview and Concepts
|
- Cisco Umbrella Roaming Client
|
|
| Explaining VPN Technologies and Cryptography |
|
|
|
|
|
- Public Key Infrastructure
|
- Secure Communication and Cryptographic Services
|
|
| Introducing Cisco Secure Site-to-Site VPN Solutions |
- Site-to-Site VPN Topologies
|
- IPsec Static Virtual Tunnel Interface
|
|
|
|
|
|
|
| Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs |
|
|
- Static VTI Point-to-Point IPsec Internet Key Exchange (IKE) v2 VPN Configuration
|
| Deploying Point-to-Point IPsec VPNs on the Cisco ASA and Cisco Firepower NGFW |
- Point-to-Point VPNs on the Cisco ASA and Cisco Firepower NGFW
|
- Cisco Firepower NGFW Point-to-Point VPN Configuration
|
- Cisco ASA Point-to-Point VPN Configuration
|
|
| Introducing Cisco Secure Remote Access VPN Solutions |
- Remote Access VPN Components
|
- Secure Sockets Layer (SSL) Overview
|
- Remote Access VPN Technologies
|
|
| Deploying Remote Access SSL VPNs on the Cisco ASA and Cisco Firepower NGFW |
- Remote Access Configuration Concepts
|
- Cisco ASA Remote Access VPN Configuration
|
|
|
- Cisco Firepower NGFW Remote Access VPN Configuration
|
|
|
|
| Explaining Cisco Secure Network Access Solutions |
- Cisco Secure Network Access
|
- Cisco Identity Services Engine
|
- Cisco Secure Network Access Components
|
|
- AAA Role in Cisco Secure Network Access Solution
|
|
| Describing 802.1X Authentication |
- 802.1X and Extensible Authentication Protocol (EAP)
|
- RADIUS Change of Authorization
|
|
|
- Role of Remote Authentication Dial-in User Service (RADIUS) in 802.1X Communications
|
| Configuring 802.1X Authentication |
- Cisco Catalyst Switch 802.1X Configuration
|
- Supplicant 802.1x Configuration
|
- Cisco Wireless LAN Controller (WLC) 802.1X Configuration
|
- Cisco Central Web Authentication
|
- Cisco Identity Services Engine (ISE) 802.1X Configuration
|
|
| Describing Endpoint Security Technologies |
- Host-Based Personal Firewall
|
- Host-Based Malware Protection
|
|
|
|
- Host-Based Intrusion Prevention System
- Application Whitelists and Blacklists
|
|
| Deploying Cisco Advanced Malware Protection (AMP) for Endpoints |
- Cisco AMP for Endpoints Architecture
|
- Cisco AMP Device and File Trajectory
|
- Cisco AMP for Endpoints Engines
|
- Managing Cisco AMP for Endpoints
|
- Retrospective Security with Cisco AMP
|
|
| Introducing Network Infrastructure Protection |
- Identifying Network Device Planes
|
|
- Control Plane Security Controls
|
- Layer 2 Data Plane Security Controls
|
- Management Plane Security Controls
|
- Layer 3 Data Plane Security Controls
|
| Deploying Control Plane Security Controls |
|
|
- Routing Protocol Security
|
|
|
|
| Deploying Layer 2 Data Plane Security Controls |
- Overview of Layer 2 Data Plane Security Controls
- Virtual LAN (VLAN)-Based Attacks Mitigation
|
- Address Resolution Protocol (ARP) Inspection
|
- Spanning Tree Protocol (STP) Attacks Mitigation
- Port Security
|
|
- Private VLANs
- Dynamic Host Configuration Protocol (DHCP) Snooping
|
|
| Deploying Layer 3 Data Plane Security Controls |
- Infrastructure Antispoofing ACLs
|
|
- Unicast Reverse Path Forwarding
|
|
| Deploying Management Plane Security Controls |
- Cisco Secure Management Access
|
- AAA for Management Access
|
- Simple Network Management Protocol Version 3
|
- Secure Access to Cisco Devices
|
| Deploying Traffic Telemetry Methods |
|
|
- Network Traffic Monitoring Using Net Flow
|
- Device and Network Events Logging and Export
|
|
| Deploying Cisco Stealthwatch Enterprise |
- Cisco Stealthwatch Offerings Overview
- Cisco Stealthwatch Enterprise Required Components
|
- Cisco Encrypted Traffic Analytics
- Host Groups
|
- Flow Stitching and Deduplication
- Stealthwatch Enterprise Optional Components
|
- Security Events and Alarms
|
- Stealthwatch Enterprise and ISE Integration
- Cisco Stealthwatch with Cognitive Analytics
|
- Host, Role, and Default Policies
|
| Describing Cloud and Common Cloud Attacks |
- Evolution of Cloud Computing
|
|
|
|
- Common Security Threats in Cloud
|
- Security Responsibilities in Cloud
|
- Patch Management in the Cloud
- Security Assessment in the Cloud
|
| Securing the Cloud |
- Cisco Threat-Centric Approach to Network Security
- Cloud Physical Environment Security
|
- Reporting and Threat Visibility in Cloud
- Cloud Access Security Broker
|
- Application and Workload Security
- Cloud Management and API Security
|
|
- Network Function Virtualization (NFV) and Virtual Network Functions (VNF)
- Cisco NFV Examples
|
|
| Deploying Cisco Stealthwatch Cloud |
- Cisco Stealthwatch Cloud for Public Cloud Monitoring
- Cisco Stealthwatch Cloud for Private Network Monitoring
|
- Network Programmability and Automation
|
- Cisco Stealthwatch Cloud Operations
- Describing Software-Defined Networking (SDN*)
|
|
- Software-Defined Networking Concepts
|
- Basic Python Scripts for Automation
|
| Lab outline |
- Configure Network Settings and NAT on Cisco ASA
- Configure Cisco ASA Access Control Policies
|
- Explore File Ransomware Protection by Cisco AMP for Endpoints Console
|
- Configure Cisco Firepower NGFW NAT
- Configure Cisco Firepower NGFW Access Control Policy
|
- Explore Cisco Stealthwatch Enterprise v6.9.3
|
- Configure Cisco Firepower NGFW Discovery and IPS Policy
- Configure Cisco NGFW Malware and File Policy
|
- Explore Cognitive Threat Analytics (CTA) in Stealthwatch Enterprise v7.0
|
- Configure Listener, Host Access Table (HAT), and Recipient Access Table (RAT) on Cisco Email Security Appliance (ESA)
- Configure Mail Policies
|
- Explore the Cisco Cloudlock Dashboard and User Security
|
- Configure Proxy Services, Authentication, and HTTPS Decryption
- Enforce Acceptable Use Control and Malware Protection
|
- Explore Cisco Cloudlock Application and Data Security
|
- Explore DNS Ransomware Protection by Cisco Umbrella
|
- Explore Cisco Stealthwatch Cloud
|
- Configure Static VTI Point-to-Point IPsec IKEv2 Tunnel
|
- Explore Stealthwatch Cloud Alert Settings, Watchlists, and Sensors
|
- Configure Point-to-Point VPN between the Cisco ASA and Cisco Firepower NGFW
|
- Explore Cisco AMP for Endpoints
|
- Configure Remote Access VPN on the Cisco Firepower NGFW
|
- Perform Endpoint Analysis Using AMP for Endpoints Console
|
