Implementing and Operating Cisco Security Core Technologies

This SCOR course helps you prepare for the Cisco® CCNP® Security and CCIE® Security certifications and for senior-level security roles...

€2990,00 excl. BTW

Beschrijving

Product specificaties

Agenda

Network Security Technologies

Defense-in-Depth Strategy
Defending Across the Attack Continuum
Network Segmentation and Virtualization Overview
Stateful Firewall Overview
Cisco IOS Zone-Based Policy Firewall Overview
Security Intelligence Overview
Threat Information Standardization
Network-Based Malware Protection Overview
IPS Overview
Next Generation Firewall Overview
Email Content Security Overview
Web Content Security Overview
Threat Analytic Systems Overview
DNS Security Overview
Authentication, Authorization, and Accounting Overview
Identity and Access Management Overview
Virtual Private Network (VPN) Technology Overview
Network Security Device Form Factors Overview

Cisco Secure Firewall ASA Deployment

Cisco Secure Firewall ASA Deployment Types
Cisco Secure Firewall ASA Interface Security Levels
Cisco Secure Firewall ASA Objects and Object Groups
Network Address Translation
Cisco Secure Firewall ASA Interface ACLs
Cisco Secure Firewall ASA Global ACLs
Cisco Secure Firewall ASA Advanced Access Policies
Cisco Secure Firewall ASA High Availability Overview

Cisco Secure Firewall Threat Defense Basics

Cisco Secure Firewall Threat Defense Deployments
Cisco Secure Firewall Threat Defense Packet Processing and Policies
Cisco Secure Firewall Threat Defense Objects
Cisco Secure Firewall Threat Defense NAT
Cisco Secure Firewall Threat Defense Prefilter Policies
Cisco Secure Firewall Threat Defense Access Control Policies
Cisco Secure Firewall Threat Defense Security Intelligence
Cisco Secure Firewall Threat Defense Discovery Polices

Cisco Cisco Secure Firewall Threat Defense IPS, Malware and File Policies

Cisco Secure Firewall Threat Defense IPS Policies
Cisco Secure Firewall Threat Defense Malware and File Policies

Cisco Secure Email Gateway Basics

Cisco Secure Email Overview
SMTP Overview
Email Pipeline Overview
Public and Private Listeners
Host Access Table Overview
Recipient Access Table Overview

Cisco Secure Email Policy Configuration

Mail Policies Overview
Protection Against Spam and Graymail
Anti-virus and Anti-malware Protection
Outbreak Filters
Content Filters
Data Loss Prevention
Email Encryption

Cisco Secure Web Appliance Deployment

Cisco Secure Web Appliance Overview
Deployment Options
Network Users Authentication
HTTPS Traffic Decryption
Access Policies and Identification Profiles
Acceptable Use Controls Settings
Anti-Malware Protection

VPN Technologies and Cryptography Concepts

VPN Definition
VPN Types
Secure Communication and Cryptographic Services
Keys in Cryptography
Public Key Infrastructure

Cisco Secure Site-to-Site VPN Solutions

Site-to-Site VPN Topologies
IPsec VPN Overview
IPsec Static Crypto Maps
IPsec Static Virtual Tunnel Interface
Dynamic Multipoint VPN
Cisco IOS FlexVPN

Cisco IOS VTI-Based Point-to-Point IPsec VPNs

Cisco IOS VTIs
Static VTI Point-to-Point IPsec IKEv2 VPN Configuration

Point-to-Point IPsec VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense

Point-to-Point VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense
Cisco Secure Firewall ASA Point-to-Point VPN Configuration
Cisco Secure Firewall Threat Defense Point-to-Point VPN Configuration

Cisco Secure Remote Access VPN Solutions

Remote Access VPN Components
Remote Access VPN Technologies
SSL Overview

Remote Access SSL VPNs on the Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense

Remote Access Configuration Concepts
Connection Profiles
Group Policies
Cisco Secure Firewall ASA Remote Access VPN Configuration
Cisco Secure Firewall Threat Defense Remote Access VPN Configuration

Describing Information Security Concepts (Self-Study)

Information Security Overview
Assets, Vulnerabilities and Countermeasures
Managing Risk
Vulnerability Assessment
Understanding CVSS

Describe Common TCP/IP Attacks (Self-Study)

Legacy TCP/IP Vulnerabilities
IP Vulnerabilities
ICMP Vulnerabilities
UDP Vulnerabilities
Attack Surface and Attack Vectors
Reconnaissance Attacks
Access Attacks
Man-In-The-Middle Attacks
Denial of Service and Distributed Denial of Service Attacks
Reflection and Amplification Attacks
Spoofing Attacks
DHCP Attacks

Describe Common Network Application Attacks (Self-Study)

Password Attacks
DNS Tunneling
Web-Based Attacks
HTTP 302 Cushioning
Command Injections
SQL Injections
Cross-Site Scripting and Request Forgery
Email-Based Attacks

Common Endpoint Attacks (Self-Study)

Buffer Overflow
Malware
Reconnaissance Attack
Gaining Access and Control
Gaining Access via Social Engineering
Gaining Access via Web-Based Attacks
Exploit Kits and Rootkits
Privilege Escalation
Post-Exploitation Phase
Angler Exploit Kit

Cisco Umbrella Deployment (Self-Study)

Cisco Umbrella Capabilities
Cisco Umbrella Identities and Policies Overview
Cisco Umbrella DNS Security
Cisco Umbrella Investigate Overview
Cisco Umbrella Secure Web Gateway
Cisco Umbrella CASB Functionalities

Endpoint Security Technologies (Self-Study)

Host-Based Personal Firewall
Host-Based Anti-Virus
Host-Based Intrusion Prevention System
Application Allowed Lists and Blocked Lists
Host-Based Malware Protection
Sandboxing Overview
File Integrity Checking

Cisco Secure Endpoint (Self-study)

Cisco Secure Endpoint Architecture
Cisco Secure Endpoint Engines
Retrospective Security with Cisco Secure Endpoint
Cisco Secure Endpoint Device and File Trajectory
Managing Cisco Secure Endpoint for Endpoints

Cisco Secure Network Access Solutions (Self-study)

Cisco Secure Network Access
Cisco Secure Network Access Components
AAA Role in Cisco Secure Network Access Solution
Cisco ISE
Cisco TrustSec

Describing 802.1X Authentication (Self-study)

802.1X and EAP
EAP Methods
Role of RADIUS in 802.1X Communications
RADIUS Change of Authorization

Configuring 802.1X Authentication (Self-study)

Cisco Catalyst Switch 802.1X Configuration
Cisco IBNS 2.0 Configuration on Cisco Catalyst Switch
Cisco WLC 802.1X Configuration
Cisco ISE 802.1X Configuration
Supplicant 802.1x Configuration
Cisco Central Web Authentication

Network Infrastructure Protection (Self-Study)

Network Device Planes
Control Plane Security Controls
Management Plane Security Controls
Network Telemetry
Layer 2 Data Plane Security Controls
Layer 3 Data Plane Security Controls

Control Plane Security Controls (Self-Study)

Infrastructure ACLs
Control Plane Policing
Control Plane Protection
Routing Protocol Security

Layer 2 Data Plane Security Controls (Self-Study)

Overview of Layer 2 Data Plane Security Controls
VLAN-Based Attacks Mitigation
STP Attacks Mitigation
Port Security
Private VLANs
DHCP Snooping
ARP Inspection
Storm Control
MACsec Encryption

Layer 3 Data Plane Security Controls (Self-Study)

Infrastructure Antispoofing ACLs
Unicast Reverse Path Forwarding
IP Source Guard

Management Plane Security Controls (Self-Study)

Cisco Secure Management Access
Simple Network Management Protocol Version 3
Secure Access to Cisco Devices
AAA or Management Access

Traffic Telemetry Methods (Self-Study)

Network Time Protocol
Device and Network Events Logging and Export
Network Traffic Monitoring Using NetFlow

Cisco Secure Network Analytics Deployment (Self-Study)

Cisco Secure Network Analytics Overview
Cisco Secure Network Analytics Required Components
Flow Stitching and Deduplication
Cisco Secure Network Analytics Optional Components
Cisco Secure Network Analytics and ISE Integration
Cisco Secure Network Analytics with Global Threat Alerts
Cisco Encrypted Traffic Analytics (ETA)
Host Groups
Security Events and Alarms
Host, Role and Default Policies

Cloud Computing and Cloud Security (Self-Study)

Evolution of Cloud Computing
Cloud Service Models
Security Responsibilities in the Cloud
Cloud Deployment Models
Patch Management in the Cloud
Security Assessment in the Cloud

Cloud Security (Self-Study)

Cisco Threat-Centric Approach to Network Security
Cloud Physical Environment Security
Application and Workload Security
Cloud Management and API Security
Network Functions Virtualization (NFV) and Virtual Network Function (VNF)
Cisco NFV Examples
Reporting and Threat Visibility in Cloud
Cloud Access Security Broker
Cisco Cloudlock
OAuth and OAuth Attacks

Cisco Secure Cloud Analytics Deployment (Self-Study)

Cisco Secure Cloud Analytics for Public Cloud Monitoring
Cisco Secure Cloud Analytics for Private Network Monitoring
Cisco Secure Cloud Analytics Operations

Software-Defined Networking (Self-Study)

Software-Defined Networking Concepts
Network Programmability and Automation
Cisco Platforms and APIs
Basic Python Scripts for Automation

Labs

Discovery Lab 1: Configure Network Settings And NAT On Cisco Secure Firewall ASA
Discovery Lab 2: Configure Cisco Secure Firewall ASA Access Control Policies
Discovery Lab 3: Configure Cisco Secure Firewall Threat Defense NAT
Discovery Lab 4: Configure Cisco Secure Firewall Threat Defense Access Control Policy
Discovery Lab 5: Configure Cisco Secure Firewall Threat Defense Discovery and IPS Policy
Discovery Lab 6: Configure Cisco Secure Firewall Threat Defense Malware and File Policy
Discovery Lab 7: Configure Listener, HAT, and RAT on Cisco Secure Email Gateway
Discovery Lab 8: Configure Cisco Secure Email Policies
Discovery Lab 9: Configure Proxy Services, Authentication, and HTTPS Decryption
Discovery Lab 10: Enforce Acceptable Use Control and Malware Protection
Discovery Lab 11: Configure Static VTI Point-to-Point IPsec IKEv2 Tunnel
Discovery Lab 12: Configure Point-to-Point VPN between the Cisco Secure Firewall Threat Defense Devices
Discovery Lab 13: Configure Remote Access VPN on the Cisco Secure Firewall Threat Defense
Discovery Lab 14: Examine Cisco Umbrella Dashboard and DNS Security
Discovery Lab 15: Explore Cisco Umbrella Secure Web Gateway and Cloud-Delivered Firewall
Discovery Lab 16: Explore Cisco Umbrella CASB Functionalities
Discovery Lab 17: Explore Cisco Secure Endpoint
Discovery Lab 18: Perform Endpoint Analysis Using Cisco Secure Endpoint Console
Discovery Lab 19: Explore File Ransomware Protection by Cisco Secure Endpoint Console
Discovery Lab 20: Explore Secure Network Analytics v7.4.2
Discovery Lab 21: Explore Global Threat Alerts Integration and ETA Cryptographic Audit
Discovery Lab 22: Explore Cloud Analytics Dashboard and Operations
Discovery Lab 23: Explore Secure Cloud Private and Public Cloud Monitoring

Attribuut naam	Attribuut waarde
Lesmethode	Klassikaal (virtueel)

Artikelnummer voorraad referentie: SCOR

Klassikaal (virtueel)

Datum en locatie	Aantal deelnemers
18 - 22 mei, 2026 - Nieuwegein
18 - 22 mei, 2026 - Virtueel
03 - 7 augustus, 2026 - Amsterdam