Implementing and Operating Cisco Security Core Technologies – SCOR

Implementing and Operating Cisco Security Core Technologies – SCOR

L’attribut alt de cette image est vide, son nom de fichier est cisco2.png.

Code : SCOR
Version : 1.0
Days : 5
Price HT : 3950 € Price CLC HT : Accepté

Our next dates :
09/03/2020
11/05/2020
27/07/2020
14/09/2020
23/11/2020


5 Days for

  • Describe information security concepts and strategies within the network
  • Describe common TCP/IP, network application, and endpoint attacks
  • Describe how various network security technologies work together to guard against attacks
  • Implement access control on Cisco ASA appliance and Cisco Firepower Next-Generation Firewall
  • Describe and implement basic email content security features and functions provided by Cisco Email Security Appliance
  • Describe and implement web content security features and functions provided by Cisco Web Security Appliance
  • Describe Cisco Umbrella security capabilities, deployment models, policy management, and Investigate console
  • Introduce VPNs and describe cryptography solutions and algorithms
  • Describe Cisco secure site-to-site connectivity solutions and explain how to deploy Cisco IOS VTI-based point-to-point IPsec VPNs, and point-to-point IPsec VPN on the Cisco ASA and Cisco FirePower NGFW
  • Describe and deploy Cisco secure remote access connectivity solutions and describe how to configure 802.1X and EAP authentication
  • Provide basic understanding of endpoint security and describe AMP for Endpoints architecture and basic features
  • Examine various defenses on Cisco devices that protect the control and management plane
  • Configure and verify Cisco IOS Software Layer 2 and Layer 3 Data Plane Controls
  • Describe Cisco Stealthwatch Enterprise and Stealthwatch Cloud solutions
  • Describe basics of cloud computing and common cloud attacks and how to secure cloud environment

Who is this course for?

  • Security engineer
  • Network engineer
  • Network designer
  • Network administrator
  • Systems engineer
  • Consulting systems engineer
  • Technical solutions architect
  • Network manager
  • Cisco integrators and partners

Prerequisite

To take this course it is recommended to have:

  • Familiarity with Ethernet and TCP/IP networking
  • Working Knowledge of the Windows operating system
  • Working Knowledge of Cisco IOS networking and concepts
  • Familiarity with basics of networking security concepts

Contenu du cours

  1. Describing Information Security Concepts*
    • Information Security Overview
    • Assets, Vulnerabilities, and Countermeasures
    • Managing Risk
    • Vulnerability Assessment
    • Understanding Common Vulnerability Scoring System (CVSS)
  2. Describing Common TCP/IP Attacks*
    • Legacy TCP/IP Vulnerabilities
    • IP Vulnerabilities
    • Internet Control Message Protocol (ICMP) Vulnerabilities
    • TCP Vulnerabilities
    • User Datagram Protocol (UDP) Vulnerabilities
    • Attack Surface and Attack Vectors
    • Reconnaissance Attacks
    • Access Attacks
    • Man-in-the-Middle Attacks
    • Denial of Service and Distributed Denial of Service Attacks
    • Reflection and Amplification Attacks
    • Spoofing Attacks
    • Dynamic Host Configuration Protocol (DHCP) Attacks
  3. Describing Common Network Application Attacks*
    • Password Attacks
    • Domain Name System (DNS)-Based Attacks
    • DNS Tunneling
    • Web-Based Attacks
    • HTTP 302 Cushioning
    • Command Injections
    • SQL Injections
    • Cross-Site Scripting and Request Forgery
    • Email-Based Attacks
  4. Describing Common Endpoint Attacks*
    • Buffer Overflow
    • Malware
    • Reconnaissance Attack
    • Gaining Access and Control
    • Gaining Access via Social Engineering
    • Gaining Access via Web-Based Attacks
    • Exploit Kits and Rootkits
    • Privilege Escalation
    • Post-Exploitation Phase
    • Angler Exploit Kit
  5. Describing Network Security Technologies
    • Defense-in-Depth Strategy
    • Defending Across the Attack Continuum
    • Network Segmentation and Virtualization Overview
    • Stateful Firewall Overview
    • Security Intelligence Overview
    • Threat Information Standardization
    • Network-Based Malware Protection Overview
    • Intrusion Prevention System (IPS) Overview
    • Next Generation Firewall Overview
    • Email Content Security Overview
    • Web Content Security Overview
    • Threat Analytic Systems Overview
    • DNS Security Overview
    • Authentication, Authorization, and Accounting Overview
    • Identity and Access Management Overview
    • Virtual Private Network Technology Overview
    • Network Security Device Form Factors Overview
  6. Deploying Cisco ASA Firewall
    • Cisco ASA Deployment Types
    • Cisco ASA Interface Security Levels
    • Cisco ASA Objects and Object Groups
    • Network Address Translation
    • Cisco ASA Interface Access Control Lists (ACLs)
    • Cisco ASA Global ACLs
    • Cisco ASA Advanced Access Policies
    • Cisco ASA High Availability Overview
  7. Deploying Cisco Firepower Next-Generation Firewall
    • Cisco Firepower NGFW Deployments
    • Cisco Firepower NGFW Packet Processing and Policies
    • Cisco Firepower NGFW Objects
    • Cisco Firepower NGFW Network Address Translation (NAT)
    • Cisco Firepower NGFW Prefilter Policies
    • Cisco Firepower NGFW Access Control Policies
    • Cisco Firepower NGFW Security Intelligence
    • Cisco Firepower NGFW Discovery Policies
    • Cisco Firepower NGFW IPS Policies
    • Cisco Firepower NGFW Malware and File Policies
  8. Deploying Email Content Security
    • Cisco Email Content Security Overview
    • Simple Mail Transfer Protocol (SMTP) Overview
    • Email Pipeline Overview
    • Public and Private Listeners
    • Host Access Table Overview
    • Recipient Access Table Overview
    • Mail Policies Overview
    • Protection Against Spam and Graymail
    • Anti-virus and Anti-malware Protection
    • Outbreak Filters
    • Content Filters
    • Data Loss Prevention
    • Email Encryption
  9. Deploying Web Content Security
    • Cisco Web Security Appliance (WSA) Overview
    • Deployment Options
    • Network Users Authentication
    • Secure HTTP (HTTPS) Traffic Decryption
    • Access Policies and Identification Profiles
    • Acceptable Use Controls Settings
    • Anti-Malware Protection
  10. Deploying Cisco Umbrella*
    • Cisco Umbrella Architecture
    • Deploying Cisco Umbrella
    • Cisco Umbrella Roaming Client
    • Managing Cisco Umbrella
    • Cisco Umbrella Investigate Overview and Concepts
  11. Explaining VPN Technologies and Cryptography
    • VPN Definition
    • VPN Types
    • Secure Communication and Cryptographic Services
    • Keys in Cryptography
    • Public Key Infrastructure
  12. Introducing Cisco Secure Site-to-Site VPN Solutions
    • Site-to-Site VPN Topologies
    • IPsec VPN Overview
    • IPsec Static Crypto Maps
    • IPsec Static Virtual Tunnel Interface
    • Dynamic Multipoint VPN
    • Cisco IOS FlexVPN
  13. Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs
    • Cisco IOS VTIs
    • Static VTI Point-to-Point IPsec Internet Key Exchange (IKE) v2 VPN Configuration
  14. Deploying Point-to-Point IPsec VPNs on the Cisco ASA and Cisco Firepower NGFW
    • Point-to-Point VPNs on the Cisco ASA and Cisco Firepower NGFW
    • Cisco ASA Point-to-Point VPN Configuration
    • Cisco Firepower NGFW Point-to-Point VPN Configuration
  15. Introducing Cisco Secure Remote Access VPN Solutions
    • Remote Access VPN Components
    • Remote Access VPN Technologies
    • Secure Sockets Layer (SSL) Overview
  16. Deploying Remote Access SSL VPNs on the Cisco ASA and Cisco Firepower NGFW
    • Remote Access Configuration Concepts
    • Connection Profiles
    • Group Policies
    • Cisco ASA Remote Access VPN Configuration
    • Cisco Firepower NGFW Remote Access VPN Configuration
  17. Explaining Cisco Secure Network Access Solutions
    • Cisco Secure Network Access
    • Cisco Secure Network Access Components
    • AAA Role in Cisco Secure Network Access Solution
    • Cisco Identity Services Engine
    • Cisco TrustSec
  18. Describing 802.1X Authentication
    • 802.1X and Extensible Authentication Protocol (EAP)
    • EAP Methods
    • Role of Remote Authentication Dial-in User Service (RADIUS) in 802.1X Communications
    • RADIUS Change of Authorization
  19. Configuring 802.1X Authentication
    • Cisco Catalyst® Switch 802.1X Configuration
    • Cisco Wireless LAN Controller (WLC) 802.1X Configuration
    • Cisco Identity Services Engine (ISE) 802.1X Configuration
    • Supplicant 802.1x Configuration
    • Cisco Central Web Authentication
  20. Describing Endpoint Security Technologies*
    • Host-Based Personal Firewall
    • Host-Based Anti-Virus
    • Host-Based Intrusion Prevention System
    • Application Whitelists and Blacklists
    • Host-Based Malware Protection
    • Sandboxing Overview
    • File Integrity Checking
  21. Deploying Cisco Advanced Malware Protection (AMP) for Endpoints*
    • Cisco AMP for Endpoints Architecture
    • Cisco AMP for Endpoints Engines
    • Retrospective Security with Cisco AMP
    • Cisco AMP Device and File Trajectory
    • Managing Cisco AMP for Endpoints
  22. Introducing Network Infrastructure Protection*
    • Identifying Network Device Planes
    • Control Plane Security Controls
    • Management Plane Security Controls
    • Network Telemetry
    • Layer 2 Data Plane Security Controls
    • Layer 3 Data Plane Security Controls
  23. Deploying Control Plane Security Controls*
    • Infrastructure ACLs
    • Control Plane Policing
    • Control Plane Protection
    • Routing Protocol Security
  24. Deploying Layer 2 Data Plane Security Controls*
    • Overview of Layer 2 Data Plane Security Controls
    • Virtual LAN (VLAN)-Based Attacks Mitigation
    • Spanning Tree Protocol (STP) Attacks Mitigation
    • Port Security
    • Private VLANs
    • Dynamic Host Configuration Protocol (DHCP) Snooping
    • Address Resolution Protocol (ARP) Inspection
    • Storm Control
    • MACsec Encryption
  25. Deploying Layer 3 Data Plane Security Controls*
    • Infrastructure Antispoofing ACLs
    • Unicast Reverse Path Forwarding
    • IP Source Guard
  26. Deploying Management Plane Security Controls*
    • Cisco Secure Management Access
    • Simple Network Management Protocol Version 3
    • Secure Access to Cisco Devices
    • AAA for Management Access
  27. Deploying Traffic Telemetry Methods*
    • Network Time Protocol
    • Device and Network Events Logging and Export
    • Network Traffic Monitoring Using NetFlow
  28. Deploying Cisco Stealthwatch Enterprise*
    • Cisco Stealthwatch Offerings Overview
    • Cisco Stealthwatch Enterprise Required Components
    • Flow Stitching and Deduplication
    • Stealthwatch Enterprise Optional Components
    • Stealthwatch Enterprise and ISE Integration
    • Cisco Stealthwatch with Cognitive Analytics
    • Cisco Encrypted Traffic Analytics
    • Host Groups
    • Security Events and Alarms
    • Host, Role, and Default Policies
  29. Describing Cloud and Common Cloud Attacks*
    • Evolution of Cloud Computing
    • Cloud Service Models
    • Security Responsibilities in Cloud
    • Cloud Deployment Models
    • Common Security Threats in Cloud
    • Patch Management in the Cloud
    • Security Assessment in the Cloud
  30. Securing the Cloud*
    • Cisco Threat-Centric Approach to Network Security
    • Cloud Physical Environment Security
    • Application and Workload Security
    • Cloud Management and API Security
    • Network Function Virtualization (NFV) and Virtual Network Functions (VNF)
    • Cisco NFV Examples
    • Reporting and Threat Visibility in Cloud
    • Cloud Access Security Broker
    • Cisco CloudLock®
    • OAuth and OAuth Attacks
  31. Deploying Cisco Stealthwatch Cloud*
    • Cisco Stealthwatch Cloud for Public Cloud Monitoring
    • Cisco Stealthwatch Cloud for Private Network Monitoring
    • Cisco Stealthwatch Cloud Operations
  32. Describing Software-Defined Networking (SDN*)
    • Software-Defined Networking Concepts
    • Network Programmability and Automation
    • Cisco Platforms and APIs
    • Basic Python Scripts for Automation

* This section is self-study material that can be done at your own pace if you are taking the instructor-led version of this course.

Labs

  • Configure Network Settings and NAT on Cisco ASA
  • Configure Cisco ASA Access Control Policies
  • Configure Cisco Firepower NGFW NAT
  • Configure Cisco Firepower NGFW Access Control Policy
  • Configure Cisco Firepower NGFW Discovery and IPS Policy
  • Configure Cisco NGFW Malware and File Policy
  • Configure Listener, Host Access Table (HAT), and Recipient Access Table (RAT) on Cisco Email Security Appliance (ESA)
  • Configure Mail Policies
  • Configure Proxy Services, Authentication, and HTTPS Decryption
  • Enforce Acceptable Use Control and Malware Protection
  • Examine the Umbrella Dashboard
  • Examine Cisco Umbrella Investigate
  • Explore DNS Ransomware Protection by Cisco Umbrella
  • Configure Static VTI Point-to-Point IPsec IKEv2 Tunnel
  • Configure Point-to-Point VPN between the Cisco ASA and Cisco Firepower NGFW
  • Configure Remote Access VPN on the Cisco Firepower NGFW
  • Explore Cisco AMP for Endpoints
  • Perform Endpoint Analysis Using AMP for Endpoints Console
  • Explore File Ransomware Protection by Cisco AMP for Endpoints Console
  • Explore Cisco Stealthwatch Enterprise v6.9.3
  • Explore Cognitive Threat Analytics (CTA) in Stealthwatch Enterprise v7.0
  • Explore the Cisco Cloudlock Dashboard and User Security
  • Explore Cisco Cloudlock Application and Data Security
  • Explore Cisco Stealthwatch Cloud
  • Explore Stealthwatch Cloud Alert Settings, Watchlists, and Sensors

Contacts:

info@learneo.com
01 53 20 37 00

À propos de Learneo

Notre mission consiste à développer votre expertise professionnelle et vous assister dans l’évolution de votre carrière en vous proposant des formations technologiques certifiantes de renommée mondiale.

Contact

130, rue de Clignancourt 75018 PARIS
+33 (0) 1 53 20 37 00
info@learneo.com

Copyright 2018 Learneo.Tous droits réservés. 130 rue de Clignancourt 75018 PARIS