Description

Teaches the comprehensive skills required to design and deploy a secure network according to Cisco's SAFE Blueprint.

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use and implement the principles and axioms presented in the SAFE Small, Midsize and Remote (SMR) User White Paper. Candidates are tested on knowledge of how the following devices can be used to create a complete end-to-end solution: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Host IDS, and the Cisco VPN Client. The SAFE SMR can be downloaded for free from: www.cisco.com/go/safe 
 
 
Topics 

Security Fundamentals

• Need for network security 
• Network attack taxonomy 
• Network security policy 
• Management protocols and functions 
  

Architectural Overview

• Overview 
• Design fundamentals 
• Safe axioms 
• Security wheel 

Cisco Security Portfolio

• Overview 
• Secure connectivity - Virtual Private Network solutions 
• Secure connectivity - the 3000 Concentrator series 
• Secure connectivity - Cisco VPN optimized routers 
• Perimeter security firewalls - Cisco PIX and Cisco IOS Firewall 
• Intrusion protection - IDS and Cisco secure scanner 
• Identity - Access control solutions 
• Security management - VMS and CSPM 
• Cisco AVVID 
  

SAFE Small Network Design

• Overview 
• Small network corporate Internet module 
• Small network campus module 
• Implementation-ISP router 
• Implementation-IOS Firewall features and configuration 
• Implementation-PIX Firewall 
  

SAFE Medium Network Design

• Medium network corporate Internet module 
• Mediumnetwork corporate Internet module design guidelines 
• Medium network campus module 
• Medium network campus module design guidelines 
• Medium network WAN module 
• Implementation - ISP router 
• Implementation - edge router 
• Implementation - IOS Firewall 
• Implementation - PIX Firewall 
• Implementation - NIDS 
• Implementation - HIDS 
• Implementation - VPN Concentrator 
• Implementation - Layer 3 switch 
  

SAFE Remote-User Network Implementation

• Overview 
• Key devices 
• Threat mitigation 
• Software access option 
• Remote site firewall option 
• Hardware VPN Client option 
• Remote site router option 
  

Preparation for Exam 642-541.
Registration Form