Description
SECUR is a course that focuses
on how to build and manage enterprise-class security.
This course also introduces the emerging security
technology and describes how it enhances performance and
scalability in campus networks. On completion of this
training course, you will be able to connect, configure,
and troubleshoot the various security-related elements
of an enterprise.
This
course is recommended for network administrators and
technicians responsible for implementing and
troubleshooting complex routed network environments,
CCNP, CCDP, CCSP candidates, and CCIE Routing and Switching
candidates.
-
Identify
network security threats
-
Evaluate
a network security policy
-
Secure
remote dial-up access using CiscoSecure ACS and
Cisco IOS AAA software features
-
Protect
Internet access by configuring a Cisco perimeter
router and a PIX Firewall
-
Use
IPSec features in Cisco IOS software to create a
secure VPN
To
fully benefit from MCNS, the student should posses the
following prerequisite skills and knowledge
-
Internetworking fundamentals
-
Basic
routing protocol concepts
-
Basic
router configuration
-
Standard
and extended access list configuration
-
Cisco
Dial-up networking fundamentals recommended
Outline
Security Fundamentals
- Need for network security
- Network attack taxonomy
- Network security policy
- Management protocols and
functions
Basic Cisco Router
Security
- Securing Cisco router
installations
- Securing Cisco router
administrative access
- Introduction to AAA for
Cisco routers
- Configuring AAA for Cisco
perimeter routers
Advanced AAA Security
for Cisco Router Networks
- Introduction to the Cisco
Secure ACS
- Installing Cisco Secure
ACS 3.0 for Windows NT or Windows 2000
- Administering and
troubleshooting Cisco Secure ACS for Windows
- TACACS+ overview and
configuration
- Verifying TACACS+
- RADIUS configuration
overview
Cisco Router Threat
Mitigation
- Using routers to secure
the network
- Disabling unused router
services and interfaces
- Using Access Lists to
mitigate security threats
- Filtering router service
traffic
- Filtering router network
traffic
- DDoS mitigation
- Implementing Syslog
logging
Cisco IOS Firewall
Context-Based Access Control Configuration
- Context-based access
control
- Global timeouts and
thresholds
- Port-to-application
mapping
- Define inspection rules
- Inspection rules and ACLs
applies to router interfaces
Cisco IOS Firewall
Authentication Proxy
- AAA server configuration
- AAA configuration
- Authentication Proxy
configuration
Cisco IOS Firewall
Intrusion Detection System
- Initializing the Cisco
IOS Firewall IDS
- Configuring, disabling,
and excluding signatures
- Creating and applying
Audit Rules
- Verifying the
configuration
Building IPsec VPNs
Using Cisco Routers
- IPsec fundamentals
- IPsec protocol framework
- How IPsec works
- Configuring IPsec
encryption
Building Advanced IPsec
VPNs Using Cisco Routers and Certificate Authorities
- Configure CA support
tasks
- CA support overview
Configuring IOS Remote
Access Using the Cisco VPN Client
- Overview of the Easy VPN
Server
- Overview of the Easy VPN
Remote Feature
- Overview of the Cisco VPN
Client
- How the Cisco Easy VPN
works
- Configuring the Easy VPN
Server for Extended Authentication
- Cisco VPN Client manual configuration tasks
- Working with the Cisco
VPN Client
Managing Enterprise VPN
Routers
- Devices and device groups
- VPN settings
- Managing configurations
Preparation
for Exam 642-501.
Registration
Form
|
