Cisco IOS Network Security in Hong Kong

Cisco IOS Network Security Training​ Course Outline

Module 1: Network Security Principles

• Examining Network Security Fundamentals
  • Need for Network Security
  • Network Security Objectives
  • Data Classification
  • Security Controls
  • Response to a Security Breach
  • Laws and Ethics
• Examining Network Attack Methodologies
  • Adversaries, Motivations, and Classes of Attack
  • Classes of Attack and Methodology
• Principles of Defence in Depth
  • IP Spoofing Attacks
  • Confidentiality Attacks
  • Integrity Attacks
  • Availability Attacks
  • Best Practices to Defeat Network Attacks
• Examining Operations Security
  • Secure Network Life Cycle Management
  • Principles of Operations Security
  • Network Security Testing
  • Disaster Recovery and Business Continuity Planning 
• Understanding and Developing a Comprehensive Network Security Policy
  • Security Policy Overview
  • Security Policy Components
  • Standards, Guidelines, and Procedures
  • Security Policy Roles and Responsibilities
  • Risk Analysis and Management
  • Principles of Secure Network Design
  • Security Awareness
• Cisco Self-Defending Networks
  • Changing Threats and Challenges
  • Building a Cisco Self-Defending Network
  • Cisco Integrated Security Portfolio

Module 2: Perimeter Security

• Securing Administration Access to Cisco Routers
• Family
• Securing the Cisco IOS Image and Configuration files
• Configuring Enhanced Support for Virtual Logins
• Detection
• Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Reporting
• Locking Down the Router

Module 3: Network Security Using Cisco ISO Firewalls

• Introducing Firewall Technologies
• Firewall Fundamentals
• Firewalls in a Layered Defense Strategy
• Static Packet Filtering Firewalls
• Application Layer Gateways
• Dynamic or Stateful Packet-Filtering Firewalls
• Other Types of Firewalls
• Cisco Family of Firewalls
• Developing an Effective Firewall Policy
• ACL Fundamentals
• ACL Wildcard Masking
• Using ACLs to Control Traffic
• Using ACLs to Control Traffic
• ACL Considerations
• Configuring ACLs Using SDM
• Using ACLs to Permit and Deny Network Services
• Configuring a Cisco 10S Zone-Based Policy Firewall
• Zone-Based Policy Firewall Overview
• Configuring Zone-Based Policy Firewalls Using the Basic
• Firewall Wizard
• Manually Configuring Zone-Based Policy Firewalls Using
• Cisco SDM
• Monitoring a Zone-Based-Firewall

Module 4: Fundamentals of Cryptography

• Examining Cryptographic Services
  • Cryptology Overview
  • Symmetric and Asymmetric Encryption Algorithms
  • Block and Stream Ciphers
  • Encryption Algorithm Selection
  • Cryptographic Hashes
  • Key Management
  • Introducing SSL VPNs
• Examining Symmetric Encryption
  • Symmetric Encryption Overview
  • DES: Features and Functions
  • 3DES: Features and Functions
  • AES: Features and Functions
  • SEAL: Features and Functions
  • Rivest Ciphers: Features and Functions
• Examining Cryptographic Hashes and Digital Signatures
  • Overview of Hash Algorithms
  • Overview of Hashed Message Authentication Codes
  • MD5: Features and Functions
  • SHA-1: Features and Functions
  • Overview of Digital Signatures
  • DSS: Features and Functions
• Examining Asymmetric Encryption and PKI
  • Asymmetric Encryption Overview
  • RSA: Features and Functions
  • DH: Features and Functions
  • PKI Definitions and Algorithms
  • PKI Standards

Module 5: Site-to-Site VPNs

• VPN Overview
  • VPN Types
  • Cisco VPN Product Family
• Introducing IPsec
• IPsec Protocol Framework
• IKE Protocol
• Building a Site-to-Site IPsec VPN
• Configuring IPsec Configuration
• VPNs

Module 6: Network Security Using Cisco IOS IPS

• Introducing IDS and IPS
• Cisco IPS Management Software
• System
  • Cisco IDS Event Viewer
  • Cisco Security Manager
  • Cisco IPS Device Manager
• Host and Network IPS
• Introducing Cisco IPS Appliances
• Signatures and Signature Engines
• IPS Best Practices
• Configuring Cisco IOS IPS
• Verifying IPS Operation

Module 7: LAN, SAN, Voice, and Endpoint Security Overview

• Examining Endpoint Security
  • Operating System Vulnerabilities
  • Application Vulnerabilities
  • Buffer Overflows
  • IronPort
  • Cisco Security NAC Products
  • Cisco Security Agent
  • Endpoint Security Best Practices
• Examining SAN Security
  • Defining SANs
  • SAN Fundamentals
  • SAN Security Scope
• Examining Voice Security
  • VoIP Fundamentals
  • Voice Security Threats
  • Defending Against VoIP Hacking
• Mitigating Layer 2 Attacks
  • Basic Switch Operation
  • Mitigating VLAN Attacks
  • Preventing Spanning Tree Protocol Manipulation
  • CAM Table Overflow Attacks
  • MAC Address Spoofing Attacks
  • Using Port Security
  • Additional Switch Security Features
  • Layer 2 Best Practices