Cisco IOS Network Security Training - United States

Cisco IOS Network Security Training Course Outline

Module 1: Network Security Principles

• Examining Network Security Fundamentals

• Need for Network Security
• Network Security Objectives
• Data Classification
• Security Controls
• Response to a Security Breach
• Laws and Ethics

• Examining Network Attack Methodologies

• Adversaries, Motivations, and Classes of Attack
• Classes of Attack and Methodology

• Principles of Defense in Depth

• IP Spoofing Attacks
• Confidentiality Attacks
• Integrity Attacks
• Availability Attacks
• Best Practices to Defeat Network Attacks

• Examining Operations Security

• Secure Network Life Cycle Management
• Principles of Operations Security
• Network Security Testing
• Disaster Recovery and Business Continuity Planning

• Understanding and Developing a Comprehensive Network Security Policy

• Security Policy Overview
• Security Policy Components
• Standards, Guidelines, and Procedures
• Security Policy Roles and Responsibilities
• Risk Analysis and Management
• Principles of Secure Network Design
• Security Awareness

• Cisco Self-Defending Networks

• Changing Threats and Challenges
• Building a Cisco Self-Defending Network
• Cisco Integrated Security Portfolio

Module 2: Perimeter Security

• Securing Administration Access to Cisco Routers
• Family
• Securing the Cisco IOS Image and Configuration files
• Configuring Enhanced Support for Virtual Logins
• Detection
• Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Reporting
• Locking Down the Router

Module 3: Network Security Using Cisco ISO Firewalls

• Introducing Firewall Technologies
• Firewall Fundamentals
• Firewalls in a Layered Defense Strategy
• Static Packet Filtering Firewalls
• Application Layer Gateways
• Dynamic or Stateful Packet-Filtering Firewalls
• Other Types of Firewalls
• Cisco Family of Firewalls
• Developing an Effective Firewall Policy
• ACL Fundamentals
• ACL Wildcard Masking
• Using ACLs to Control Traffic
• Using ACLs to Control Traffic
• ACL Considerations
• Configuring ACLs Using SDM
• Using ACLs to Permit and Deny Network Services
• Configuring a Cisco 10S Zone-Based Policy Firewall
• Zone-Based Policy Firewall Overview
• Configuring Zone-Based Policy Firewalls Using the Basic
• Firewall Wizard
• Manually Configuring Zone-Based Policy Firewalls Using
• Cisco SDM
• Monitoring a Zone-Based-Firewall

Module 4: Fundamentals of Cryptography

• Examining Cryptographic Services

• Cryptology Overview
• Symmetric and Asymmetric Encryption Algorithms
• Block and Stream Ciphers
• Encryption Algorithm Selection
• Cryptographic Hashes
• Key Management
• Introducing SSL VPNs

• Examining Symmetric Encryption

• Symmetric Encryption Overview
• DES: Features and Functions
• 3DES: Features and Functions
• AES: Features and Functions
• SEAL: Features and Functions
• Rivest Ciphers: Features and Functions

• Examining Cryptographic Hashes and Digital Signatures

• Overview of Hash Algorithms
• Overview of Hashed Message Authentication Codes
• MD5: Features and Functions
• SHA-1: Features and Functions
• Overview of Digital Signatures
• DSS: Features and Functions

• Examining Asymmetric Encryption and PKI

• Asymmetric Encryption Overview
• RSA: Features and Functions
• DH: Features and Functions
• PKI Definitions and Algorithms
• PKI Standards

Module 5: Site-to-Site VPNs

• VPN Overview

• VPN Types
• Cisco VPN Product Family

• Introducing IPsec
• IPsec Protocol Framework
• IKE Protocol
• Building a Site-to-Site IPsec VPN
• Configuring IPsec Configuration
• VPNs

Module 6: Network Security Using Cisco IOS IPS

• Introducing IDS and IPS
• Cisco IPS Management Software
• System

• Cisco IDS Event Viewer
• Cisco Security Manager
• Cisco IPS Device Manager

• Host and Network IPS
• Introducing Cisco IPS Appliances
• Signatures and Signature Engines
• IPS Best Practices
• Configuring Cisco IOS IPS
• Verifying IPS Operation

Module 7: LAN, SAN, Voice, and Endpoint Security Overview

• Examining Endpoint Security

• Operating System Vulnerabilities
• Application Vulnerabilities
• Buffer Overflows
• IronPort
• Cisco Security NAC Products
• Cisco Security Agent
• Endpoint Security Best Practices

• Examining SAN Security

• Defining SANs
• SAN Fundamentals
• SAN Security Scope

• Examining Voice Security

• VoIP Fundamentals
• Voice Security Threats
• Defending Against VoIP Hacking

• Mitigating Layer 2 Attacks

• Basic Switch Operation
• Mitigating VLAN Attacks
• Preventing Spanning Tree Protocol Manipulation
• CAM Table Overflow Attacks
• MAC Address Spoofing Attacks
• Using Port Security
• Additional Switch Security Features
• Layer 2 Best Practices