Cisco IOS Network Security in Zurich

Cisco IOS Network Security Training​ Course Outline

Module 1: Network Security Principles

• Examining Network Security Fundamentals
  • Need for Network Security
  • Network Security Objectives
  • Data Classification
  • Security Controls
  • Response to a Security Breach
  • Laws and Ethics
• Examining Network Attack Methodologies
  • Adversaries, Motivations, and Classes of Attack
  • Classes of Attack and Methodology
• Principles of Defence in Depth
  • IP Spoofing Attacks
  • Confidentiality Attacks
  • Integrity Attacks
  • Availability Attacks
  • Best Practices to Defeat Network Attacks
• Examining Operations Security
  • Secure Network Life Cycle Management
  • Principles of Operations Security
  • Network Security Testing
  • Disaster Recovery and Business Continuity Planning 
• Understanding and Developing a Comprehensive Network Security Policy
  • Security Policy Overview
  • Security Policy Components
  • Standards, Guidelines, and Procedures
  • Security Policy Roles and Responsibilities
  • Risk Analysis and Management
  • Principles of Secure Network Design
  • Security Awareness
• Cisco Self-Defending Networks
  • Changing Threats and Challenges
  • Building a Cisco Self-Defending Network
  • Cisco Integrated Security Portfolio

Module 2: Perimeter Security

• Securing Administration Access to Cisco Routers
• Family
• Securing the Cisco IOS Image and Configuration files
• Configuring Enhanced Support for Virtual Logins
• Detection
• Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Reporting
• Locking Down the Router

Module 3: Network Security Using Cisco ISO Firewalls

• Introducing Firewall Technologies
• Firewall Fundamentals
• Firewalls in a Layered Defense Strategy
• Static Packet Filtering Firewalls
• Application Layer Gateways
• Dynamic or Stateful Packet-Filtering Firewalls
• Other Types of Firewalls
• Cisco Family of Firewalls
• Developing an Effective Firewall Policy
• ACL Fundamentals
• ACL Wildcard Masking
• Using ACLs to Control Traffic
• Using ACLs to Control Traffic
• ACL Considerations
• Configuring ACLs Using SDM
• Using ACLs to Permit and Deny Network Services
• Configuring a Cisco 10S Zone-Based Policy Firewall
• Zone-Based Policy Firewall Overview
• Configuring Zone-Based Policy Firewalls Using the Basic
• Firewall Wizard
• Manually Configuring Zone-Based Policy Firewalls Using
• Cisco SDM
• Monitoring a Zone-Based-Firewall

Module 4: Fundamentals of Cryptography

• Examining Cryptographic Services
  • Cryptology Overview
  • Symmetric and Asymmetric Encryption Algorithms
  • Block and Stream Ciphers
  • Encryption Algorithm Selection
  • Cryptographic Hashes
  • Key Management
  • Introducing SSL VPNs
• Examining Symmetric Encryption
  • Symmetric Encryption Overview
  • DES: Features and Functions
  • 3DES: Features and Functions
  • AES: Features and Functions
  • SEAL: Features and Functions
  • Rivest Ciphers: Features and Functions
• Examining Cryptographic Hashes and Digital Signatures
  • Overview of Hash Algorithms
  • Overview of Hashed Message Authentication Codes
  • MD5: Features and Functions
  • SHA-1: Features and Functions
  • Overview of Digital Signatures
  • DSS: Features and Functions
• Examining Asymmetric Encryption and PKI
  • Asymmetric Encryption Overview
  • RSA: Features and Functions
  • DH: Features and Functions
  • PKI Definitions and Algorithms
  • PKI Standards

Module 5: Site-to-Site VPNs

• VPN Overview
  • VPN Types
  • Cisco VPN Product Family
• Introducing IPsec
• IPsec Protocol Framework
• IKE Protocol
• Building a Site-to-Site IPsec VPN
• Configuring IPsec Configuration
• VPNs

Module 6: Network Security Using Cisco IOS IPS

• Introducing IDS and IPS
• Cisco IPS Management Software
• System
  • Cisco IDS Event Viewer
  • Cisco Security Manager
  • Cisco IPS Device Manager
• Host and Network IPS
• Introducing Cisco IPS Appliances
• Signatures and Signature Engines
• IPS Best Practices
• Configuring Cisco IOS IPS
• Verifying IPS Operation

Module 7: LAN, SAN, Voice, and Endpoint Security Overview

• Examining Endpoint Security
  • Operating System Vulnerabilities
  • Application Vulnerabilities
  • Buffer Overflows
  • IronPort
  • Cisco Security NAC Products
  • Cisco Security Agent
  • Endpoint Security Best Practices
• Examining SAN Security
  • Defining SANs
  • SAN Fundamentals
  • SAN Security Scope
• Examining Voice Security
  • VoIP Fundamentals
  • Voice Security Threats
  • Defending Against VoIP Hacking
• Mitigating Layer 2 Attacks
  • Basic Switch Operation
  • Mitigating VLAN Attacks
  • Preventing Spanning Tree Protocol Manipulation
  • CAM Table Overflow Attacks
  • MAC Address Spoofing Attacks
  • Using Port Security
  • Additional Switch Security Features
  • Layer 2 Best Practices

Who Should Attend this Cisco IOS Network Security Training?

The Cisco IOS Network Security Course is beneficial for a wide range of delegates who are involved in managing and maintaining Network Security using Cisco devices. This Cisco Training can benefit a wide range of professionals, including:

• Network Administrators
• Security Engineers
• IT Managers
• System Integrators
• Network Analysts
• IT Consultants
• Cybersecurity Specialists

Prerequisites of the Cisco IOS Network Security Training

There are no formal prerequisites for this Cisco IOS Network Security Course.

Cisco IOS Network Security Training Overview

Cisco IOS Network Security Training introduces the principles of securing enterprise networks using Cisco IOS security technologies. It covers network security, perimeter defence, firewalls, cryptography, VPNs, intrusion prevention, and endpoint security.

This training develops knowledge of Cisco IOS security features, access control, firewall configuration, VPN deployment, intrusion prevention, and secure network design. Delegates learn how to implement layered security controls and mitigate security threats.

This 2-Day course offered by The Knowledge Academy enables delegates to apply Cisco IOS security practices in enterprise network environments. Delegates can configure, manage, and maintain secure Cisco networks while supporting enterprise cybersecurity.

Cisco IOS Network Security Training Course Objectives

• To understand and implement Cisco IOS security features for network infrastructure protection
• To learn best practices for securing routers and switches using Cisco IOS
• To gain proficiency in threat control and containment strategies
• To master secure connectivity protocols, including VPN implementation using Cisco IOS
• To prepare for relevant Cisco Certifications online exams with a focus on network security
• To configure firewalls, intrusion prevention systems, and access control policies using Cisco IOS

Upon completing this Cisco Training, which is one of our comprehensive Cisco Courses, delegates will have a deep understanding of network security within a Cisco IOS environment. With hands-on experience, they will be well-prepared to secure network infrastructures and advance their careers, including readiness for relevant Cisco Certifications.

What’s included in this Cisco IOS Network Security Training

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack