CCNP Security Training - United States

CCNP Security Training Outline

Implementing Cisco Edge Network Security Solutions - SENSS

• Understanding and implementing Cisco modular Network Security Architectures such as SecureX and TrustSec
• Deploy Cisco Infrastructure management and control plane security controls
• Configuring Cisco layer 2 and layer 3 data plane security controls
• Implement and maintain Cisco ASA Network Address Translations (NAT)
• Implement and maintain Cisco IOS Software Network Address Translations (NAT)
• Designing and deploying Cisco Threat Defense solutions on a Cisco ASA utilizing access policy and application and identity-based inspection
• Implementing Botnet Traffic Filters
• Deploying Cisco IOS Zone-Based Policy Firewalls (ZBFW)
• Configure and verify Cisco IOS ZBFW Application Inspection Policy

Implementing Cisco Secure Mobility Solutions - SIMOS

• Describe the various VPN technologies and deployments as well as the cryptographic algorithms and protocols that provide VPN security
• Implement and maintain Cisco site-to-site VPN solutions
• Implement and maintain Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs
• Implement and maintain Cisco clientless SSL VPNs
• Implement and maintain Cisco AnyConnect SSL and IPsec VPNs
• Implement and maintain endpoint security and dynamic access policies (DAP)

Implementing Cisco Secure Access Solutions - SISAS

• Understand Cisco Identity Services Engine architecture and access control capabilities
• Understand 802.1X architecture, implementation and operation
• Understand commonly implemented Extensible Authentication Protocols (EAP)
• Implement Public-Key Infrastructure with ISE
• Understand the implement Internal and External authentication databases
• Implement MAC Authentication Bypass
• Implement identity-based authorization policies
• Understand Cisco TrustSec features
• Implement Web Authentication and Guest Access
• Implement ISE Posture service
• Implement ISE Profiling
• Understand Bring Your Own Device (BYOD) with ISE
• Troubleshoot ISE

Implementing Cisco Threat Control Solutions - SITCS

• Understand Cisco ASA Next-Generation Firewall (NGFW)
• Deploy Cisco Web Security appliance to mitigate malware
• Configure Web Security appliance for acceptable use controls
• Configure Cisco Cloud Web Security Connectors
• Describe Cisco Email Security Solution
• Configure Cisco Email Appliance Incoming and Outgoing Policies
• Describe IPS Threat Controls
• Configure and Implement Cisco IPS Sensor into a Network