Cisco IOS Network Security in Beijing

Cisco IOS Network Security Training​ Course Outline

Module 1: Network Security Principles

• Examining Network Security Fundamentals
  • Need for Network Security
  • Network Security Objectives
  • Data Classification
  • Security Controls
  • Response to a Security Breach
  • Laws and Ethics
• Examining Network Attack Methodologies
  • Adversaries, Motivations, and Classes of Attack
  • Classes of Attack and Methodology
• Principles of Defence in Depth
  • IP Spoofing Attacks
  • Confidentiality Attacks
  • Integrity Attacks
  • Availability Attacks
  • Best Practices to Defeat Network Attacks
• Examining Operations Security
  • Secure Network Life Cycle Management
  • Principles of Operations Security
  • Network Security Testing
  • Disaster Recovery and Business Continuity Planning 
• Understanding and Developing a Comprehensive Network Security Policy
  • Security Policy Overview
  • Security Policy Components
  • Standards, Guidelines, and Procedures
  • Security Policy Roles and Responsibilities
  • Risk Analysis and Management
  • Principles of Secure Network Design
  • Security Awareness
• Cisco Self-Defending Networks
  • Changing Threats and Challenges
  • Building a Cisco Self-Defending Network
  • Cisco Integrated Security Portfolio

Module 2: Perimeter Security

• Securing Administration Access to Cisco Routers
• Family
• Securing the Cisco IOS Image and Configuration files
• Configuring Enhanced Support for Virtual Logins
• Detection
• Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Reporting
• Locking Down the Router

Module 3: Network Security Using Cisco ISO Firewalls

• Introducing Firewall Technologies
• Firewall Fundamentals
• Firewalls in a Layered Defense Strategy
• Static Packet Filtering Firewalls
• Application Layer Gateways
• Dynamic or Stateful Packet-Filtering Firewalls
• Other Types of Firewalls
• Cisco Family of Firewalls
• Developing an Effective Firewall Policy
• ACL Fundamentals
• ACL Wildcard Masking
• Using ACLs to Control Traffic
• Using ACLs to Control Traffic
• ACL Considerations
• Configuring ACLs Using SDM
• Using ACLs to Permit and Deny Network Services
• Configuring a Cisco 10S Zone-Based Policy Firewall
• Zone-Based Policy Firewall Overview
• Configuring Zone-Based Policy Firewalls Using the Basic
• Firewall Wizard
• Manually Configuring Zone-Based Policy Firewalls Using
• Cisco SDM
• Monitoring a Zone-Based-Firewall

Module 4: Fundamentals of Cryptography

• Examining Cryptographic Services
  • Cryptology Overview
  • Symmetric and Asymmetric Encryption Algorithms
  • Block and Stream Ciphers
  • Encryption Algorithm Selection
  • Cryptographic Hashes
  • Key Management
  • Introducing SSL VPNs
• Examining Symmetric Encryption
  • Symmetric Encryption Overview
  • DES: Features and Functions
  • 3DES: Features and Functions
  • AES: Features and Functions
  • SEAL: Features and Functions
  • Rivest Ciphers: Features and Functions
• Examining Cryptographic Hashes and Digital Signatures
  • Overview of Hash Algorithms
  • Overview of Hashed Message Authentication Codes
  • MD5: Features and Functions
  • SHA-1: Features and Functions
  • Overview of Digital Signatures
  • DSS: Features and Functions
• Examining Asymmetric Encryption and PKI
  • Asymmetric Encryption Overview
  • RSA: Features and Functions
  • DH: Features and Functions
  • PKI Definitions and Algorithms
  • PKI Standards

Module 5: Site-to-Site VPNs

• VPN Overview
  • VPN Types
  • Cisco VPN Product Family
• Introducing IPsec
• IPsec Protocol Framework
• IKE Protocol
• Building a Site-to-Site IPsec VPN
• Configuring IPsec Configuration
• VPNs

Module 6: Network Security Using Cisco IOS IPS

• Introducing IDS and IPS
• Cisco IPS Management Software
• System
  • Cisco IDS Event Viewer
  • Cisco Security Manager
  • Cisco IPS Device Manager
• Host and Network IPS
• Introducing Cisco IPS Appliances
• Signatures and Signature Engines
• IPS Best Practices
• Configuring Cisco IOS IPS
• Verifying IPS Operation

Module 7: LAN, SAN, Voice, and Endpoint Security Overview

• Examining Endpoint Security
  • Operating System Vulnerabilities
  • Application Vulnerabilities
  • Buffer Overflows
  • IronPort
  • Cisco Security NAC Products
  • Cisco Security Agent
  • Endpoint Security Best Practices
• Examining SAN Security
  • Defining SANs
  • SAN Fundamentals
  • SAN Security Scope
• Examining Voice Security
  • VoIP Fundamentals
  • Voice Security Threats
  • Defending Against VoIP Hacking
• Mitigating Layer 2 Attacks
  • Basic Switch Operation
  • Mitigating VLAN Attacks
  • Preventing Spanning Tree Protocol Manipulation
  • CAM Table Overflow Attacks
  • MAC Address Spoofing Attacks
  • Using Port Security
  • Additional Switch Security Features
  • Layer 2 Best Practices

Who Should Attend this Cisco IOS Network Security Training?

The Cisco IOS Network Security Course is beneficial for a wide range of individuals who are involved in managing and maintaining Network Security using Cisco devices. This Cisco Training can benefit a wide range of professionals, including:

• Network Administrators
• Security Engineers
• IT Managers
• System Integrators
• Network Analysts
• IT Consultants
• Cybersecurity Specialists

Prerequisites of the Cisco IOS Network Security Training

There are no formal prerequisites for this Cisco IOS Network Security Course.

Cisco IOS Network Security Training Overview

The Cisco IOS Network Security Training Course offers a comprehensive understanding of network security principles, specifically focusing on Cisco's IOS (Internetwork Operating System). This Cisco Course covers the various features of Cisco IOS used for enhancing the security of routers and switches. Delegates learn about securing network infrastructure using Cisco IOS security features and technologies.

The benefits of Cisco IOS Network Security are multifaceted. First and foremost, it enhances network resilience against cyber threats, which is crucial in today's digital landscape. By understanding and implementing Cisco IOS security features, network professionals can prevent unauthorised access, data breaches, and other security incidents.

The Knowledge Academy's 2-Day Cisco IOS Network Security Training Course offers several benefits to its delegates. It provides them with the skills and knowledge required to secure network infrastructure using Cisco's advanced IOS security features. This Cisco Training is particularly beneficial for network engineers, administrators, and security professionals who are responsible for managing and securing Cisco network environments.

Cisco IOS Network Security Training Course Objectives

• To understand and implement Cisco IOS security features for network infrastructure protection
• To learn best practices for securing routers and switches using Cisco IOS
• To gain proficiency in threat control and containment strategies
• To master secure connectivity protocols, including VPN implementation using Cisco IOS
• To prepare for relevant Cisco Certifications online exams with a focus on network security

Upon completing this Cisco Training, which is one of our comprehensive Cisco Courses, delegates will have a deep understanding of network security within a Cisco IOS environment. With hands-on experience, they will be well-prepared to secure network infrastructures and advance their careers, including readiness for relevant Cisco Certifications.

What’s included in this Cisco IOS Network Security Training

• World-Class Training Sessions from Experienced Instructors
• Cisco IOS Network Security Certificate
• Digital Delegate Pack