Cisco Advanced Services: Security

• CCNA and Building Scalable Cisco Internetworks (BSCI) course completion or considerable knowledge or experience in configuring Layer 2 and Layer 3 interfaces on Cisco IOS? routers and switches using Cisco IOS Software and the command-line interface (CLI)
• CCNA and Building Cisco Multilayer Switch Networks (BCMSN) course completion or direct experience in configuration and verification of routing protocols (for example, Open Shortest Path First [OSPF] and Border Gateway Protocol [BGP]), ACLs, and VLANs

Experience with:

• Firewall operation and architecture
• Intrusion detection system (IDS) concepts and operations

Securing Enterprise Data Center Architectures is a lab-intensive course that allows students to integrate and test Cisco Systems security products and security best practices that comprise the Cisco Enterprise Data Center Architecture. Students will implement and integrate the Cisco Catalyst 6500 Series Firewall Services Module (FWSM); the Cisco Catalyst 6500 Series Intrusion Detection System Module (IDSM-2); and two Cisco anomaly detection devices: Cisco traffic anomaly detectors and Cisco Guard DDoS mitigation appliances. Hands-on lab experience includes use of commonly available network test applications, as well as scripts that students can use to verify that implemented security techniques are successful. Students will also learn best practices for implementing Layer 2 and Layer 3 security, with hands-on practice in implementing features such as port security and private VLANs.

• Introduction
• Cisco Enterprise Data Center Architecture Security Overview
• Understanding Network Threats
• Implementing Device-Level Security
• Implementing Layer 2 and Layer 3 Security
• Deploying Cisco Catalyst 6500 FWSM at Internet Edge and Aggregation Layers
• Deploying IDSs, Intrusion Prevention Systems (IPSs), and Cisco Security Agent
• Deploying Cisco Guard DDoS Mitigation Appliances and Cisco Traffic Anomaly Detectors
• Securing Management Access