Cisco - Securing Cisco Network Devices (SND) v1.0

Description
This entry-level network security course is offered as a prerequisite to the Cisco Qualified Specialist curriculum. SND provides an opportunity to learn about a broad range of the components embedded in Cisco SAFE.

Who is this course suitable for?
· Network Professionals who require the basic knowledge and skills needed to deploy Cisco security solutions including VPN, IDS Sensors, and PIX Firewalls.
What does this course cover?
· Describe Cisco SAFE, Cisco's security portfolio, and Cisco's VPN Management suite
· Configure Layer 2 and 3 devices on the network perimeter with CatOS and Cisco IOS security features
· Secure a network with the Cisco PIX Security Appliance
· Provide security connectivity to a network with IPSec VPN technology
· Secure networks with host- and network-based intrusion prevention systems (IPS)
· Complete basic network security configuration and administrative tasks using Cisco Secure Access Control Server (ACS) for Windows Server
· Manage network security with CiscoWorks VPN/Security Management Solution (VMS)
During the course, you will learn:

1. Securing a Network with Cisco SAFE
· Planning a Secure Network
· Mitigating Network Attacks
· Introducing the Cisco SAFE Blueprint
· Introducing Cisco Network Admission Control
· Introducing the Cisco Security Portfolio
2. Securing the Perimeter
· Mitigating Layer 2 Attacks
· Deploying Catalyst Switch Security Features
· Securing Cisco Router Installations and Administrative Access
· Disabling Unused Cisco Router Network Services and Interfaces
· Mitigating Threats and Attacks with Access Lists
· Securing Cisco Routers with Syslog and AutoSecure Features
· Configuring AAA for Cisco Routers
3. Cisco Security Appliances
· Introducing the Cisco A16PIX Security Appliance
· Configuring a PIX Security Appliance from the Command Line Interface
· Configuring a PIX Security Appliance with the Cisco PIX Device Manager
4. Building IPSec VPNs
· Introducing Cisco VPN Products
· Introducing IPSec Technologies
· Selecting a Cisco VPN 3000 Series Concentrator
· Configuring the Cisco VPN 3000 Series Concentrator
· Configuring the Cisco VPN Software Client for Windows
5. Securing Networks with Host- and Network-Based IPS
· Introducing Intrusion Prevention Systems
· Configuring the IPS Sensor Hardware and Software on the Network
· Configuring the Sensor Using the Intrusion Detection System Device Manager (IDM)
· Introducing the Cisco Security Agent
· Deploying HIPS with the CSA
6. Securing Access with Cisco Secure ACS
· Introducing the Cisco Secure Access Control Server (ACS) for Windows Server
· Configuring Basic Services on the Cisco Secure Access Control Server (ACS) for Windows
7. Managing Network Security
· Managing Security with CiscoWorks VPN/Security Management Solution (VMS)
Hands-On Labs
Lab 1-1: Discovering Network Vulnerabilities and Threats
Lab 2-1: Configuring Basic Cisco Router Security with Passwords
Lab 2-2: Disabling Unused Cisco Router Network Services and Interfaces
Lab 2-3: Securing a Cisco Peripheral Router with Access List
Lab 2-4: Securing Cisco Routers Using Syslog and Autosecure
Lab 2-5: Configuring Basic Cisco Router Authentication
Lab 3-1: Configuring a PIX Security Appliance from the Command Line Interface
Lab 3-2: Configuring the PIX Security Appliance with the PDM
Lab 4-1: Configuring a Cisco VPN 3000 Series Concentrator for Remote Access
Lab 4-2: Configuring the Cisco VPN 3000 Series Concentrator using the Cisco VPN Software Client for Windows
Lab 5-1: Configuring the Cisco IPS Sensor on the Networ
Lab 5-2: Configuring Basic Sensor Settings with the IDS Device Manager
Lab 5-3: Deploy HIPS with the CSA
Lab 6-1: Configuring the ACS

Examinations
· Exam: 642-551 SND
SND is part of the recommended learning path for students seeking the Cisco Certified Security Professional (CCSP) and any three of the Cisco Qualified Security Specialist (Firewall, IP and VPN) certifications.
Are there entry requirements?
· CCNA Certification or the equivalent knowledge.
· Basic knowledge of the Windows operating system
· Familiarity with networking and security terms and concepts
What's included?
Our package includes full course materials.

Although the course is non-residential, we offer help finding appropriate hotels, close to the training venue. To take advantage of this offer, drop us an email after you book your course.
Additional info
Please note: the cost of the exam is not part of the course cost. The exam can be booked with us at an additional charge and taken at an exam venue in the UK at a later date.