Cisco Unified Communication - Cisco Security

Introduction

Implementing Cisco Unified Communications Security is designed to provide individuals with the necessary knowledge and skills to implement security features in a Cisco Unified Communications environment.

Cisco Unified Communications support several features and mechanisms to secure voice signalling and communications and to mitigate attacks against Cisco Unified Communications networks.

Implementing Cisco Unified Communications Security introduces security mechanisms and describes different implementation scenarios that increase the security level of Cisco Unified Communications networks.

Pre-Requisites

Knowledge and skills that individuals must have before attending this course are as follows:

• Working knowledge of converged voice and data networks
• Working knowledge of Cisco IOS gateways, Cisco Unified SRST gateways, and Cisco Unified Border Element
• Working knowledge of Cisco Unified Communications Manager and Cisco Unified Communications Manager Express
• CCNP® Voice certification is recommended

Who should attend?

Primary audience:

• Network administrators and network engineers

Secondary audience:

• Systems engineers

Course Objectives

Delegates will be able to meet these overall objectives on completion of this course:

• Working knowledge of converged voice and data networks
• Working knowledge of Cisco IOS gateways, Cisco Unified SRST gateways, and Cisco Unified Border Element
• Working knowledge of Cisco Unified Communications Manager and Cisco Unified Communications Manager Express
• CCNP® Voice certification is recommended

Course Outline

Vulnerabilities of Cisco Unified Communications Networks and Security Fundamentals

Identify vulnerabilities in Cisco Unified Communications networks, and describe security implementation strategies, cryptographic services, PKI, and VPN technologies.

• Assessing Vulnerabilities of Cisco Unified Communications Networks
• Describing Security Implementation Strategies
• Describing Cryptographic Services and Functions
• Describing Key Management and PKI
• Describing IPsec and Cisco AnyConnect SSL VPN

Network Infrastructure Security

Implement network infrastructure security features such as network separation and firewalls, IEEE 802.1X in phone VLANs, and the IP Phone VPN Client.

Implementing Network Separation and Packet Filtering

Implementing Switch Security Features

Implementing Cisco AnyConnect SSL VPNs in Cisco Unified Communications Networks

Cisco Unified Communications Manager and Endpoint Security Features

Harden Cisco Unified Communications endpoints and implement toll-fraud prevention features and Cisco Unified Communications Manager cryptographic security features.

• Hardening Cisco Unified Communications Endpoints
• Implementing Toll-Fraud Prevention
• Implementing Native Cisco Unified Communications Manager Security Features
• Implementing Cisco Unified Communications Manager Security Features Based on Security Tokens

Secure Cisco Unified Communications Integration and Features

Implement secure Cisco Unified Communications Manager integration with external devices such as gateways, firewalls, and application proxies.

• Implementing SRTP to Gateways and Signalling Protection by IPsec
• Implementing Secure Signalling and SRTP in SRST and Cisco Unified Communications Manager Express
• Implementing Trusted Relay Points
• Implementing Proxies for Secure Signalling and SRTP