Security Manager for Cisco Networks

Course description
Cisco Security Manager provides centralized security management for Cisco devices, including firewalls, IPS, and VPNs. For customers seeking a central point of control for all network security management, Cisco Security Manager is a powerful and easy-to-use solution to centrally provision security policies.

This course is essential training for individuals who plan to deploy CS-Manager 3.1.


Learning objectives
After you complete this course, you will be able to:

• Configure firewall policy rules and distribution
• Set up and maintain groups of VPN connections
• Use integrated monitoring to obtain comprehensive view of security across the network
• Standardize access-list deployment and rule conflict negotiation
• Integrate CSM with Cisco ACS software to provides a central point of AAA services
• Integrate CSM with the Cisco CS-MARS product suite to provide IPS management

Who should attend
This course is designed for Cisco customers and Channel Partners who are currently implementing CS-Manager 3.1 or who are migrating from CiscoWorks VMS 2.3 to CS-Manager 3.1.


Recommended prerequisites

• Familarity with network security technologies, protocols, and policies
• 6 months of experience configuring Cisco routers and security products
• Securing Cisco Network Devices (SND), or
  Securing Networks with Cisco Routers and Switches (SNRS)

Course outline
Module 1: Cisco Security Manager Overview
Lesson 1: Introducing Cisco Security Manager

• Product Overview
• Using Cisco Security Manager
• Installing Cisco Security Manager
• Working with the Cisco Security Manager User Interface

Lesson 2: Managing Devices

• Preparing the Devices for Cisco Security Manager to Manage
• Understanding Device View
• Adding Devices to the Cisco Security Manager Inventory
• Working with Devices with Dynamically Assigned IP Addresses
• Understanding Device Credentials
• Testing Device Connectivity
• Understanding Device Properties
• Understanding Device Grouping

Lesson 3: Managing Policies

• Understanding Policies
• Managing Policies in Device View
• Managing Shared Policies in Policy View
• Advanced Policy Features
• Discovering Policies

Lesson 4: Managing Objects

• Objects Overview
• Understanding the Policy Object Manager Window
• Overriding Global Objects for Individual Devices
• Selecting Objects for Policies

Lesson 5: Using Map View

• Understanding Maps
• Displaying Your Network on the Map
• Managing Firewall Services in Map View
• Managing VPNs in Map View
• Managing Device Policies in Map View

Module 2: Provisioning Cisco Security Devices
Lesson 1: Managing VPNs

• Overview of Site-to-Site VPNs
• Working with VPN Topologies
• Working with Site-to-Site VPN Policies
• Overview of Remote-Access VPNs
• Working with Policies in Remote-Access VPNs

Lesson 2: Managing SSL VPNs

• Overview of SSL VPNs
• Configuring SSL VPN on a Cisco IOS Device
• Configuring SSL VPN on a Cisco ASA Device

Lesson 3: Managing Firewall Services

• Overview of Managing Firewall Services
• Managing Rules Tables
• Understanding Access Rules
• ACL Settings
• Inspection Rules
• AAA Rules
• Web Filter Rules
• Transparent Firewall Rules

Lesson 4: Managing Firewall Devices

• Platform Policies on Firewall Devices

Lesson 5: Managing Cisco IPS Services and Devices

• Overview of Network Sensing
• Configuring Interfaces
• Configuring Signatures
• Configuring Anomaly Detection
• Configuring Event Actions
• Configuring Policies for Cisco IOS IPS Devices
• Managing Cisco IPS Devices

Lesson 6: Managing Routers

• Overview of Policy Management on Cisco IOS Routers
• Working with Platform Policies for Cisco IOS Routers

Lesson 7: Managing Catalyst 6500 Series Switches and Cisco 7600 Series Routers

• Overview of Managing Catalyst 6500 Series Switches and Cisco 7600 Series Routers
• Managing Policies for Catalyst 6500 Series Switches and Cisco 7600 Series Routers

Module 3: Managing FlexConfigs, Deployment, and Administration
Lesson 1: Managing FlexConfigs

• Understanding FlexConfig
• Working with FlexConfig Policy Objects

Lesson 2: Managing Activities and Workflow Deployments

• Understanding Activities
• Working with Activities
• Managing Deployment

Lesson 3: Using Monitoring, Troubleshooting, and Diagnostic Tools

• Using the Tools Menu
• Using Monitoring, Troubleshooting, and Diagnostic Tools

Course labs
Lab 1-1: Device Bootstrap and Connectivity Test
Lab 1-2: Device Import
Lab 1-3: Interface Role Definitions and Uses
Lab 1-4: Policy Object Creation
Lab 2-1: Firewall Policy Management: Policy Sharing
Lab 2-2: Firewall Policy Management: Policy Inheritance
Lab 2-3: NAT and Inspection Rules Configuration
Lab 2-4: VPN Deployment Management
Lab 2-5: Cisco ASA Virtual Firewall Management
Lab 3-1: Device Management with CiscoWorks Auto Update Server