Implementing Cisco IOS Network Security(IINS)

This course is given on these dates and locations:

This course focuses on the necessity of a comprehensive security policy and how it affects the posture of the network. Students will be able to perform tasks to secure a small branch type office network using Cisco IOS security features available through web-based GUIs and the CLI on Cisco routers and switches. Suggested prerequisites are ICND1 and ICND2 or CCNA BootCamp. Working knowledge of the Windows operating system is also imperative. This course is for network designers, network administrators, network engineers, network managers, and systems engineers.

The knowledge and skills that you should have before attending this course are as follows:
• ICND1 and ICND2 or CCNA Bootcamp
• Working knowledge of the Windows operating system

This beginner course is for Network Designers, Network Administrators, Network Engineers, Network Managers, and Systems Engineers.

•  Develop a comprehensive network security policy to counter threats against information security
•  Configure routers on the network perimeter with Cisco IOS Software security features
•  Configure a Cisco IOS zone-based firewall to perform basic security operations on a network
•  Configure site-to-site VPNs using Cisco IOS features
•  Configure IPS on Cisco network routers
•  Configure LAN devices to control access, resist attacks, shield other network devices and systems, and protect the integrity and confidentiality of network traffic

Module 1:  Introduction to Network Security Principles

• Lesson 1:  Examining Network Security Fundamentals
• Lesson 2:  Examining Network Attack Methodologies
• Lesson 3:  Examining Operations Security
• Lesson 4:  Understanding and Developing a Comprehensive Network Security Policy
• Lesson 5:  Building Cisco Self-Defending Networks

Module 2:  Perimeter Security

• Lesson 1:  Securing Administrative Access to Cisco Routers
• Lesson 2:  Introducing Cisco SDM
• Lesson 3:  Configuring AAA on a Cisco Router Using the Local Database
• Lesson 4:  Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Lesson 5:  Implementing Secure Management and Reporting
• Lesson 6:  Locking Down the Router 

Module 3:  Network Security Using the Cisco IOS Firewall

• Lesson 1:  Introducing Firewall Technologies
• Lesson 2:  Creating Static Packet Filters Using ACLs
• Lesson 3:  Configuring Cisco IOS Zone-Based Policy Firewall

Module 4:  Site-to-Site VPNs

• Lesson 1:  Examining Cryptographic Services
• Lesson 2:  Examining Symmetric Encryption
• Lesson 3:  Examining Cryptographic Hashes and Digital Signatures
• Lesson 4:  Examining Asymmetric Encryption and PKI
• Lesson 5:  Examining IPsec Fundamentals
• Lesson 6:  Building a Site-to-Site IPsec VPN
• Lesson 7:  Configuring IPsec on a Site-to-Site VPN Using Cisco SDM

Module 5:  Network Security Using Cisco IOS IPS

• Lesson 1:  Introducing IPS Technologies
• Lesson 2:  Configuring Cisco IOS IPS Using Cisco SDM

Module 6:  LAN, SAN, Voice and Endpoint Security Overview

• Lesson 1:  Examining Endpoint Security
• Lesson 2:  Examining SAN Security
• Lesson 3:  Examining Voice Security
• Lesson 4:  Mitigating Layer 2 Attacks

Labs:

• Embedding a Secret Message Using Steganography
• Scanning a Computer System Using Testing Tools
• Scanning a Network Using Testing Tools
• Securing Administration Access to Cisco Routers
• Configuring AAA on Cisco Routers to Use the Local Database
• Configuring AAA on Cisco Routers to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Using Cisco SDM One-Step Lockdown and Security Audit
• Creating Static Packet Filters Using ACLs
• Configuring a Cisco IOS Zone-Based Policy Firewall
• Configuring a Site-to-Site IPsec VPN
• Configuring Cisco IOS IPS
• Using Cisco Catalyst Switch Security Features
•