Cisco Certified Security Professional-(CCSP) Course Outline

Cisco Certified Security Professional-(CCSP)

Cisco Certified Security Professional (CCSP®) validates advanced knowledge and skills required to secure Cisco networks. With a CCSP certification, a network professional demonstrates the skills required to secure and manage network infrastructures to protect productivity, mitigate threats, and reduce costs. The CCSP curriculum emphasizes Cisco Router IOS (ISR) and Catalyst Switch security features, Adaptive Security Appliance (ASA), secure VPN connectivity, Intrusion Prevention Systems (IPS), Cisco Security Agent (CSA), Security Enterprise and Device Management, Network Admission Control (NAC) as well as techniques to optimize these technologies in a single, integrated network security solution. In addition, CCSP leverages the new CCNA Security certification as a prerequisite.

Course Outline

Securing Networks with Cisco Routers and Switches (SNRS 642-502)
 

• Cisco Secure ACS for Windows configuration
• Configuring Cisco IOS Security Feature Set including IOS Firewall CBAC(Context-Based Access Control), Authentication Proxy and IPS (Intrusion Prevention System)
• Layer 2 Security, including Cisco IBNS (Identity Based Network Services), and 802.1x Port-Based Authentication
• Building Cisco IOS-based VPNs Using Cisco Routers and Pre-Shared Keys
• Building Cisco IOS-based VPNs Using Cisco Routers and Certificate Authorities - Cisco IOS Remote Access Using Cisco Easy VPN
• Cisco Security Device Manager (SDM).

Securing Networks with PIX and ASA (SNPA 642-522)
 

• Cisco Security Appliance Technology and Features
• Cisco PIX Security Appliance and ASA Adaptive Security Appliance Families
• Getting Started with Cisco Security Appliances
• Translations and Connections
• Access Control Lists and Content Filtering
• Object Grouping
• Authentication, Authorization, and Accounting
• Switching and Routing
• Modular Policy Framework
• Configuring Security Appliance Remote Access Using Cisco Easy VPN
• Configuring ASA for WebVPN
• Configuring Transparent Firewall
• Configuring Security Contexts
• Failover
• Cisco Security Appliance Device Manager
• Configuring PIX Security Appliance Remote Access Using Cisco Easy VPN

Cisco Secure Virtual Private Networks (CSVPN 642-511)
 

• Network Security and the Cisco Virtual Private Network
• Overview of VPN and IPSec Technologies
• Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview
• Configure Cisco VPN 3000 for Remote Access Using Pre-shared Keys
• Configure Cisco VPN 3000 for Remote Access Using Digital Certificates
• Configure Cisco VPN Firewall Feature for IPSec Software Client
• Configure Cisco VPN Client Auto-initiation
• Monitor and Administrator Cisco Virtual Private Network 3000 Remote Access Networks
• Configure Cisco Virtual Private Network 3002 Hardware Client Remote Access
• Configuring Cisco 3002 Hardware Client for user and unit authentication
• Configuring Cisco 3002 Hardware Client for backup server, load balancing and reverse route
• Configuring Cisco 3002 Hardware Client for software auto-update
• Configuring Cisco 3002 Hardware Client for IPSec over TCP and UDP
• Cisco VPN 3000 LAN-to-LAN with Pre-Shared Keys
• Configure Cisco VPN Concentrator for LAN-toLAN Using NAT
• Configure Cisco Virtual Private Network 3000 LAN-to-LAN Using Digital Certificates

Implementing Cisco Intrusion Prevention System (IPS 642-532)
 

• Security Fundamentals
• Intrusion Prevention Overview
• Getting Started with the IDS Command Line Interface
• Using IDM
• Basic Sensor Configuration
• Cisco Intrusion Detection System Alarms and Signatures
• Signature Engines
• Signature Configuration
• Sensor Tuning
• Alarm Monitoring and Management
• Blocking Configuration
• Capturing Network Traffic for Intrusion Detection Systems

Securing Cisco Network Devices (SND 642-552)

• Introduction to Network Security Policies
• Securing the Perimeter
• Securing the LAN Devices
• Configuring a Cisco IOS Firewall
• Securing Networks with Cisco IOS IPS
• Building IPSec VPNs

Share: