IINS – Implementing Cisco IOS Network Security v2.0

Implementing Cisco IOS Network Security (IINS) v2.0 is een klassikale cursus waarbij de noodzaak om een goed beveiligingsbeleid (security policy) op te zetten wordt uitgediept en waarin er wordt gekeken naar welke gevolgen dit heeft voor het netwerk. Er wordt gebruik gemaakt van de Cisco IOS security features en technologieen als medevoorbeelden uit de praktijk. De training behandeld de security controls van de Cisco IOS apparaten als mede de functionele introductie van de Cisco ASA adaptive security appliance. Door een instructeur geleide discussies, lessen en hands-on lab oefeningen, geeft deze training de deelnemers de kennis en vaardigheden de nodig zijn voor het uitvoeren van basis de taken rondom het beveiligen van een klein kantoor netwerk gebruikmakend van Cisco IOS security features die beschikbaar zijn via de web-based GUIs (Cisco Configuration Professional) en de CLI op Cisco routers, switches en ASA appliances.

{tab Voorkennis}

Deelnemers voor deze cursus hebben de volgende voorkennis nodig:

• ICND1 – Interconnecting Cisco Network Devices Part 1

Networking Security Fundamentals

• Introducing Networking Security Concepts
• Understanding Security Policies Using a Life-Cycle Approach
• Building a Security Strategy for Borderless Networks

Protecting the Network Infrastructure

• Introducing Cisco Network Foundation Protection
• Protecting the Network Infrastructure Using Cisco Configuration Professional
• Securing the Management Plane on Cisco IOS Devices
• Configuring AAA on Cisco IOS Devices Using Cisco Secure ACS
• Securing the Data Plane on Cisco Catalyst Switches
• Securing the Data Plane in IPv6 Environments

Threat Control and Containment

• Planning a Threat Control Strategy
• Implementing Access Control Lists for Threat Mitigation
• Understanding Firewall Fundamentals
• Implementing Cisco IOS Zone-Based Policy Firewalls
• Configuring Basic Firewall Policies on Cisco ASA Appliances
• Understanding IPS Fundamentals
• Implementing Cisco IOS IPS

Secure Connectivity

• Understanding the Fundamentals of VPN Technologies
• Introducing Public Key Infrastructure
• Examining IPsec Fundamentals
• Implementing Site-to-Site VPNs on Cisco IOS Routers
• Implementing SSL VPNs Using Cisco ASA Appliances

Labs

• Lab 2-1: Hardening Network Elements Using Cisco Configuration Professional
• Lab 2-2: Securing Administrative Access to Cisco Routers
• Lab 2-3: Configuring AAA on Cisco Routers and Switches to Use Cisco Secure ACS
• Lab 2-4: Configuring Data Plane Security on Layer 2 Switches
• Lab 3-1: Using ACLs to Implement a Threat Containment Strategy
• Lab 3-2: Implementing Cisco IOS Zone-Based Firewall
• Lab 3-3: Implementing Basic Network Connectivity Using Cisco ASDM on the Cisco ASA Appliance
• Lab 3-4: Configuring Cisco IOS IPS
• Lab 4-1: Configuring Site-to-Site IPsec VPNs
• Lab 4-2: Configuring SSL VPNs on Cisco ASA Appliances Using Cisco ASDM

After you complete this course you will be able to:

• Describe the components of a comprehensive network security policy that can be used to counter threats against IT systems, within the context of a security policy life cycle
• Develop and implement security countermeasures that are aimed at protecting network elements as part of the network infrastructure
• Deploy and maintain threat control and containment technologies for perimeter security in small and midsize networks
• Describe secure connectivity strategies and technologies using VPNs, as well as configure site-to-site and remote-access VPNs using Cisco IOS features

This is an ideal course for those individuals looking for an entry level understanding of security on the network.

Recommended preparation for exam(s):

• 640-554 – IINS Implementing Cisco IOS Network Security