Building Enhanced Cisco Security Networks Boot Camp

Course details

Network security has become more important than ever because of the need to deal with the increased number of network threats from worms and easy-to-use distributed denial of service (DDoS) tools. Today, companies can no longer afford to deal with network security in a reactionary mode due to the potential for severe financial and intellectual loss. For that reason, companies are investing in the security of their networks to provide a safe environment for their employees and customers. The Building Enhanced Cisco Security Networks Boot Camp teaches the students how to create a network security policy, an often overlooked but vital part of any network security deployment, as well as deploy several emerging security technologies. In practical labs, students will build a dynamic multipoint VPN (DMVPN), set up High Availability for IPSec (IPSec-HA), identify the Path MTU of a nested IPSec tunnel, configure a site-to-site IPSec VPN for split tunneling, secure network management, configure VMS 2.2 for IDS management, and set up Identity-Based Network Services (IBNS) for a wireless environment. To test the students' understanding of the course materials, the final phase of the class will be a network attack in which various tools will be used to attempt to gain access to their networks.

Target Audience

Individuals who design security networks based on Cisco security products, Bwho implement end-to-end Cisco security services,who deploy networks using Cisco security services.

Objectives

• Given a network topology and network assessment from Cisco AS, develop and document a comprehensive security policy that fulfills all requirements of the network assessment.
• Given the security policy developed at the beginning of the class and a set of threat management criteria, document a threat response procedure that fulfills the requirements of the threat management criteria.
• Given a remote office network, configure a site-to-site IPSec VPN to the corporate core network.