Securing Networks with Cisco Routers & Switches

SNRS is a five-day instructor led, lab intensive course. It is aimed at providing network specialists with the knowledge and skills needed to secure Cisco IOS router and Switch networks. Successful graduates will be able to secure the network environment using existing Cisco IOS security features, configure the three primary components of the Cisco IOS Firewall Feature set (context-based access control (CBAC), intrusion detection, and authentication proxy), implement secure tunnels using IPSec technology, and implement basic access switch security.

Doelgroep:

• Cisco customers who implement and secure Cisco IOS router networks
• Cisco Channel Partners who sell, implement and secure Cisco IOS router networksCisco Systems engineers who support the sales of Cisco IOS product solutions

Resultaat:

• Install, configure, operate and troubleshoot Cisco Secure Access Control Server (ACS) for Windows.
• Install, configure, operate and troubleshoot Cisco IOS Firewall, Cisco IOS Authentication Proxy and Cisco IOS Intrusion Protection System on a Cisco Router.
• Install, configure, operate and troubleshoot Layer 2 security features.Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and pre-shared keys.
• Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and certificate authorities.
• Plan, configure ,operate and troubleshoot IPSec VPNs using Cisco Easy VPN.
• Use the wizards and tools embedded in the Security Device Manager to complete a wide range of configuration tasks.
• Install, configure, operate and troubleshoot Cisco Secure Access Control Server (ACS) for Windows.
• Install, configure, operate and troubleshoot Cisco IOS Firewall, Cisco IOS Authentication Proxy and Cisco IOS Intrusion Protection System on a Cisco Router.
• Install, configure, operate and troubleshoot Layer 2 security features.Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and pre-shared keys.
• Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and certificate authorities.
• Plan, configure ,operate and troubleshoot IPSec VPNs using Cisco Easy VPN.
• Use the wizards and tools embedded in the Security Device Manager to complete a wide range of configuration tasks.

Inhoud

Cisco Secure Access Control Server for Windows Server.

• Cisco Secure Access Control Server for Windows Server
• Configuring RADIUS and TACACS+ with Cisco Secure ACS for Windows Server.

Configuring Cisco IOS Security Features

• Cisco IOS Firewall Context-Based Access Control
• Configuring Cisco IOS Firewall Context-Based Access Control
• Cisco IOS Firewall Authentication Proxy
• Cisco IOS Intrusion Prevention System (IPS)

Configuring Layer 2 Security

• Mitigating Layer 2 Attacks
• Cisco Identity-Based Networking Services
• Configuring 802.1X port-Based Authentication
• Layer 2 Security Best Practices

Building Cisco IOS-based VPNs Using Pre-Shared Keys

• Preparing a Network for IPSec Configuration with Pre-shared Keys
• Configuring Internet Exchange Key (IKE) with Pre-shared keys
• Configuring IP Security Protocol (IPSec) Using Pre-shared KeysTesting and Verifying IPSec Pre-shared Key Configuration

Building Cisco IOS-Based VPNs Using Certficate Authorities.

• Preparing a Network for IPSec Configuration Using Certificate Authorities.
• Configuring Certificate Authiority (CA) on Cisco Routers.
• Configuring IKE and IPSec on Cisco Routers.
• Testing and Verifying a IPSec CA Configuration.

Cisco IOS Remote Access Using Cisco Easy VPN

• Introduction to Cisco Easy VPN
• Configuring the Easy VPN Server
• Configuring Easy VPN Remote for the Cisco VPN Client 4.x
• Configure Cisco Easy VPN Remote for Access Routers

Cisco Security Device Manager

• Securing Cisco Routers Using Security Device Manage

Cisco Secure Access Control Server for Windows Server.

• Cisco Secure Access Control Server for Windows Server
• Configuring RADIUS and TACACS+ with Cisco Secure ACS for Windows Server.

Configuring Cisco IOS Security Features

• Cisco IOS Firewall Context-Based Access Control
• Configuring Cisco IOS Firewall Context-Based Access Control
• Cisco IOS Firewall Authentication Proxy
• Cisco IOS Intrusion Prevention System (IPS)

Configuring Layer 2 Security

• Mitigating Layer 2 Attacks
• Cisco Identity-Based Networking Services
• Configuring 802.1X port-Based Authentication
• Layer 2 Security Best Practices

Building Cisco IOS-based VPNs Using Pre-Shared Keys

• Preparing a Network for IPSec Configuration with Pre-shared Keys
• Configuring Internet Exchange Key (IKE) with Pre-shared keys
• Configuring IP Security Protocol (IPSec) Using Pre-shared KeysTesting and Verifying IPSec Pre-shared Key Configuration

Building Cisco IOS-Based VPNs Using Certficate Authorities.

• Preparing a Network for IPSec Configuration Using Certificate Authorities.
• Configuring Certificate Authiority (CA) on Cisco Routers.
• Configuring IKE and IPSec on Cisco Routers.
• Testing and Verifying a IPSec CA Configuration.

Cisco IOS Remote Access Using Cisco Easy VPN

• Introduction to Cisco Easy VPN
• Configuring the Easy VPN Server
• Configuring Easy VPN Remote for the Cisco VPN Client 4.x
• Configure Cisco Easy VPN Remote for Access Routers

Cisco Security Device Manager

• Securing Cisco Routers Using Security Device Manage

Vooropleiding

Delegates are required to meet the following prerequisites:
• CCNA or Equivalent Knowledge
• Basic knowledge of the Windows operating systemBasic knowledge of Cisco IOS networking and security terms and concepts.

Recommended as preparation for exam(s):

• 642-502 SNRS

This course is part of the following certifications

• Cisco Certified Security Professional

Vervolg

The following courses are recommended for further study:

• SNPA ñ Securing Networks with PIX & ASA
• SND ñ Securing Cisco Network Devices
• IPS ñ Implementing Cisco Intrusion Prevention Systems.
• CSVPN ñ Cisco Secure Virtual Private Networks.