> > > CCNPSEC

CCNP Security Boot Camp (CCNPSEC)

Course Description Schedule Course Outline
 

What’s included:

  • All 4 exam vouchers, plus make-up exam vouchers if needed.
  • Exam Pass Guarantee on all 4 CCNP Security Exams, providing for 1 free retake on each exam (speak with your rep for details on exam pass guarantee)
  • Opportunities to take all 4 exams during class
  • Authorized Cisco Courseware covering all 4 authorized courses
  • 24/7 Access during class to complete hands-on labs for all 4 Official Courses
  • 12 intense days of training
  • Lunches, drinks and snacks daily
  • HOTEL ACCOMMODATIONS: These are NOT included in the list price, but can be provided as a part of the package (ask your rep for more info)

Certifications

The 4 CCNP Security exams are taken during the Boot Camp. This allows you to attain your CCNP Security with only 2 weeks of out-of-the-office inconvenience. That’s right—10 days out of the office, and you come home CCNP Security Certified! We are so certain that you will get certified that we include an Exam Pass Guarantee: As long as you follow the program as prescribed, we will pay for your retake on a failed exam!

Course Content

Fast Lane’s CCNP Security Boot Camp is an intensive 12-day training and certification program for Network Security Engineers intent on CCNP Security certification. This is a comprehensive solution, including:

  • Intensive, Boot Camp-style Instructor-led training: you will participate in 12 long days of expert-led instruction. This involves extensive hands-on activities culled from the Cisco Authorized content, as well as exam objective-focused lecture.
  • Certification Success: through the combination of lecture, hands-on activities and in-class assessments, you will be prepared for all 4 exams. The goal is to get certified on the first attempt, but just in case, we include a second exam voucher for each exam if necessary.

Who should attend

This course is intended for:

  • Network Security Engineers (NSEs) involved in design, implementation and maintenance of Cisco Security solutions.
  • Cisco customers who implement and maintain Cisco security solutions.

Prerequisites

The knowledge and skills that you must have before attending this course are as follows:

  • Cisco Certified Network Associate (CCNA) certification
  • Cisco Certified Network Associate Security (CCNA Security) certification
  • Working knowledge of the Microsoft Windows operating system

Note that CCNA Security status must be attained prior to attending the CCNP Security Boot Camp.

Course Objectives

The objective of this course is for you to successfully prepare and take the 4 certification exams required for CCNP Security Certification. See the following courses for specific requirements for each exam:

  • Deploying Cisco ASA Firewall Features (FIREWALL) 1.0
  • Deploying Cisco ASA VPN Solutions (VPN) 1.0
  • Implementing Cisco Intrusion Prevention System (IPS) v7.0
  • Securing Networks with Cisco Routers and Switches (SECURE) 1.0

Detailed Course Outline

DAY 1 - Monday

FIREWALL 1.0

  • Introducing the Cisco ASA, Implementing Basic Connectivity and Device Management
  • Introducing Cisco ASA Technology and Features
  • Introducing the Cisco ASA Family
  • Getting Started with the Cisco ASA and Cisco ASDM
  • Configuring Interfaces and Static Routing
  • Configuring Management Access
  • Implementing Basic Connectivity and Device Management, Deploying Cisco ASA Access Control Features
  • Configuring Management Features
  • Configuring Basic Access Control
  • Using Cisco ASA Modular Policy Framework
  • Tuning Basic Stateful Inspection Features
  • Tuning Basic Cisco ASA Stateful Inspection Features

DAY 2 - Tuesday

  • Deploying Cisco ASA Access Control Features
  • Configuring Application-Layer Policies
  • Configuring Advanced Access Controls
  • Configuring Resource Limits and Guarantees
  • Configuring User-Based Policies (Cut-Through Proxy)
  • Deploying Cisco ASA Network Integration Features, Deploying Cisco ASA Virtualization and High Availability Features
  • Deploying Network Address Translation
  • Configuring Cisco ASA Transparent Operation
  • Deploying Cisco ASA Virtualization Features
  • Deploying Cisco ASA Redundant Interfaces
  • Deploying Active/Standby High Availability Failover

DAY 3 - Wednesday

  • Deploying Cisco ASA Virtualization and High Availability Features, Integrating Cisco ASA Security Service Modules
  • Deploying a Cisco ASA Active/Standby Failover
  • Deploying Active/Active High Availability Failover
  • Deploying a Cisco ASA Active/Active Failover
  • Introduction to Cisco ASA Security Service Modules
  • Integrating the Cisco ASA AIP-SSM and AIP-SSC Modules
  • Integrating the Cisco ASA CSC-SSM Module

Day 4 - Thursday

VPN 1.0

  • Exam Cram Session: FIREWALL Exam # 642-647
  • Take Actual FIREWALL Exam # 642-647
  • Evaluating the Cisco ASA VPN Subsystem; Deploying Cisco ASA IPsec VPN Solutions
  • Evaluating the Cisco ASA Software Architecture
  • Deploying Cisco ASA VPN Solutions
  • Evaluating the Cisco ASA VPN Subsystem Architecture
  • Applying Common Cisco ASA Remote Access VPN Configuration Concepts
  • Deploying Basic Site-to-Site IPsec VPNs
  • Deploying Certificate Authentication in Site-to-Site IPsec VPNs
  • Deploying Cisco ASA IPsec VPN Solutions
  • Deploying the Cisco IPsec VPN Client
  • Deploying Basic Easy VPN Solutions
  • Deploying Advanced Authentication in Cisco Easy VPN Solutions
  • Deploying Advanced Easy VPN Server with Certificate-based Authentication
  • Deploying the Cisco ASA 5505 Adaptive Security Appliance as an Easy VPN Hardware Client

DAY 5 - Friday

  • Deploying Cisco ASA AnyConnect Remote Access VPN Solutions
  • Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN Solution
  • Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN Using Local Password Authentication
  • Advanced Deployment of the Cisco AnyConnect VPN Client
  • Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
  • Deploying Advanced Authentication in AnyConnect Full Tunnel SSL VPNs
  • Deploying the Cisco AnyConnect Client with Centralized Management
  • Deploying Cisco ASA Clientless Remote Access VPN Solutions
  • Deploying a Basic Clientless VPN Solution
  • Configuring Basic Clientless VPN Access
  • Deploying Advanced Application Access for Clientless SSL VPN
  • Deploying Advanced Authentication and Single Sign-On in a Clientless SSL VPN
  • Customizing the Clientless SSL VPN User Interface and Portal

DAY 6 - Saturday

  • Deploying Advanced Cisco ASA VPN Solutions
  • Deploying VPN Authorization, Access Control, and Accounting
  • Deploying SSL VPN Access Policies and Authorization Parameters
  • Deploying Cisco Secure Desktop in SSL VPNs
  • Deploying Dynamic Access Policies
  • Deploying Cisco Secure Desktop and DAP in SSL VPNs
  • Deploying High Availability and High Performance in SSL and IPsec VPNs
  • Configuring a Load Balancing SSL VPN Cluster

DAY 7 - Sunday

  • Exam Cram Session: VPN Exam # 642-617
  • Take Actual VPN Exam # 642-617

DAY 8 - Monday SECURE 1.0

  • Deploying Cisco IOS Software Network Foundation Protection
  • Deploying Network Foundation Protection Controls
  • Deploying Advanced Switched Data Plane Security Controls
  • Implementing Cisco Identity-Based Network Services
  • Deploying Basic 802.1X Features
  • Deploying Advanced Routed Data Plane Security Controls
  • Deploying Advanced Control Plane Security Controls
  • Deploying Cisco IOS Software Network Foundation Protection; Deploying Cisco IOS Software Threat Control and Containment
  • Deploying Advanced Management Plane Security Controls

DAY 9 - Tuesday

  • Configuring Advanced Infrastructure Security Controls
  • Deploying Cisco IOS Software Network Address Translation
  • Deploying Zone-Based Policy Firewalls
  • Deploying Cisco IOS Software Threat Control and Containment; Deploying Cisco IOS Software Site-to-Site Transmission Security
  • Configuring Advanced Zoned-Based Policy Firewall Features
  • Deploying Cisco IOS IPS
  • Site-to-Site VPN Architectures and Technologies
  • Deploying Cisco IOS Software Site-to-Site Transmission Security; Deploying Secure Remote Access with Cisco IOS Software
  • Configuring a PKI-Enabled Site-to-Site IPsec VPN

DAY 10 - Wednesday

  • Deploying DMVPNs
  • Deploying High Availability in Tunnel-Based IPsec VPNs
  • Deploying GET VPN
  • Remote Access VPN Architectures and Technologies
  • Deploying Secure Remote Access with Cisco IOS Software
  • Configuring a Cisco IOS Software SSL VPN Gateway
  • Deploying Remote Access Solutions Using Cisco Easy VPN

DAY 11 - Thursday

IPS 7.0

  • Exam Cram Session: SECURE Exam # 642-637
  • Take Actual SECURE Exam # 642-637
  • Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices; Installing and Maintaining Cisco IPS Sensors
  • Choosing Cisco IPS Software, Hardware, and Supporting Applications
  • Evaluating Network IPS Traffic Analysis Methods, Evasion Possibilities, and Anti-Evasive Countermeasures
  • Choosing a Network IPS and IDS Deployment Architecture
  • Integrating the Cisco IPS Sensor into a Network
  • Performing the Cisco IPS Sensor Initial Setup
  • Installing and Maintaining Cisco IPS Sensors; Applying Cisco IPS Security Policies
  • Managing Cisco IPS Devices
  • Configuring Basic Traffic Analysis

DAY 12 - Friday

  • Implementing Cisco IPS Signatures and Responses
  • Configuring Cisco IPS Signature Engines and the Signature Database
  • Applying Cisco IPS Security Policies; Adapting Traffic Analysis and Response to the Environment
  • Deploying Anomaly-Based Operation
  • Customizing Traffic Analysis
  • Configuring Custom Cisco IPS Signatures
  • Managing False Positives and False Negatives
  • Adapting Traffic Analysis and Response to the Environment; Managing and Analyzing Events
  • Improving Alarm and Response Quality
  • Installing and Integrating Cisco IPS Manager
  • Express with Cisco IPS Sensors
  • Managing and Investigating Events using Cisco IPS Manager Express

DAY 13 - Saturday

  • Integrating Cisco IPS with Cisco Security Manager and Cisco Security MARS
  • Using the Cisco IntelliShield Database and Services
  • Using Cisco IPS and Security Intelligence Web Resources
  • Deploying Virtualization, High Availability, and High Performance Solutions; Configuring and Maintaining Specific Cisco IPS Hardware
  • Using Cisco IPS Virtual Sensors
  • Configuring Policy Virtualization
  • Deploying Cisco IPS for High Availability and High Performance
  • Configuring and Maintaining the Cisco ASA AIP SSM and AIP SSC Modules
  • Configuring and Maintaining the Cisco ISR IPS AIM and IPS NME Modules
  • Configuring and Maintaining the Cisco IDSM-2 Module

DAY 14 - Sunday

  • Exam Cram Session: IPS Exam # 642-627
  • Take Actual IPS Exam # 642-627
Classroom Training

Duration 15 days

Price
  • United States: US$ 9,375
  • Cisco Learning Credits: 94 CLC
Enroll now