Cisco CCNP Security: SITCS

Cisco CCNP Security: SITCS is an online training course, which is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’’s Next Generation Firewall (NGFW) as well as Web Security Appliance (WSA) & Email Security Appliance (ESA) (Previously called IronPort) and Cloud Web Security (Previously called ScanSafe). Read More

The goal of this course is to provide students with foundational knowledge and the capabilities to implement and managed security on Cisco ASA firewalls utilizing Cisco Next Generation product solution which integrates Cisco Prime Security Manager for managing identity policies. Students will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing traffic traversing the firewall. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s Next Generation Firewall security appliance feature and provide operational support for Intrusion Prevention Systems, Email Security, and Web based security appliances.

Exam Number: 300-207 SITCS

desiree-lindfield

Instructor: Ryan Lindfield

Cisco Course Demo

Skills Learned

Upon completing this course, the learner will be able to meet these overall objectives:

  • Understand Cisco ASA Next-Generation Firewall (NGFW)
  • Deploy Cisco Web Security appliance to mitigate malware
  • Configure Web Security Appliance (IronPort) for acceptable use controls
  • Configure Cisco Cloud Web Security (ScanSafe) Connectors
  • Describe Cisco Email Security Appliance (IronPort)
  • Configure Cisco Email Appliance Incoming and Outgoing Policies
  • Describe IPS Threat Controls
  • Configure and Implement Cisco IPS Sensor into a Network.

Who Should Attend This Course

Prerequisites

The knowledge and experience that a learner should have before attending this online training course:

Course Outline

Cisco ASA (CX) NGFW

  • Describing the Cisco (CX) NGFW Services within the Cisco Modular Network Architecture
  • Describing the Cisco ASA (CX) NGFW Management Architecture
  • Configuring Cisco ASA (CX) NGFW Policy Objects
  • Monitoring Cisco ASA (CX) NGFW Operations
  • Configuring Cisco ASA (CX) NGFW Access Policies
  • Configuring Cisco ASA (CX) NGFW Identity Policies
  • Configuring Cisco ASA (CX) NGFW Decryption Policies

Cisco Web Security Appliance

  • Describing the Cisco Web Security Appliance Solutions
  • Integrating the Cisco Web Security Appliance
  • Configuring Cisco Web Security Appliance Identities and User Authentication Controls
  • Configuring Cisco Web Security Appliance Acceptable Use Controls
  • Configuring Cisco Web Security Appliance Anti-Malware Controls
  • Configuring Cisco Web Security Appliance Decryption Configuring Cisco Web Security Appliance Data Security Controls

Cisco Cloud Web Security

  • Describing the Cisco Cloud Web Security Solutions
  • Configuring Cisco Cloud Web Security Connectors
  • Describing the Web Filtering Policy in Cisco ScanCenter

Cisco Email Security Appliance

  • Describing the Cisco Email Security Solutions
  • Describing the Cisco Email Security Appliance Basic Configuration Concepts
  • Configuring Cisco Email Security Appliance Incoming and Outgoing Mail Policies
  • Describing IPS Threat Controls

Cisco Intrusion Prevention System

  • Integrating Cisco IPS Sensor into a Network
  • Configuring Basic Cisco IPS Settings
  • Tuning Cisco IPS Signatures
  • Configuring Custom Cisco IPS Signatures
  • Configuring Cisco IPS Anomaly-Detection
  • Configuring Cisco IPS Reputation-Based Features

Hands-On Labs

Lab 1: Exploring Cisco ASA (CX) NGFW and PRSM
Lab 2: Configuring Cisco ASA (CX) NGFW Access Policy
Lab 3: Configuring Cisco ASA (CX) NGFW Identity Policy
Lab 4: Configuring Cisco ASA (CX) NGFW Decryption Policy Lab
Lab 5: Configuring Cisco Web Security Appliance
Lab 6: Configuring Cisco Cloud Web Security Connector on AnyConnect and ISR G2
Lab 7: Configuring Basic Cisco Email Security Mail Policies
Lab 8: Configuring Cisco Basic Cisco IPS Settings
Lab 9: Tuning Cisco IPS Signatures and Anomaly Detection