Cisco IPS SNRS Mini Boot Camp Class CCSP
 Training Class Description
In this Mini Camp based on Authorized Cisco IPS and SNRS course material, learn
to configure, maintain, and operate the Cisco 4215 IDS Sensor and learn to secure Cisco IOS router and switch networks. IPS and SNRS are recommended training for
Cisco Certified Security Professional (CCSP) certification.
Deploy Cisco's recently updated, network-based Intrusion Prevention System (IPS) Version 5.0, which includes new features such as in-line protection, meta-event
generation, and the application firewall. This Mini Camp introduces you to Cisco IDS detection platforms including 4200 Series Sensors, Catalyst 6000 Series Intrusion
Detection Module 2 (IDSM2), and IDS Network Module (NM-CIDS). Configure the sensor using the Command-Line Interface and the IPS Device Manager.
Secure the network using existing Cisco IOS security features on both routers and switches. Configure Authentication,
Authorization, and Accounting using an IOS router and Cisco Secure Access Control Server. Configure the three
primary components of the Cisco IOS Firewall feature set: Context-Based Access Control [CBAC], Intrusion Prevention
System, and Authentication Proxy. Also, implement secure tunnels (VPNs) using IPSec technology, and implement
basic access switch security. In addition, complete a security audit using functions embedded in Cisco Security Device Manager.
Audience
Cisco customers who need to implement, maintain, and secure Cisco IOS router and switch networks and Cisco's
intrusion prevention system; Networking professionals tasked with ensuring the effective use of Cisco VPN technologies
within their networks; Cisco channel partners who sell, implement, and maintain IOS firewall, IPS, and VPN devices; and Cisco systems engineers who support the sale of secure IOS router and switch networks.
This course is specifically designed for students preparing for the CCSP Certification exam.
Duration
Class begins each day at 8:00 AM and may extend until 8:00 PM.
Note: Students should expect class to run late into the evening on most days. In a typical Mini Camp, it is not
uncommon for some students to remain past 8:00 PM depending upon the number and experience of the students.
Exam Vouchers included with the Mini Camp (No Retakes):
(1) 642-532 - IPS
(1) 642-502 - SNRS
CCSP Certification Training Boot Camp
IPS and SNRS Mini Boot Camp Class Content
Upon Completion of this course you will learn
IPS
- Basic intrusion prevention terminology
- The different intrusion prevention technologies and evasive techniques
- Design a Cisco IPS solution for small, medium, and enterprise customers
- Cisco IPS Sensor platforms and their features
- Install and configure a Cisco IPS Sensor
- Tune Cisco IPS signatures to work optimally in unique network environments
- Create and implement customized intrusion prevention signatures
- Create alarm filters to reduce alarms and possible false positives
- Configure IPS protective reactions such as TCP reset and deny attacker inline
- Configure a Cisco IPS Sensor to perform blocking on IOS routers and PIX firewalls
- Perform maintenance operations such as signature updates and software upgrades
SNRS
- Configure and maintain Network Address Translation (NAT). Explore advanced topics in NAT and learn how NAT affects other security technologies
- Authentication, Authorization, and Accounting using Cisco Secure ACS, including advanced topics such as command authorization lists and network device groups
- Using IOS routers as stateful packet inspection firewalls using CBAC
- Controlling per-user network authorization using Authentication Proxy
- Cisco's new IPS technology based on the technology used in Cisco IPS sensor appliances and moved to the router, so signatures are more numerous, more powerful, and more flexible
- Layer 2 security issues
- 802.1x authentication, allowing you to control access to a Layer 2 network such as an Ethernet switched network
- IPSec-based VPN technology
- Configuring Site-to-Site IPSec using Pre-Shared Keys
- Using Digital Certificates as an IPSec authentication method
- Remote Access VPN using the Cisco VPN Client software and the Easy VPN Server on the IOS router
- Using Security Device Manager (SDM) to configure and monitor the security features of Cisco routers
Dates and Locations
10/8/2007-10/12/2007 Chicago (Schaumburg), IL
10/15/2007-10/19/2007 San Jose, CA
10/29/2007-11/2/2007 Raleigh, NC
11/5/2007-11/9/2007 New York, NY
11/12/2007-11/16/2007 Washington, DC
12/3/2007-12/7/2007 Morristown, NJ
12/10/2007-12/14/2007 Dallas, TX
12/17/2007-12/21/2007 Atlanta, GA
|
