Description

Implementing Cisco IOS Network Security (IINS) v1.0 is a five-day instructor-led course focused on the necessity of a comprehensive security policy and how it affects the posture of the network. Learners will be able to perform basic tasks to secure a small branch type office network using Cisco IOS security features available through web-based GUIs (Cisco Router and Security Device Manager [SDM]) and the command-line interface (CLI) on the Cisco routers and switches.

Implementing Cisco IOS Network Security (IINS) v1.0, in conjunction with its prerequisite, Interconnecting Cisco Networking Devices, Part 1 (ICND1) v1.0, will form the recommended training component for this new associate level certification, CCNA Security. IINS v1.0 provides students with the knowledge and skills necessary to achieve competency in Cisco security solutions.

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

• Develop a comprehensive network security policy to counter threats against information security.
• Configure routers on the network perimeter with Cisco IOS Software security features.
• Configure a Cisco IOS zone-based firewall to perform basic security operations on a network.
• Configure site-to-site VPNs using Cisco IOS features.
• Configure IPS on Cisco network routers.
• Configure LAN devices to control access, resist attacks, shield other network devices and systems, and protect the integrity and confidentiality of network traffic.

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

• Skills and knowledge equivalent to those learned in ICND1 & ICND2.
• Working knowledge of the Windows operating system.

Who Should Attend

• Employee
• Channel Partner/Reseller
• Customer

Course Outline

• Module 1: Introduction to Network Security Principles
  • Network Security Fundamentals
  • Attack Methodologies
  • Operations Security
  • Cisco Self-Defending Networks
• Module 2: Perimeter Security
  • Administrative Access to Cisco Routers
  • Cisco SDM
  • AAA on a Cisco Router Using the Local Database and on Secure ACS
  • Secure Management/Reporting
  • Locking Down the Router
• Module 3: Network Security Using Cisco IOS Firewalls
  • Firewall Technologies
  • Static Packet Filters Using ACLs
  • Cisco IOS Zone-Based Policy Firewall
• Module 4: Site-to-Site VPNs
  • Cryptographic Services
  • Symmetric Encryption
  • Examining Cryptographic Hashes and Digital Signatures
  • Asymmetric Encryption and PKI
  • IPsec Fundamentals
  • Site-to-Site IPsec VPN
  • IPsec on a Site-to-Site VPN Using Cisco SDM
• Module 5: Network Security Using Cisco IOS IPS
  • IPS Technologies
  • Cisco IOS IPS Using Cisco SDM
• Module 6: LAN, SAN, Voice, and Endpoint Security Overview
  • Endpoint Security
  • SAN Security
  • Voice Security
  • Layer 2 Attacks

Lab Outline

• Lab 1-1: Embedding a Secret Message Using Steganography
• Lab 1-2: Scanning a Computer System Using Testing Tools
• Lab 1-3: Scanning a Network Using Testing Tools
• Lab 2-1: Securing Administration Access to Cisco Routers
• Lab 2-2: Configuring AAA on Cisco Routers to Use the Local Database
• Lab 2-3: Configuring AAA on Cisco Routers to Use Cisco Secure ACS
• Lab 2-4: Implementing Secure Management and Reporting
• Lab 2-5: Using Cisco SDM One-Step Lockdown and Security Audit
• Lab 3-1: Creating Static Packet Filters Using ACLs
• Lab 3-2: Configuring a Cisco IOS Zone-Based Policy Firewall
• Lab 4-1: Configuring a Site-to-Site IPsec VPN
• Lab 5-1: Configuring Cisco IOS IPS
• Lab 6-1: Using Cisco Catalyst Switch Security Features