Cisco Certified Network Associate Security (CCNA -Security) 

Total Number of hours: 40 hrs.

Pre-requisite : Valid CCNA or CCIE Certification can act as a pre-requisite.

Program Description: Student will learn about skills including installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in the technologies that Cisco uses in its security structure. CCNA Security Certification meets the needs of IT professionals who are responsible for network security. It confirms an individual's skills for job roles such as Network Security Specialists, Security Administrators, and Network Security Support Engineers. Hands-on Labs Included in this course.

Certification: Exam 640-553 IINS, CCNA Security

COURSE OUTLINE

• Security Threats: Mitigating Network Attacks
  • Goals, Integrity & Availability of Network Security
  • Self-Defending Networks
  • Network Attacks
  • Types of Attacks
  • Access Attacks
  • Worms, Virus & Trojan Horse Attacks
  • Application Layer Attacks
  • Tools
• Securing Cisco Routers
  • Cisco Router SDM - Security Audit Feature
  • One-Step Lockdown Feature in SDM
  • Secure Administrative Access to Cisco Routers
  • Multiple Privilege Levels and Role-Based CLI
  • Securing Cisco IOS Images, Config Files & Implementation
• Implementing AAA
  • Functions and Features of AAA
  • RADIUS
  • TACACS+
  • Setting Up ACS
  • Configuring AAA Throughout the Entire Network
  • AAA Accounting
• Mitigate Threats Using Access Control Lists
  • Types of ACLs
  • Threat Mitigation Using ACLs
• Switch Security: Mitigate Common Layer2 Attacks
  • Switch Attack Categories
  • Private VLANs
  • VLAN Hopping, Trunk Exploitation & STP Misuse
  • Implementing IP and DHCP Spoof Prevention & ARP Inspection
• Cisco IOS Firewall Features using SDM
  • Firewall Technologies
  • Stateful Firewalls
  • Cisco IOS Firewall
  • Set Up a Firewall on Routers
• Implementing the Cisco IOS IPS Feature Set Using the SDM
  • IDS and IPS Systems
  • Network Based, Host Based IPS & Signature Categories
  • Cisco IOS IPS
  • IPS Policies Wizard & SDM IPS Edit Menu Demonstration
• Implementing Site-To-Site VPNs on Cisco Routers Using SDM
  • Cryptography Methods
  • IKE Protocol
  • Building Blocks of IPSec
  • Advantages of IPSec VPNs
  • Message Authentication and Integrity Check
  • Differences Between Symmetric and Asymmetric Encryption
  • PKI
  • 5 Steps of IPSec
  • VPN