CCIE Security (v6.0) Training and Certification

• Describing Information Security Concepts
• Describing Common TCP/IP Attacks
• Describing Common Network Application Attacks
• Describing Common Endpoint Attacks
• Describing Network Security Technologies
• Deploying Cisco ASA Firewall
• Deploying Cisco Firepower Next-Generation Firewall
• Deploying Email Content Security
• Deploying Web Content Security
• Deploying Cisco Umbrella
• Introducing VPN Technologies and Cryptography
• Explaining Cisco Secure Site-to-Site VPN Solutions
• Implementing Cisco IOS VTI-Based Point-to-Point IPsec VPNs
• Implementing Point-to-Point IPsec VPNs on the Cisco ASA and Cisco Firepower NGFW
• Explaining Cisco Secure Remote Access VPN Solutions
• Implementing Remote Access SSL VPNs on the Cisco ASA and Cisco Firepower NGFW
• Implementing Cisco Secure Network Access Solutions
• Describing 802.1X Authentication
• Configuring 802.1X Authentication
• Explaining Endpoint Security Technologies
• Implementing Cisco Advanced Malware Protection (AMP) for Endpoints
• Explaining Network Infrastructure Protection
• Deploying Control Plane Security Controls
• Implementing Layer 2 Data Plane Security Controls
• Implementing Layer 3 Data Plane Security Controls
• Implementing Management Plane Security Controls
• Deploying Traffic Telemetry Methods
• Implementing Cisco Stealthwatch Enterprise
• Compare Cloud and Common Cloud Attacks
• Securing the Cloud
• Implementing Cisco Stealthwatch Cloud
• Comparing Software-Defined Networking (SDN*)

Lab outline

• Configure and Implement Network Settings and NAT on Cisco ASA
• Configure and Implement Cisco ASA Access Control Policies
• Configure and Implement Cisco Firepower NGFW NAT
• Configure and Implement Cisco Firepower NGFW Access Control Policy
• Configure and Implement Cisco Firepower NGFW Discovery and IPS Policy
• Configure and Implement Cisco NGFW Malware and File Policy
• Implement Listener, Host Access Table (HAT), and Recipient Access Table (RAT) on Cisco Email Security Appliance (ESA)
• Configure Mail Policies
• Implement Proxy Services, Authentication, and HTTPS Decryption
• Enforce Acceptable Use Control and Malware Protection
• Examine the Umbrella Dashboard
• Examine Cisco Umbrella Investigate
• Explore DNS Ransomware Protection by Cisco Umbrella
• Configure Static VTI Point-to-Point IPsec IKEv2 Tunnel
• Configure Point-to-Point VPN between the Cisco ASA and Cisco Firepower NGFW
• Configure Remote Access VPN on the Cisco Firepower NGFW
• Explore Cisco AMP for Endpoints
• Do Endpoint Analysis Using AMP for Endpoints Console
• Do File Ransomware Protection by Cisco AMP for Endpoints Console
• Do Cisco Stealthwatch Enterprise 9.3
• Do Cognitive Threat Analytics (CTA) in Stealthwatch Enterprise 0
• Do the Cisco Cloudlock Dashboard and User Security
• Do Cisco Cloudlock Application and Data Security
• Do Cisco Stealthwatch Cloud
• Do Stealthwatch Cloud Alert Settings, Watchlists, and Sensors

1. Perimeter Security and Intrusion Prevention
   • Deployment modes on Cisco ASA and Cisco FTD
   • Firewall features on Cisco ASA and Cisco FTD
   • Security features on Cisco IOS/IOS-XE
   • Cisco Firepower Management Center (FMC) features
   • NGIPS deployment modes
   • Next Generation Firewall (NGFW) features
   • Detect, and mitigate common types of attacks
   • Clustering/HA features on Cisco ASA and Cisco FTD
   • Policies and rules for traffic control on Cisco ASA and Cisco FTD
   • Routing protocols security on Cisco IOS, Cisco ASA and Cisco FTD
   • Network connectivity through Cisco ASA and Cisco FTD
   • Correlation and remediation rules on Cisco FMC

1. Secure Connectivity and Segmentation
   • AnyConnect client-based remote access VPN technologies on Cisco ASA,
     Cisco FTD, and Cisco Routers
   • Cisco IOS CA for VPN authentication
   • FlexVPN, DMVPN, and IPsec L2L Tunnels
   • Uplink and downlink MACsec (802.1AE)
   • VPN high availability using
   • Infrastructure segmentation methods

1. Infrastructure Security
   • Device hardening techniques
   • Control plane protection methods
   • Management plane protection techniques
   • Data plane protection techniques
   • Layer 2 security techniques
   • Wireless security technologies
   • Monitoring protocols
   • Security features such as security policies, procedures, and standards
   • Cisco SAFE model to validate network security design and to find security threats
     to different Places in the Network
   • Using basic Python scripts interaction with network devices through APIs
   • Cisco DNAC Northbound APIs use cases

1. Identity Management, Information Exchange, and Access Control
   • ISE scalability using multiple nodes and personas
   • Network access AAA with Cisco ISE with Cisco switches and Cisco Wireless LAN Controllers
   • Cisco devices for administrative access with ISE
   • AAA for network access with 802.1X and MAB using ISE
   • Lifecycle management using ISE and Cisco Wireless LAN controllers
   • BYOD on-boarding and network access flows
   • ISE integration with external identity sources
   • Provisioning of AnyConnect with ISE and ASA
   • Posture assessment with ISE
   • Endpoint profiling using ISE and Cisco network infrastructure
   • Integration of MDM with ISE
   • Certificate-based authentication using ISE
   • Authentication methods
   • Identity mapping on ASA, ISE, WSA, and FTD
   • pxGrid integration between security devices WSA, ISE, and Cisco FMC
   • Integration of ISE with multi-factor authentication
   • Access control and single sign-on using Cisco DUO security technology

1. Advanced Threat Protection and Content Security
   • AMP for networks, AMP for endpoints, and AMP for content security
   • Detect, analyze, and mitigate malware incidents
   • Do the packet capture and analysis with Wireshark, tcpdump, SPAN,
     ERSPAN, and RSPAN
   • DNS layer security, intelligent proxy, and user identification using Cisco
     Umbrella
   • User identification, Web filtering, and Application Visibility
   • WCCP redirection on Cisco devices
   • Email security features
   • HTTPS decryption and inspection
   • SMA for centralized content security management
   • Cisco advanced threat solutions and their integration