Overview Course Exam Timing Schedule Course Content Trainer Profile Course Fees Review

CCNP Security Training Course

CCNP Security certification is the better known as the Cisco professional level of certification where certified CCNP security engineers will be able and responsible for security on routers, switches and networking devices. The CCNP Security training course is designed to help students to prepare for each of the SECURE, FIREWALL, VPN, and IPS exams and achieve your Cisco Certified Network Professional (CCNP) Security certification.

This training will be conducted by best CCIE certified instructors and uses our proven structured training approach. The training compromises of how advanced network security technologies work in production environment and design scenarios and provide Cisco IOS, ASA, and IPS CLI and SDM/ASDM/IDM GUI examples of how to configure, verify, and troubleshoot those scenarios.

CCNP Security Exam

300 – 208 SISAS (Require)

300 – 206 SENSS (Require)

300 – 209 SIMOS (Require)

300 – 210 SITCS (Require)

CCNP SISAS exam – This exam will validate network engineers ability to deploy Cisco identity service engine (ISE) and secure network access.

CCNP SENSS exam – This exam validates network security engineers ability to deploy Cisco perimeter edge security solutions with utilization of routers, switches, adaptive security appliance (ASA) firewalls. They will be able to implement and manage Cisco ASA firewall security, Cisco routers and Cisco switches with firewall feature set.

CCNP SIMOS exam – This exam validates network security professionals ability to protect data traversing a public or internet by utilization of Cisco VPN solutions and troubleshooting using Cisco ASA and Cisco IOS routers.

CCNP SITCS exam – With this exam, candidates will be able to implement Cisco firepower next-GEN IPS, web security, cloud security, email security and AMP. Candidates will get in-depth concepts by hands-on experience with advance Cisco security solutions for mitigating security threats.

CCNP Security Exam Fees

Each required exams will cost you 300 USD in India. Total 1200 USD is required to pass all exams as CCNP security exam fees in India. Taxes will apply according to country tax rates.

Note:

CCNP security exam fees are not included in UniNets training costs.

CCNP Security Prerequisite

You need to have CCNA Security OR any CCIE certification as prerequisite

CCNP Security Recertification

This certification is valid for 3 years only. You need to pass one of the following exam before expiration date of certification to hold again CCNP security certification:

Any professional level certification (642 – XXX OR 300 – XXX)
Any CCIE written exam
CCDE written exam OR CCDE practical exam
CCAr interview AND CCAr board review

CCNP Security Course outline (Syllabus) :

Implementing Cisco Threat Control Solutions (300-207) SITCS

learn Content Security Concepts
- Describe Cisco ASA 5500-X NGFW Security Services like features and functionality
- Implement web usage control (URL-filtering, reputation based, file filtering) on ASA
- Implemention and verification of AVC and decryption policies on Cisco ASA 5500-X NGFW
- Describe and learn traffic redirection and capture methods Cisco ASA 5500-X NGFW
- Define Cloud Web Security its features and functionality
- Implement Cloud Web Security IOS and ASA connectors
- Implementation and verification of AnyConnect web security module
- Describe web usage control Works
- Implemention of AVC and anti-malware on Cisco Cloud Web Security
Describe Cisco WSA features and functionality
- Implementation of data security on Cisco WSA
- Implement WSA Identity and Authentication, including Transparent User Identification
- Describe web usage control, AVC , anti-malware decryption policies traffic redirection and capture methods on WSA
Describe Cisco ESA features and functionality
- Implementation of email encryption , anti-spam policies, virus outbreak filter on Cisco ESA
- Implementation of DLP policies, anti-malware Implement inbound and outbound mail policies and authentication on ESA
- Describe traffic redirection and various capture methods on Cisco ESA
Learn and implement Threat Defense
- What is Network IPS
- Configuration and Implementation of traffic redirection and capture methods
- Implement various network IPS deployment modes
- learn and Describe signatures engines
- Implementation and verification of event actions & overrides/filters
- Implementation of anomaly detection
- Describe various risk ratings
- Describ and learn about IOS IPS
- Configure device hardening per best practices on IPS
- Learn about Content Security appliances
Device GUIs and Secured CLI
- learn Content Security
- Implementation and verificationof HTTPS and SSH access
- Describe various configuration elements
- Configure and Implement ESA GUI for message tracking
Troubleshooting, Monitoring, and Reporting Tools
- Configure and test IME and IP logging for IPS
- Describe and implement reporting functionality on Content Security
- Configure and Implement the WSA Policy Trace tool
- Implementation of the ESA Message Tracking tool
- Implement the ESA Trace tool
- How web interface is used to verify traffic is being redirected to CWS
- Configure and implement CLI on IOS to verify CWS operations
- Configure and implement CLI on ASA to verify CWS operations
- Configure and implement PRSM Event Viewer to verify ASA NGFW operations
- Describe various the PRSM Dashboards and Reports
Threat Defense Architectures
- Design and Describe IPS solution
- Deploy Inline or Promiscuous
- Deployand implement as IPS appliance, IPS software or hardware module or IOS IPS
- Describe various methods of IPS appliance load-balancing
- Describe why Traffic Symmetry is needed
- Describe the Inline modes comparison – inline interface pair, inline VLAN pair, and inline VLAN group
Content Security Architectures
- Design various Web Security solution
- Compare ASA NGFW vs. WSA vs. CWS and its functions
- Compare Physical WSA vs. Virtual WSA and its functions
- List available CWS connectors
- Design Email Security solution
- Compare Physical ESA vs. Virtual ESA
- Describe Hybrid mode
- Design Application Security solution
- Describe the need for application visibility and control

Implementing Cisco Secure Access Solutions (300-208)

Identity Management and Secure Access using Various methods
- Implement and verify device administration
- Compare and implement AAA options like TACACS+, RADIUS, Native AD and LDAP
- Describe identity management and its features and functionality of authentication and authorization
- Describe and learn about identity store op
Implement wired/wireless 802.1X
- Describe how RADIUS flows
- Define and learn AV pairs
- Describe various EAP types
- Describe and learn supplicant, authenticator, and server
- Define various Supplicant options
- Define concepts of 802.1X phasing (monitor mode, low impact, closed mode)
- What is AAA server
Implement MAB
- Describe the MAB process within an 802.1X framework
- Describe how Flexible authentication configuration works
- leane and define ISE authentication/authorization policies
- configuration and implemenattion of ISE endpoint identity
- Verify MAB Operation methods
Implement various network authorization enforcement
- Configure and verify dACL
- Configure and verify Dynamic VLAN assignment
- Describe how SGA Work
- Implement and verify Named ACL
- Describe how CoA Works
Implement Central Web Authentication (CWA)
- Describe the function of CoA to support web authentication
- Configure authentication policy to facilitate CWA
- Describe various URL redirect policy
- Define how Redirect ACL works
- Customize the web portal
- Verify central web authentication operation
Implement profiling and its Services
- What is Network probes
- Define how IOS Device Sensor works
- Describe Feed service
- Describe Profiling policy rules
- Describe how to Utilize profile assignment in authorization policies
- Verify various profiling operation
Implement and Verify guest services
- learn how to Manage sponsor accounts
- Describe Sponsor portals
- Describe what is Guest portals, Guest Policies,Self registration,Guest activation
- Differentiate various secure access
- Verify guest services operation
Implement and verify posture services
- Describe the function of CoA to support posture services
- What is Agent options
- Define Client provisioning policy and redirect ACL
- Describe Posture policy, Quarantine/remediation
Implement and verify BYOD access
- Describe various elements of a BYOD policy
- Describe Device registration and devices portal
learn and describe Threat Defense
- Describe TrustSec Architecture in detail
- What is SGT Classification – dynamic/static
- Describe SGT Transport – inline tagging and SXP
- DescribeSGT Enforcement – SGACL and SGFW
- What is MACsec
Learn various Threat Defense Architectures
- Design highly secure wireless solution with ISE and its implementation
- What is Identity Management
- Describe 802.1X and its features
- Describe MAB and its features
- Describe Network authorization enforcement
- Define CWA and its features
- What is Profiling and its features
- What is Guest Services, Posture Services and BYOD Access
Design Identity Management Architectures
- Describe how to administrate the Device
- Whats is Identity Management, Profiling, Guest Services
- Describe in details ablout Posturing Services and BYOD Access

Implementing Cisco Secure Mobility Solutions (300-209)

Secure Communications Methods
- Implement and varify Site-to-site VPNs on routers and firewalls
- Implement and varify Describe GETVPN
- Implement and varify IPsec (with IKEv1 and IKEv2 for both IPV4 & IPV6)
- Implement and varify DMVPN (hub-Spoke and spoke-spoke on both IPV4 & IPV6)
- Implement and varify Implement FlexVPN (hub-Spoke on both IPV4 & IPV6) using local AAA
- Implement and varify Implement remote access VPNs
- Implement and varify AnyConnect IKEv2 VPNs on ASA and routers
- Implement and varify AnyConnect SSLVPN on ASA and routers
- Implement and varify clientless SSLVPN on ASA and routers
- Implement and varify FLEX VPN on routers
Troubleshooting, Monitoring, and Reporting Tools (as implemented above)
- Troubleshoot various features of VPN using ASDM & CLI
- Troubleshoot various features of IPsec
- Troubleshoot various features of DMVPN
- Troubleshoot various features of FlexVPN
- Troubleshoot various features of AnyConnect IKEv2 and SSL VPNs on ASA and routers
- Troubleshoot various features of clientless SSLVPN on ASA and routers
Design and describe various remote access VPN solutions
- Identify various functional components of FlexVPN, IPsec, and Clientless SSL
- Describe VPN technology considerations based on functional requirements
- Identify describe VPN technology based on configuration output
- Identify describe AnyConnect client requirements
- Define Clientless SSL browser and client considerations/requirements
- Identify and describe split tunneling requirements
Describe encryption, hashing, and Next Generation Encryption (NGE)
- Compare and describe Symmetric and asymmetric key algorithms
- Identify and describe the cryptographic process in VPNs – Diffie-Hellman, IPsec –ESP, AH, IKEv1, IKEv2,
- Identify and describe the cryptographic process in VPNs hashing algorithms MD5 and SHA, and authentication methods
- Describe and implement PKI components and protection methods
- Describe Elliptic Curve Cryptography (ECC)
- Compare and contrast SSL, DTLS, and TLS

Implementing Cisco Edge Network Security Solutions (300-206)-SENSS

Describe Threat Defense Concepts
- Implementation and verification of firewall (ASA or IOS depending on which supports the implementation)
- Implementation and verification of ACLs
- Implementation and verification of static/dynamic NAT/PAT
- Configuration and Verification of object groups
- Describe various threat detection features
- Implement botnet traffic filtering
- Configuration of application filtering and protocol inspection
- Describe various ASA security contexts
- Implement and verify Layer 2 Security
- Configuration and verification of DHCP snooping
- Describe dynamic ARP inspection Works
- Describe whats is storm control
- Configuration of port security methods
- Describe various common Layer 2 threats and attacks and mitigation
- Describe what is MACSec
- Configure IP source verification and its implementation
- Configure device hardening per best practices on Routers , Switches and Firewalls
Cisco Security Devices GUIs and Secured CLI Management
- Implement and configure SSHv2, HTTPS, and SNMPv3 access on the network devices
- Implementation and verification of RBAC on the ASA/IOS using CLI and ASDM
- Describe how Cisco Prime Infrastructure works
- whats is the Functions and use cases of Cisco Primeon Device Management
Describe Cisco Security Manager (CSM) and its functions
- Implementation of Device Managers
- Implement ASA firewall features using ASDM
Management Services on Cisco Devices
- Configurtion of NetFlow exporter on Cisco Routers, Switches, and ASA
- Implement SNMPv3 on cisco devices
- Create views, groups, users, authentication, and encryption via SNMPv3
- Implementation and verification of logging on Cisco Routers, Switches, and ASA using Cisco best practices
- Implementation and verification of NTP with authentication on Cisco Routers, Switches, and ASA
- Describe CDP, DNS, SCP, SFTP, and DHCP features
- Describe security implications of using CDP on routers and switches
Threat Defense Architectures
- Design a Firewall Solution on Threat Defense
- What is High-availability
- Describe Basic concepts of security zoning
- Describe Transparent & Routed Modes
- Describe Security Contexts
- Describe Layer 2 Security Solutions
- Implement defenses against MAC, ARP, VLAN hopping, STP, and DHCP rogue attacks
- Describe how PVLANs works to segregate network traffic at Layer 2
Security Components and Considerations
- Describe security operations management architectures on Single device manager vs. multi-device manager
- Describe Data Center security components and considerations on Virtualization and Cloud security
- Describe Collaboration security components and considerations on ASA

CCNP Security Training Fees :

+91 8383 961 646Training Fee Queries (9 AM - 6 PM IST)

+91 8527 91 67 51Training Fee Queries (9 AM - 10 PM IST)

Trainers' Profile :

Pankaj

Experience: 6+ Years
Certifications: CCIE (Written) Security, CCNP Security, CCNA Security, CCNA RS, CCNP RS, CCSA, CCSE, Palo Alto Expert, F5 LTM
Associate Company: HCL, TCS, BT

TRAINING PLAN :

Topic Name	Regular	Weekends	Instructor Name
CCNP – SENSS	4 Weeks	4 Weeks	Mr. Pankaj Gaur
CCNP – SITCS	2 Weeks	2 Weeks	Mr. Pankaj Gaur
CCNP – SISAS	2 Weeks	2 Weeks	Mr. Pankaj Gaur
CCNP – SIMOS	4 Weeks	4 Weeks	Mr. Pankaj Gaur

Lab Tour :

Devices Used for CCNP Security Training:

Routers: 3 x 2611xm Series Cisco Routers, 3 x 2811 Series Cisco Routers
Switches: 3 x 3550 Series Cisco Switches, 3 x 3560 Series Cisco Switches
Firewall and IPS: 2 x 5510 Cisco ASA, 1 x 4240 Cisco IPS Sensor and 1 x ACS
CCNP Security : Virtual Appliance in Pair, Each student will be given a CCNP Security lab.
Checkout the lab topology via Uninets Virtual Racks Login

FREE KIT :

Your Free Kit Include after Course enrolment:

Uninets T-Shirt
Uninets Notebook , Pen
Course Related Online Workbooks
Interview preparation and Communication skills training books
Free Virtual Rack Access

Students Review :

This page is having a slideshow that uses Javascript. Your browser either doesn't support Javascript or you have it turned off. To see this page as it is meant to appear please use a Javascript enabled browser.

SauravCheckpoint CCSA Security

I have 8 years of experience in networking but I was looking for enter in security profile. I heard the name of UniNets as one of the best networking training institute, so I enrolled for CCSA checkpoint training here. I have many things to say about UniNets, but in short, you can get 24*7 lab access, working professional trainers, workbook, virtual racks, flexible timings, minimum fees. So, I am highly recommending UniNets for security training.

YatirajCisco CCNP Security

I have join UniNets for CCNP security. I don't know anything before joining this institute but with the help of trainers and supporting staff I am now able to configure, troubleshoot networking devices. Trainers provided me the basic idea about network security which helps to build my security foundation. They provides 24*7 Lab facility, flexible timings, workbooks, online virtual racks, professional trainers, etc, So UniNets is the best networking institute in India.

RohanCheckpoint, ASA, Palo Alto, F5 LTM

I was searching training institute for network security in Delhi NCR, finally I found UniNets for my professional courses training. I have done ASA, Checkpoint, Palo alto, F5 LTM training from this institute. The best part about UniNets is that they have industry best trainers and best lab facilities with virtual racks and 24*7 access facilities. I strongly recommending this institute for networking courses.

Krishna ChandraCheckpoint CCSA, F5 Load Balancer

Krishna Chandra has enrolled at UniNets for Checkpoint CCSA course. After completing his training of this certification course he has enrolled again for F5 Load balancer training. He is now able to fly high in IT professionals world.

Amit Checkpoint CCSA

Amit has enrolled at UniNets for Checkpoint CCSA course training. He is very happy after enrollment at UniNets. He is getting 24*7 lab access, industry best CCSA professional trainers, expert lab instructors, online racks, etc. He is now planning to get training in other firewall certification courses like CCSA, Palo alto, etc.

Lalit PandeyCCIE R&S, F5 LTM, Nexus

"UniNets really made the things easy and I became an expert from a novice. Now I am placed in a top MNC based on Routing and Switching technical expertise which I obtained from wonderful trainers at UniNets. Thank you for everything to team UNINETS"

KawshikPlacement Oriented Program

I am M.Tech graduate and my interest in networking brought me here. Once I joined freshers programmy networking concepts got cleared and received multiple offers. I am currently pursuing CCIE from here.

AnupamCCIE R&S, Nexus, F5 LTM

"I was struggling to get a good job before joining UniNets. I enrolled here for CCIE R&S training. My concepts were solidify after few months. Later on I obtained multiple offers from top companies. I really thanks to UniNets for building my career to the highest level. I also enrolled here for other courses such as Nexus and F5"

Ubaid ShahidCCNA, CCNA Security, CCNA Wireless

Being a fresher I was struggling to get a job, After getting enrolled for UniNets placement oriented program I got confidence and finally got placed in NetData Vault. I would definitely recommend UniNets for people like me. I will come back here for advance courses.

Piyush SinghCCIE R&S, BGP+MPLS, Nexus, F5 LTM

"I have been to many other Institute for clearing my routing and switching concepts but unfortunately they were all so bad until I joined UniNets where I was trained by a CCIE R&S certified trainer himself. He helped me not only clearing my concepts but also helped me in preparing technical round of interviews. Thanks to UniNets for giving me such an expert level training"

prev next

Average Rating: 4.8 out of 5 (6 votes)

5 stars

4 stars

3 stars

2 stars

1 star

Rishi Batia

ccnp security uninets review

uninets review for ccnp security, I want to say it is ok training but study material was too good. I purchased more labs for more practice. Here trainer Deepak sir was fantastic and very supportive, he helped me to resolve all my queries. I am very thankful to him.

1 year ago

Sundaram

Knowledgeable trainers

I am Sundaram from Chennai, India. I took online training on ccna security and ccnp security. Uninets taught me A to Z all topics with every practical. It took around 6 months to finish both training.

1 year ago

Harman Dev

Good institute

I would say one of the best training institute in India , I have taken security training from couple if institute in Bangalore and Delhi but I found Uninets far far better than them at least for CCNP security, I will start my ccie security from next to next month

1 year ago

Zabby

Very impressive ccnp security training

My name is Zabby from Turkey, I came here for completing my ccnp security training. Uninets trainers and staff are very helpful. Trainer Mr. Pankaj provided me exam preparation which helped me to pass my ccnp security exam.

2 years ago

Puneet Singh

I want to give Uninets feedback

Very good institute, security trainers are truly professional, they are experts because of their experience, I am very satisfied with the training at Uninets.

3 years ago

Ritesh Pandey

CCNA to CCIE Security training

I am very fortunate to get enrolled for CCNA and CCNP security training here at uninets. Trainer Pankaj delivered training based only on practicals which made me understood every topic in detail. Though it took some more time to finish the training. I will soon join uninets for ccie security.

3 years ago