Global Knowledge-Cisco - (Page 11) ISCW – Implementing Secure Converged Wide Area Networks Course 5619 Cisco Course v1.0 | Prepares you for Cisco Exam 642-825 ISCW. Course Description Learn to secure the network environment using existing Cisco IOS security features and configure the three primary components of the Cisco IOS Firewall Feature set (Firewall, Intrusion Prevention System [IPS], and Authentication, Authorization, and Accounting [AAA]). In this task-oriented course, you’ll get the knowledge and skills needed to secure Cisco IOS router networks. Expand the reach of your enterprise network to teleworkers and remote sites, and explore implementing a highly available network with connectivity options such as VPN and wireless. Following classroom instruction, you will receive 5 e-Lab credits for post-class lab practice, allowing you to hone your skills using the same hands-on lab equipment you used in the classroom. Hands-On Labs Lab 1: Remote Lab Environment • Logging In • The System Interfaces • Understanding the Topology • PC Systems and Network Devices Lab 2: Configuring DSL (Simulation) • Using the Simulator • Command Reference • Completing the Simulation Lab 3: Securing Administrative Access • Exclusive – Passwords and Password Features • Exclusive – Password Cracking • Exclusive – Enable AAA • Enhanced Login Features • Role-Based CLI • Verify the IOS-FW Configuration Lab 4: AAA • Exclusive – Explore the Access Control Server Configuration • TACACS+ AAA Authentication • TACACS+ AAA Exec Authorization • Exclusive – TACACS+ AAA Command Authorization • Exclusive – TACACS+ AAA Exec and Command Accounting • Exclusive – Scenario: AAA Server Failure • Exclusive – Verify the Router Configuration Lab 5: IOS Device Security • SSH Server • Security Device Manager • SDM Security Audit • Configure NTP and Syslog • Exclusive – VTY and HTTP Server Access-Class • Exclusive – Verify the Router Configuration Lab 6: Exclusive – Perimeter Router ACLs • Configure Syslog for the Perimeter Router • Filter Unexpected Traffic • Test Perimeter Policy • Exploit Packet Filter Weaknesses • Update an Existing ACL • Verify Router Configuration Lab 7: Stateful Firewall • Use SDM to Configure IOS Stateful Firewall • Verify Expected Connectivity • Exclusive – Demonstrate Attack Mitigation • Exclusive – Verify the Router Configuration Lab 8: IOS IPS • SDM IPS Rule Wizard • Test IOS IPS • Signature Definitions • IOS IPS Attack Mitigation • Exclusive – Signature Filters • Exclusive – Verify the Router Configuration Lab 9: Site-to-Site VPN • Verify No Tunnel/No Connectivity • Exclusive – Prepare Other Devices for the Tunnel • Exclusive – Use the SDM to Prepare the IOS-FW • Use the SDM Site-to-Site VPN Wizard • Configure the Site1-Rtr from the CLI • Test the Tunnel • Exclusive – Verify the Router Configuration Lab 10: GRE over IPsec with a Backup Tunnel • Use the Site-to-Site VPN Wizard • Generate, Edit, and Apply Mirror Configuration • Configure Priority for the Original Tunnel • Monitor the Tunnels with SDM • Exclusive – Verify the Router Configuration Lab 11: Remote Access VPN • Verify No Tunnel/No Connectivity • Use the Easy VPN Server Wizard • Install the VPN Client • Test the Remote Access VPN • Monitor the VPN Connection • Exclusive – Verify the Router Configuration Lab 12: Frame Mode MPLS • Prepare for the Lab • Configure MPLS on the P and PE Routers • Verify MPLS and LDP Operation • Exclusive – Verify the Router Configuration • Exclusive – Optional Written Exercise Lab 13: Troubleshooting (Optional) • The Trouble Tickets • Little Hints, Big Hints, and the Fixes What You’ll Learn in Class • Cisco hierarchical network model as it pertains to the WAN • Implement teleworker configuration and access • Implement and verify frame-mode MPLS • Configure a site-to-site IPsec VPN • Configure Cisco Easy VPN • Strategies used to mitigate network attacks • Configure Cisco device hardening • Configure IOS firewall features Who Needs to Attend IT professionals, network administrators, and technicians who need to design, configure, or support a Cisco WAN that utilizes Cisco’s remote access technologies. This course is highly recommended for people pursuing CCNP, CCDP, and CCIE certifications. Prerequisite • CCNA Boot Camp (p. 5) Expand the reach of your network with connectivity options such as VPN and wireless. Classroom Learning 5 days $3,195 32 CLCs Self-Paced e-Learning $1,695 17 CLCs On-Site Learning Call for info. Classroom Learning AB Calgary Mar 2-6 BC Vancouver Dec 1-5 BC Vancouver Mar 30-Apr 3 CA Irvine May 4-8 CA Los Angeles Apr 27-May 1 CA Sacramento Mar 9-13 CA San Jose Jan 12-16 CA San Jose Apr 13-17 DC Dulles, VA Mar 30-Apr 3 DC Washington Jan 5-9 DC Washington Apr 6-10 FL Orlando GA Atlanta IL Chicago IL Chicago MA Boston NC Raleigh NC Raleigh NJ Morristown NY New York NY New York NY New York OH Columbus Feb 23-27 Apr 6-10 Feb 23-27 May 11-15 Mar 16-20 Feb 9-13 Jun 1-5 Apr 13-17 Dec 1-5 Mar 2-6 Jun 8-12 Feb 2-6 ON ON ON ON QC QC QC TX TX TX TX VA Ottawa Ottawa Toronto Toronto Montreal Montreal Montreal Dallas Dallas Dallas Houston Dulles Feb 9-13 Jun 15-19 Feb 2-6 May 4-8 Nov 3-7 Mar 9-13 Jun 22-26 Nov 17-21 Feb 16-20 May 18-22 Apr 20-24 Mar 30-Apr 3 REGISTER NOW 1-800-COURSES www.globalknowledge.com/cisco 11 http://www.globalknowledge.com/cisco
For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.