Description

Price: 25.00 USD | Size: 21.3 GB|  Duration : 109+  Hours  |89 Video Lessons | ⭐️⭐️⭐️⭐️⭐️ 4.9

BRAND: Expert TRAINING | ENGLISH | Bonus : CCIE Security PDF Guides | INSTANT DOWNLOAD

 

The NetMet Solutions CCIE Security v6.0 Training Program consists of in-depth technology offering fundamentals to advanced level technology training. The CCIE Security Certification course is designed in accordance with the Cisco Blueprints for the CCIE Security Written and Lab Examination. This CCIE training program prepares an individual for expert-level job roles in security technologies.

MODULE 1 :- FIREWALL

Cisco ASA Firewall Interfaces

• Configuring Physical interfaces

• Configuring Vlan interfaces

• Redundant Interface

• Configuring Interface Security Parameters

o Naming the interface

o Security Level

o Assigning the IP Address

o

Day 4 – 120mins

Cisco ASA IP Connectivity

• Configuring the Static Routing

• Routing with EIGRP

• Routing with OSPF

• Routing with BGP

• Verifying the routing Table

• Configuring the SSH and Telnet

• Configuring HTTP/S

 

Day 5/6 – 240mins

 

Cisco ASA NAT (Address Translation)

• Understanding the NAT

• Methods of NAT

o Inside NAT

o Outside NAT

• Implementation of NAT

o Auto NAT

o Manual NAT

• Types of NAT

o Static

 NAT

 PAT

o Dynamic

 NAT

 PAT

o Twice NAT

o Identity NAT

 

Cisco ASA ACL

• Inside/ Outside ACL.

• Object ACL.

• Life of a Packet on the Cisco

 

Day 7 – 120mins

 

Cisco ASA Modes

• Transparent Mode

• Routed Mode

 

 

Cisco ASA Context

• Admin Context

• System Context

• User Context

• Deployment Guide

 

Day 8/9/10 – 360mins

 

Cisco High Availability

• ASA Failover

• Active/Standby

• Active/Active

• Verifying failover Operations

• Clustering ASA firewall

• Wireshark Capture

MODULE 2 :- VPN

Day 11 – 120 mins

 

• Cryptography Overview

• Hash Algorithm

• Encryption Overview

• Cryptanalysis

• Symmetric Encryption Algorithm

• Asymmetric Encryption Algorithm

• Digital Signatures

• PKI Overview

• PKI Operations

 

Day 12 – 120 mins

Fundamentals of VPN Technologies and IPSec

• What is VPN

• Introduction of Ipsec Terminology

• VPN Types

• Ipsec Features

• Confidentiality, Integrity, Availability and Anti-Replay.

• IPSec Protocols: – IKE, ESP and AH

• IKE Modes

• IKE Phases

• NAT-T

• Security Associations and Components

• How to configure cisco IOS as CA

 

Day 13/14 – 240 mins

Site to Site VPN

• What is Site-to Site VPN

• Wireshark Capture

• GRE

• Gre over IPSec

• Site-to-Site VPN Labs

Day 15/16 – 240mins

Deploying DMVPN

• DMVPN Overview

• DMVPN Terminologies

• NHRP

• MGRE

• DMVPN Working

• DMVPN Advantages and Limitations

• DMVPN Phase 1, 2 and 3

• DMVPN Labs

• DMVPN Redundancy – Dual Hub DMVPN Deployment

 

 

Day 17– 120 mins

 

Remote Access VPN

• Remote Access VPN Introduction

• Remote Access VPN modes

• Client Mode Software

• Client Mode Hardware

• Remote Access with DVTI

• Remote Access Working

• Remote Access Labs

 

Day 18– 120mins

Deploying Clientless SSL VPN

• SSL VPN Overview

• SSL Handshake

• SSL VPN Modes

• Clientless and Thick Client

• SSL VPN Working

• SSL VPN Labs

Day 19 – 120 mins

Deploying Anyconnect VPN

• Anyconnect Overview

• Connection Policies

• Group Policies

• Split Tunnelling

• Client Profile

• Anyconnect Image Upload

 

Day 20 – 120 mins

GET VPN

• GET VPN

• GET VPN Terminologies

• GDOI

• Key Server (KS)

• KEK (Key Encryption Key)

• TEK (Traffic Encryption Key)

• Rekey Process (Unicast and Multicast)

• Group Member (GM)

• GET VPN Lab and Working

 

Day 21/22– 240mins

Flex VPN

• Introduction and Working IOS Flex VPN

• Flex VPN Labs

MODULE 3 :- ISE

Day 23 – 120 mins

Introducing Cisco ISE Architecture and Deployment

• Security challenges

• Cisco ISE solutions Use Cases

• Secure Access Control

• ISE function

• ISE deployment components

• Context visibility

• ISE Personas

• ISE Licensing

• Infrastructure Components

• Identity Source

 

Day 24– 120mins

Fundamentals of AAA

• AAA.

• Radius Overview

• Radius Messages

• AV Pair

• IEEE 802.1x Primer.

• EAP

o Types of EAP

o Tunnel EAP

 EAP-FAST

 PEAP

 EAP-TLS

o Non-Tunnel EAP

 EAP-MD5

 MSCHAP

 EAP GTC

• Host Mode

• Deployment of 802.1x

Day 25 – 120 mins

Bootstrap Network Access Devices

• Radius Commands

• AAA Commands

 

Day 26 – 120mins

Introduction to ISE GUI

 

• AD overview and configuration

• Admin Access

• Administrative Work

• Certificate in ISE

• Personas

• Probes for ISE

• Backup/Restore

• Maintenance

 

Day 27/28/29 – 360mins

Configuring Authentication and Authorization Policy

• Dot1x Authentication and Authorization

• MAB Authentication and Authorization

• AP Authentication and Authorization

• Device Administration

 

Configuring Posturing and Profiling

• Posturing

• Profiling of Devices

Cisco TrustSec and Its Component

• SGT/SGN Tagging

• Classification

MODULE 4 :- NGFW

• Propagation

o Inline

o SXP

• Enforcement ACL

 

Day 30/31 – 240 mins

Miscellaneous Topics

• Configuring the Cisco WLC and AP via GUI and CLI

Cisco VPN Authentication

• Cisco Anyconnect VPN authentication from ISE

 

Troubleshooting ISE

• Radius Live Log

• Diagnostic Validator

• Logs Management

• Radius Messages with Attribute Type

Day 32/33/34/35/36 – 480mins

Cisco NGFW

• What is NGFW and UTM

• Components of NGFW

• Introduction of the SourceFire and Snort Rules

• Cisco Acquisitions

• FTD, NGIPS

• Off Box Management and On Box Management

• FMC and FDM GUI

• Licensing on the FMC

• Registration of FMC with FTD and NGIPS

• Configuration of the Sensor Interface

• Configuring NAT and Routing

MODULE 5 :- WSA

MODULE 6 :- Cisco Stealth Watch and Cisco Umbrella

• Configuring the Policies

o Access Control Policy

o SSL Policy

o Pre-Filter Policy

o Security Intelligence

o DNS Policy

o HTTP Response

o Blocking Gambling and Social Networking Sites

o Intrusion Policy

• Life of a Packet on the Cisco Next Generation Firewall

 

Day 37/38/39 – 360mins

WSA/ESA

• Describe the Cisco WSA

• Install and verify the WSA

• Deploy proxy services for the WSA

• WCCP Services and Transparent Proxy

• Utilize authentication with the WSA

• Configure various policies for the WSA

• Enforce acceptable use using the WSA

• Defend against malware

• Configure data security

• Perform Administration and Troubleshooting of WSA’s

Day 40/41/42/43 – 480 mins

StealthWatch

• Introduction to Netflow

• Why we need Cisco StealthWatch

• Components of StealthWatch

• Advance Features of StealthWatch

• Configuring the Stealthwatch Management Console

• Using the Appliance Setup Tool with the SMC

• Configuring the Stealthwatch Flow Collector

MODULE 7 :- CCIE LAB

• Finalising the Flow Collector Configuration

• Adding a Flow Collector to the SMC

• Exploring Where to Enable NetFlow on a Network

• Configuring NetFlow on Cisco IOS Routers/ASA/Switches

• An Example of a NetFlow Config Generator Tool

• Introduction to the Stealthwatch GUIs

• Organizing Hosts with Host Groups

• Analyzing Flows

• Enabling Cognitive Analytics

• Configuring Encrypted Traffic Analytics

• Creating Custom Policies

• Acknowledging Alarms

• Installing Stealthwatch Apps

• Capturing Packets for Diagnostics

• Logs, Stats, and Diagnostic Packs

 

Day 44/45/46 – 360mins

Umbrella

• Cisco Umbrella – Security Solution

• Implementing Cisco Umbrella

• Roaming Client

• Umbrella Roaming Security

• Reporting

• Active Directory User Sync