Implementing Cisco IOS Network Security (IINS)

Overview

This Cisco training course focuses on the necessity of a comprehensive security policy and how it affects the structure of the network. Students will learn to perform basic tasks to secure a small branch type office network using Cisco IOS security features available through web-based GUIs (Cisco Router and Security Device Manager [SDM]) and the command-line interface (CLI) on the Cisco routers and switches.

Skills Learned

• Develop a comprehensive network security policy to protect from threats against information security
• Construct security features on IOS switches to mitigate various Layer 2 attacks
• Construct site-to-site VPNs using Cisco IOS features
• Configure IPS on Cisco network routers
• Construct a Cisco IOS zone-based firewall to perform basic security operations on a network
• Construct routers with Cisco IOS Software security features

Who Should Attend This Course?

This course is a necessity for any student that desires to learn more about securing networks using the latest in Cisco technologies. This course is also recommended for any student interested in professional level Cisco certifications or beyond.

Prerequisites

CCNA Certification or similar skills (ICND1 and ICND2 courses)

Course Outline

Module 1: Introduction to Network Security Principles

• Examining Network Security Fundamentals
• Examining Network Attack Methodologies
• Examining Operations Security
• Understanding and Developing a Comprehensive Network Security Policy
• Building Cisco Self-Defending Networks
  

Module 2: Perimeter Security

• Securing Administrative Access to Cisco Routers
• Introducing Cisco SDM
• Configuring AAA on a Cisco Router Using the Local Database
• Configuring AAA on a Cisco Router To Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Locking Down the Router
  

Module 3: Network Security Using Cisco IOS Firewalls

• Introducing Firewall Technologies
• Create Static Packet Filters Using ACLs
• Configuring Cisco IOS Zone-Based Policy Firewall

Module 4: Site-to-Site VPNs

• Examining Cryptographic Services
• Examining Symmetric Encryption
• Examining Cryptographic Hashes and Digital Signatures
• Examining Asymmetric Encryption and PKI
• Examining IPSec Fundamentals
• Building a Site-to-Site IPSec VPN
• Configuring IPSec on a Site-to-Site IPSec VPN Using Cisco SDM
  

Module 5: Network Security Using Cisco IOS IPS

• Introducing IPS Technologies
• Configuring Cisco IOS IPS Using Cisco SDM
  

Module 6: LAN, SAN, Voice, and Endpoint Security Overview

• Examining Endpoint Security
• Examining SAN Security
• Examining Voice Security
• Mitigating Layer 2 Attacks