This Implementing Cisco IOS Networking Security (IINS) course provides an understanding of common IOS networking security principles, concepts and technologies. Through extensive hands-on exercises on Cisco security products you will deploy basic security techniques utilizing a variety of popular security appliances within a “real-life” network infrastructure. This training course prepare you for the 210-160 IINS exam, the requirement for CCNA Security certification.

Upon completion of the course, students will have the knowledge and skills to:

• Describe the current threat landscape
• Secure the management and control planes of network devices
• Describe threat defense technologies
• Secure the management and control planes of network devices
• Configure AAA on Cisco IOS devices
• Implement secure management for the Cisco ASA and Cisco IOS routers and switches
• Secure the control plane
• Secure the management and control planes of network devices
• Implement layer 2 infrastructure security
• Implement layer 2 protocol security
• Configure management access and NAT on the Cisco ASA
• Configure access control and service policies on the Cisco ASA
• Describe IPsec
• Implement a client-based remote access VPN
• Implement a clientless remote access VPN
• Describe IDS and IPS
• Describe endpoint protection
• Describe content security
• Describe advanced network security architectures

Who should attend

• Channel Partners
• Customers
• Employees

This course is aimed at individuals wishing to gain an understanding of Cisco Security on the network or those looking to obatin the Cisco Certified Network Associate for Security Cerification.

Course Content

Security Concepts

• Threatscape
• Threat Defense Technologies
• Security Policy and Basic Security Architectures
• Cryptographic Technologies

Secure Network Devices

• Implementing AAA
• Management Protocols and Systems
• Securing the Control Plane

Layer 2 Security

• Securing Layer 2 Infrastructure
• Securing Layer 2 Protocols

Firewall

• Firewall Technologies
• Introducing the Cisco ASA v9.2
• Cisco ASA Access Control and Service Policies
• Cisco IOS Zone Based Firewall

VPN

• IPsec Technologies
• Site-to-Site VPN
• Client Based Remote Access VPN
• Clientless Remote Access VPN

Advanced Topics

• Intrusion Detection and Protection
• Endpoint Protection
• Content Security
• Advanced Network Security Architectures

Labs

• Challenge Lab 1: Configure AAA and Secure Remote Administration
• Challenge Lab 2: Configure Secure Network Management Protocols
• Challenge Lab 3: Configure Secure EIGRP Routing
• Challenge Lab 4: Configure Secure Layer 2 Infrastructure
• Challenge Lab 5: Configure DHCP Snooping and STP Protection
• Challenge Lab 6: Configure Interfaces and NAT on the Cisco ASA
• Challenge Lab 7: Configure Network Access Control with the Cisco ASA
• Challenge Lab 8: Configure Site-to-Site VPN on IOS
• Challenge Lab 9: Configure AnyConnect Remote Access VPN on ASA
• Challenge Lab 10: Configure Clientless SSL VPN on the ASA

Attendees should meet the following prerequisites:

• ICND1 - Interconnecting Cisco Network Devices Part 1 is required.

Recommended preparation for exams:

• 210-260 - IINS Implementing Cisco Network Security