Securing Cisco Ios Networks (Ci-secur)

• Need for Network Security
• Network Attack Taxonomy
• Management Protocols and Functions

• Securing Cisco Router Installations
• Securing Cisco Router Administrative Access
• Introduction to AAA for Cisco Perimeter Routers

• Introduction to Cisco Secure ACS
• Installing Cisco Secure ACS for Windows NT or Windows 2000
• TACACS+ Overview and Configuration

• Disabling unused Router Services and Interfaces
• Using Access Lists to Mitigate Security Threats
• Implementing Syslog Loggin

• Global Timeouts and Thresholds
• Port to Application Mapping
• Inspections Rules and ACLs applied to Router Interfaces.

• AAA Server Configuration
• Authentication Proxy Configuration
• Test and Verify the Configuration

• Initializing the Cisco IOS Firewall IDS
• Configuring, Disabling and Excluding Signatures
• Creating and Applying Audit Rules

• Cisco Routers Enable Secure VPNs
• IPSec Protocol Framework
• Configuring IPSec Encryption

• Configure CA Support Tasks
• CA Support Overview

• Cisco Easy VPN
• Configuring the Easy VPN Server for Extended Authentication
• Working with the Cisco VPN 3.5 Client

• Devices and Device Groups
• IKE Policies
• Building Blocks, Tunnels, and Translation Rules

• Identify network security threats.
• Secure remote access using Cisco Secure ACS for Windows 2000 and Cisco IOS AAA software features.
• Protect Internet access by configuring a Cisco perimeter router.
• Configure the Cisco IOS Firewall Feature Set Context-Based Access Control. Configure Cisco IOS Firewall Authentication Proxy
• Configure Cisco IOS Firewall Intrusion Detection System
• Use IPSec features in Cisco IOS software to create a secure site-to-site VPN using pre-shared keys and digital certificates.
• Use Cisco Easy VPN features to create a secure remote access VPN solution.Use Cisco Router Management Centre to manage Cisco Router VPN implementations

Cisco customers who implement and secure Cisco IOS router networks

Cisco Channel Partners who sell, implement and secure Cisco IOS router networks

Cisco Systems engineers who support the sales of Cisco IOS product solutions

Recommended as preparation for exam(s):

• 642-501 SECUR

This course is part of the following certifications

• Cisco Certified Security Professional
• Cisco Firewall Specialist
• Cisco VPN Specialist
• Cisco IDS Specialist
• Cisco Security/Firewall Express Channel Specialization Cisco VPN Security Channel Specialization

The following courses are recommended for further study:

• CSPFA – Cisco Secure Pix Firewall Advanced
• CSIDS – Cisco Secure Intrusion Detection System
• CSVPN – Cisco Secure VPN CSI – Cisco SAFE Implementation