IINS Implementing Cisco IOS Network Security

Prerequisites:

The knowledge and skills that a learner must have before attending this course are as follows:

* Valid CCNA
* Working knowledge of the Windows operating system.

Course Description:

Implementing Cisco IOS Network Security (IINS) v1.0 is an instructor-led course presented by Cisco training partners to their end-user customers. This five-day course focuses on the necessity of a comprehensive security policy and how it affects the posture of the network. Learners will be able to perform basic tasks to secure a small branch type office network using Cisco IOS security features available through web-based GUIs (Cisco Router and Security Device Manager [SDM]) and the command-line interface (CLI) on the Cisco routers and switches.

Course Objectives

On completing this course, you will be able to:

• Develop a comprehensive network security policy to counter threats against information security
• Configure routers on the network perimeter with Cisco IOS Software security features
• Configure a Cisco IOS zone-based firewall to perform basic security operations on a network
• Configure site-to-site VPNs using Cisco IOS features
• Configure IPS on Cisco network routers
• Configure LAN devices to control access, resist attacks, shield other network devices and systems, and protect the integrity and confidentiality of network traffic

This course includes the following modules:

Introduction to Network Security Principles

• Examining Network Security Fundamentals
• Examining Network Attack Methodologies
• Examining Operations Security
• Understanding and Developing a Comprehensive Network Security Policy
• Building Cisco Self-Defending Networks

Perimeter Security

• Securing Administrative Access to Cisco Routers
• Introducing Cisco SDM
• Configuring AAA on a Cisco Router Using the Local Database
• Configuring AAA on a Cisco Router to Use Cisco Secure ACS
• Implementing Secure Management and Reporting
• Locking down the Router

Network Security Using Cisco IOS Firewalls

• Introducing Firewall Technologies
• Creating Static Packet Filters Using ACLs
• Configuring Cisco IOS Zone-based Policy Firewall

Site-to-Site VPNs

• Examining Cryptographic Services
• Examining Symmetric Encryption
• Examining Cryptographic Hashes and Digital Signatures
• Examining Asymmetric Encryption and PKI
• Examining IPsec Fundamentals
• Building Site-to Site IPsec VPN
• Configuring IPsec on a Site-to Site VPN Using Cisco SDM

Network Security Usind Cisco IOS IPS

• Introducing IPS Technologies
• Configuring Cisco IOS IPS Using Cisco SDM

LAN, SAN, Voice and Endpoint Security Overview

• Examining Endpoint Security
• Examining SAN Security
• Examining Voice Security
• Migrating Layer 2 Attacks

Labs

• Lab 1-1: Embedding a Secret Message Using Steganography
• Lab 1-2: Scanning a Computer System Using Testing Tools
• Lab 1-3: Scanning a Network Using Testing Tools
• Lab 2-1: Securing Administration Access to Cisco Routers
• Lab 2-2: Configuring AAA on Cisco Routers to Use the Local Database
• Lab 2-3: Configuring AAA on Cisco Routers to Use Cisco Secure ACS
• Lab 2-4: Implementing Secure Management and Reporting
• Lab 2-5: Using Cisco SDM One-Step Lockdown and Security Audit
• Lab 3-1: Creating Static Packet Filters Using ACLs
• Lab 3-2: Configuring a Cisco IOS Zone-Based Policy Firewall
• Lab 4-1: Configuring a Site-to-Site IPsec VPN
• Lab 5-1: Configuring Cisco IOS IPS
• Lab 6-1: Using Cisco Catalyst Switch Security Features