Implementing Cisco IOS Network Security (IINS)

The audience for this course is as follows:

• Network designers
• Network administrators
• Network engineers
• Network managers
• System engineers

This course is part of the following Certifications:

• Cisco Certified Network Associate Security (CCNA Security)

The knowledge and skills that a student must have before attending this course are as follows:

• Skills and knowledge equivalent to those learned in Interconnecting Cisco Network Devices Part 1 (ICND1)
• Working knowledge of the Windows operating system
• Working knowledge of Cisco IOS networking and concepts

Upon completing this course, the student will be able to meet these overall objectives:

• Describe the components of a comprehensive network security policy that can be used to counter threats against IT systems, within the context of a security policy life cycle
• Develop and implement security countermeasures that are aimed at protecting network elements as part of the network infrastructure
• Deploy and maintain threat control and containment technologies for perimeter security in small and midsize networks
• Describe secure connectivity strategies and technologies using VPNs, as well as configure site-to-site and remote-access VPNs using Cisco IOS features

Implementing Cisco IOS Network Security (IINS) v2.0 is a five-day instructor-led course focused on the design, implementation, and monitoring of a comprehensive security policy, using Cisco IOS security features and technologies as examples. The course covers security controls of Cisco IOS devices as well as a functional introduction to the Cisco ASA adaptive security appliance. Using instructor-led discussion, lecture, and hands-on lab exercises, this course allows students to perform basic tasks to secure a small branch office network using Cisco IOS security features that are available through web-based GUIs (Cisco Configuration Professional) and the CLI on Cisco routers, switches, and ASA appliances.
Hands-on Labs include:

• Hardening Network Elements Using Cisco Configuration Professional
• Securing Administrative Access to Cisco Routers
• Configuring AAA on Cisco Routers and Switches to Use Cisco Secure ACS
• Configuring Data Plane Security on Layer 2 Switches
• Using ACLs to Implement a Threat Containment Strategy
• Implementing Cisco IOS Zone-Based Firewalls
• Implementing Basic Network Connectivity Using Cisco ASDM on the Cisco ASA Appliance
• Configuring Cisco IOS IPS
• Configuring Site-to-Site IPsec VPNs
• Configuring SSL VPNs on Cisco ASA Appliances Using Cisco ASDM