Network Security Fundamentals

• Comparing Networking Security Solutions & Deployment Models
  • Cisco SAFE and CVDs
    • Security Control Framework
    • Defence in Depth
    • Cisco Validated Designs
  • Architectures
  • Designing & Deploying Firewall Solutions
    • IOS Zone Based Firewall
    • High Availablity
    • Adaptive Security Appliance
    • Transparent vs Routed Mode
    • VPN Termination
  • Designing & Deploying IPS Solutions
    • Firepower features
    • Firepower Module in an ASA
    • Next Generation IPS
    • Firepower Threat Defence
    • Managing Firepower
    • Firepower High Availability
  • Additional Integrations for Firepower and ASAs
    • REST APIs
    • pxGrid
    • Cisco Threat Response
    • Authentication Integrations
• Describing Components, Capabilities, & Benefits of NetFlow
  • NetFlow Introduction
    • What is Flow?
    • NetFlow
  • Netflow Benefits
    • Aditional NetFlow Benefits
    • NetFlow Secuirty Benefits
    • Network as an Enforcer
  • NetFlow Versions & Flow Standards
    • NetFlow Versions
    • NetFlow v9
    • Flexible NetFlow
    • IPFIX
    • Configuring NetFlow
  • Cisco Stealthwatch
    • Stealthwatch
    • Stealthwatch Components
    • Aditional Stealthwatch Benefits
• Securing the Management Plane
  • Secure Planes
    • Physical Security
    • Network Device Planes
  • Telnet, HTTP, SSH, and HTTPs
    • How Do You Manage a Device?
  • AAA
    • Managing Administrators
    • AAA Process
  • RADIUS & TACACS+
    • RADIUS
    • TACACS+
    • When Do You Use TACACS+?
    • When Do You Use RADIUS?
  • SNMP
    • SNMP Benefits
    • SNMPv1 & SNMPv2c
    • SNMPv3 Configuration
  • Additional Protocol Security
    • Securely Transferring Files
    • Syslog
    • Network Time Protocol
    • DNS
    • Cisco Discovery Protocol
  • Management Plane ACLs
• Securing the Control Plane and Data Plane on Cisco Routers
  • Lab Setup
  • Securing EIGRP
    • Securing the Control Plane
    • Other Routing Protocols
    • Configuration Steps
  • Securing RIP
  • Securing OSPF
  • Securing BGP
  • Access Control Lists
    • Standard ACL
    • Extended ACL
  • Applying ACLs and Other ACL Types
    • ACL Placement
    • Other ACL Usage
    • Time Based ACL
    • Reflexive ACLs
  • Policy Maps, NBAR, URPF & TCP Intercept
    • Policy Maps and Class Maps
    • Network Based Application Recognition
    • Unicast Reverse Path Forwarding
    • TCP Intercept
  • Control Plane Policing
    • CoPP
• Securing the Control Plane and Data Plane on Cisco Switches
  • Securing Spanning Tree Protocol
    • Spanning Tree Overview
    • How Can Malicious Attackers Leverage STP?
    • Mitigating Attacks Against STP
    • Enabling BPDU Guard
    • Additional Mitigations
  • Securing Virtual Trunking Protocol
    • Virtual Trunking Protocol
    • Mistake Waiting to Happen
    • VTP Version 3
  • Port Security
    • CAM Table
    • MAC Spoofing Attack
    • CAM Flooding Attack
    • Port Security
  • DHCP Snooping
    • DHCP Security Risks
    • DHCP Snooping
  • Dynamic ARP Inspection
    • ARP Poisoning
    • Dynamic ARP Inspection
    • Configuring Dynamic ARP Inspection
  • Segmentation and Private VLANs
    • Segmentation
    • Private VLANs
  • Protecting Against Segmentation Attacks & Traffic Filtering at Layer 2
    • Attacks Against Segmentation
    • ACLs
  • Storm Control
    • Configuring Storm Control
• Configuring Wireless LAN Controller Device Hardening Methods
  • Wireless Security Overview
    • Why Wireless Security Is Needed
    • Wired Equivalent Privacy (WEP)
    • Wifi Protected Access (WPA)
    • WPA2
    • Adding Encryption to Wireless LANS
    • Configuring WPA2 Enterprise
    • Securing the Management Plane on a Wireless LAN Controller