The following topics covered during this Bootcamp, including both theoretical and practical aspects of each technology.

Course Content

• ASA Firewall
• ASA 5500 Series and 5500-X device options
• Interfaces and VLANs
• Routed and Transparent mode with Bridge Groups
• Multiple and Single Context
• Interface and Global Access-List Filtering
• Network Address Translation
• MPF and Advanced Inspection
• Failover
• Routing Protocols: OSPF, EIGRP and RIP
• High Availability Features
• Other Advanced Features
  
  
• IOS Firewall
• Access-Lists
• Zone-Based Firewall
• IOS NAT Features
• Firewall Tuning
• Advanced Filtering Techniques
• L2 Transparent Firewall
• Identity Firewall Services
• IPS
  
  
• VPN (IKE v1/v2)
• IPsec LAN-to-LAN ASA and IOS
• IPsec ezVPN Server
• SSL VPN (Anyconnect VPN)
• DMVPN
• GET VPN
• WebVPN (Clientless SSL VPN)
• IOS PKI for Authentication
• L2TPv2 and PPTP
• VPN QoS
• Advanced VPN Features
  
  
• Intrusion Prevention System (IPS)
• Initializing IPS 4200
• Inline and Promiscuous Monitoring
• Virtual Sensors, Subinterfaces, VLAN Groups
• Signature Tuning
• Custom Signatures
• Blocking/Rate Limiting/TCP Resets
• Tuning Signature Engines
• Event Monitoring and Processing
• Configuring SPAN/RSPAN/RITE
• IDM and IPS Manager Express
• Other Advanced Features
  
  
• Identity Management on IOS and ASA
• AAA List Configuration
• RADIUS, TACACS+ Protocols and Attributes
• LDAP server VPN Authorization and Authentication
• Configuring CS ACS Server
• Configuring Cisco ISE
• X.509 Certificate-Based Authentication for VPNs
• IOS Authentication Proxy
• 802.1x (ISE)
• VSAs (ASA / Cisco IOS / ISE)
• IOS/ASA Command Authorization
• ASA Cut-Through Authentication Proxy (ISE/ASA/Cisco IOS)
• ISE configurations
  • Profiling Configuration
  • Guest Services
  • Posture Assessment
  • Client Provisioning
  • AD integration
  
  
  
• Advanced Security
• Routing Protocol Security
• Control Plane Protection Features
• Flexible Packet Matching
• Storm Control and STP Security Features
• VLAN Access-Lists
• Router Hardening
• Router Management: Telnet, SSH, SNMP, HTTP
• QoS for Attack Mitigation: Classification, Marking, Queueing and Policing
• DHCP Security Features
• Traffic Capturing
• Other Advanced Features
  
  
• Network Attacks
• Layer 2 Attacks: MAC Flooding, Spoofing, VLAN Hopping
• Layer 3 Attacks: Fragmentation, IP Spoofing, ARP Spoofing, IP Options, Smurf
• Layer 4 Attacks: SYN Flooding, TCP Hijacking, Port Redirection, MitM
• Application Level Attacks: MitM, DNS poisoning, Vulnerability Exploitation
• Network Reconnaissance
• DoS and DDoS Attacks: Using RTBH for Mitigation
• Other mitigation techniques