Implementing Cisco Secure Mobility Solutions

Course Introduction

This five day instructor-led training course is a part of the route to CCNP Security certification.

Overview
Course Content

This course prepares network security engineers with the knowledge and skills required to secure data being transferred over a public or shared infrastructure such as the Internet by implementing and maintaining Cisco VPN solutions. The candidates gain hands-on experience by configuring and troubleshooting remote access and site-to- site VPN solutions, using Cisco ASA adaptive security appliances and Cisco IOS routers.

Course Content

The Role of VPNs in Network Security

VPN Definition
Key Threats to WANs and Remote Access
Cisco Modular Network Design and VPNs
VPN Types
VPN Components
Secure Communication and Cryptographic Services
Cryptographic Algorithms
Cryptography and Confidentiality
Cryptography and Integrity
Cryptography and Authentication
Cryptography and Nonrepudiation
Keys in Cryptography
Public Key Infrastructure
Next-Generation Encryption
Dependencies in Cryptographic Services
Cryptographic Controls Guidelines

Deploying Secure Site-to- Site Connectivity Solutions

Site-to- Site VPN Topologies
Site-to- Site VPN Technologies
IPsec VPN Overview
Internet Key Exchange v1 and v2
Encapsulating Security Payload
IPsec Virtual Tunnel Interface
Dynamic Multipoint VPN
Cisco IOS FlexVPN
Overview of Point-to- Point IPsec VPNs on the Cisco ASA
Configuration Tasks for Basic Point-to- Point Tunnels on the Cisco ASA
Enable IKE on an Interface
Configure IKE Policy
Configure PSKs
Choose Transform Set and VPN Peer
Choose Traffic for VPN
Configuring Site-to- Site VPN with Connection Profiles Menu
Verify and Troubleshoot Basic Point-to- Point Tunnels on the Cisco ASA
Lab
Overview of Cisco IOS VTIs
Configure Static VTI Point-to- Point Tunnels
Verify Static VTI Point-to- Point Tunnels
Configure Dynamic VTI Point-to- Point Tunnels
Verify Dynamic VTI Point-to- Point Tunnels
Lab
Overview of Cisco IOS DMVPN
DMVPN Solution Components
GRE
NHRP
DMVPN Operations
Types of Authentication
Configure DMVPN on Hub
Configure DMVPN on Spoke
Configure Routing in DMVPN
Verify DMVPN

Module 3: Deploying Cisco IOS Site-to- Site FlexVPN Solutions

FlexVPN Overview
Public Key Infrastructure (PKI)
Site-to- Site VPN Topologies
FlexVPN Architecture
FlexVPN Configuration Overview
FlexVPN Capabilities
IKEv2 vs. IKEv1 Overview
IKEv2 Message Exchange
IKEv2 DoS Prevention
IKEv1 and IKEv2 Comparison
FlexVPN Use Cases
Point-to- Point FlexVPN
lexVPN Configuration Blocks
IKEv2 Profile
Smart Defaults
Manipulating Default Values
Negotiating IKEv2 Proposals
Point-to- Point VPN Scenario with IPv4 Static Routes
Configure and Verify Point-to- Point VPN with IPv4 Static Routes
Point-to- Point VPN Scenario with OSPFv3
Configure and Verify Point-to- Point VPN with OSPFv3
Enroll Devices to ECDSA PKI
Configure Router for ECDSA
Configure ASA for ECDSA
Verify EC Key Pairs and Certificates
Verify IKEv2 SA
Verify IPsec SA
Verify Point-to- Point FlexVPN (just flowchart and important show/debug command output)
Lab 3-1: Implement Site-to- Site Secure Connectivity Using Cisco IOS FlexVPNCisco IOS FlexVPN
IKEv2 Configuration Payload
Locally Managed Hub-and- Spoke Scenario
Configure a Spoke in a Hub-and- Spoke Scenario
Configure a Hub in a Hub-and- Spoke Scenario
Configuration Exchange
Verify and Troubleshoot Hub-and- Spoke FlexVPN
Lab 3-2: Implement Hub-to- Spoke Secure Connectivity Using Cisco IOS Flex VPN
Spoke-to- Spoke Shortcut Scenario
NHRP in FlexVPN
Configure and Verify a Spoke in a Spoke-to- Spoke Shortcut Scenario
Configure and Verify a Hub in a Spoke-to- Spoke Shortcut Scenario
RADIUS-Managed FlexVPN Scenario
Verify Spoke-to- Spoke Shortcut Switching
Troubleshoot Spoke-to- Spoke Shortcut Switching (just flowchart and important show/debug command output)
Lab 3-3: Implement Spoke-to- Spoke Secure Connectivity Using Cisco IOS Flex VPN

Module 4: Deploying SSL VPNs

SSL VPN Components
SSL/TLS
Overview of group policies and connection profiles
Basic Cisco Clientless SSL VPN
Solution Components
Configure ASA gateway
Configure basic authentication
Configure access control (including URL entry and bookmarks)
Verify basic clientless SSL VPN
Troubleshoot basic clientless SSL VPN
LAB
Configure and verify plugins
Configure and verify smart tunnels
Troubleshoot plugins and smart tunnel
LAB
Advanced Authentication in Cisco Clientless SSL VPN Solution Components
Configure and verify Certificate based Authentication
Configure and Verify External Authentication
Troubleshoot Advanced Authentication in Clientless SSL VPN
LAB

Module 5: Deploying Cisco AnyConnect VPNs

IP Address assignment
Split Tunneling
Basic Cisco AnyConnect SSL VPN
Solution Components
SSL VPN Server Authentication
SSL VPN Clients Authentication
SSL VPN Clients IP Address Assignment
SSL VPN Split Tunneling
Configure ASA for Basic AnyConnect SSL VPN
Configure Basic Cisco Authentication
Configure Access Control
Verify and Troubleshoot Basic Cisco AnyConnect SSL VPN
LAB
DTLS Overview
Parallel DTLS and TLS Tunnels
Configure DTLS
Verify DTLS
Cisco AnyConnect Client Configuration Management
Cisco AnyConnect Client Operating System Integration Options
Cisco AnyConnect Start Before Logon
Cisco AnyConnect Trusted Network Detection
Configure, Verify, and Troubleshoot Cisco AnyConnect Start Before
Logon and Cisco AnyConnect Trusted Network Detection
LAB
Configure a Cisco AnyConnect IPsec/IKEv2 VPNs on a Cisco ASA Adaptive Security Appliance
Verify and Troubleshoot Cisco AnyConnect IPsec/IKEv2 VPNs on Cisco ASA
LAB
External Authentication
Certificate-Based Server Authentication
Configure and Verify Certificate-Based Client Authentication
SCEP Proxy Overview
SCEP Proxy Connection Flow
SCEP Proxy Configuration Procedure
Configure SCEP Proxy
Verify SCEP Proxy
Local Authorization Overview
Local Authorization Scenario
Local Authorization Configuration Procedure
Configure Local Authorization
External Authentication and Authorization Scenario
Configure External Authentication and Authorization
Troubleshoot Advanced Authentication and Authorization in Cisco AnyConnect VPNs
Accounting
LAB

Module 6: Endpoint Security and Dynamic Access Policies

Cisco HostScan Overview
Cisco HostScan Prelogin Assessment
Install Cisco HostScan
Configure Prelogin Criteria and Prelogin Policy
Configure Host Scan Endpoint Assessment
Configure Host Scan Advanced Endpoint Assessment
DAP Overview
Integrating DAP with Host Scan
Configuring DAP
Verifying and Troubleshooting DAP
LAB

Prerequisites

Cisco Certified Network Associate (CCNA®) certification
Cisco Certified Network Associate (CCNA®) Security certification
Knowledge of Microsoft Windows operating system

Target Audience

Network Security Engineers

Delegates Will Learn How To

Define the various VPN technologies, deployments, cryptographic algorithms and protocols that provide VPN security.
Implement and maintain Cisco site-to- site VPN solutions.
Implement and maintain Cisco FlexVPN in point-to- point, hub-and- spoke, and spoke-to- spoke IPsec VPNs.
Implement and maintain Cisco clientless SSL VPNs.
Implement and maintain Cisco AnyConnect SSL and IPsec VPNs.
Implement and maintain endpoint security and dynamic access policies (DAP)

Training Solutions at Your Convenience

Our objective has always been to address and resolve the problems of our learners in an efficient manner and improve their learning prospects. We are accustomed in providing training courses as per our learner’s convenience. We love every opportunity to use our experience to resolve difficulties confronted by learners.

Implementing Cisco Secure Mobility Solutions Training Calender

Filters

Explore Now

Choose Mode of Training

Classroom

Online Instructor-led

Online Self-Paced

Onsite

Implementing Cisco Secure Mobility Solutions

---- OR ----

Reach Us at +44 161 884 3134 or info@bestpracticetraining.com for more information.

Implementing Cisco Secure Mobility Solutions

---- OR ----

Reach Us at +44 161 884 3134 or info@bestpracticetraining.com for more information.

Implementing Cisco Secure Mobility Solutions

---- OR ----

Reach Us at +44 161 884 3134 or info@bestpracticetraining.com for more information.

ONSITE ENQUIRY?

Fill up the form below and we will get back to you!

Video Conferencing

We provide the best web conferencing platform(s) to facilitate our learners to enhance their communication with the instructor.

Digital Whiteboards

Our courses include the real-time demonstration of figures, diagrams and other interactive material through digital whiteboards.

Instant Messaging

During the Virtual Classroom session, learners can raise their queries through instant messaging and follow up on their doubts.

Participation Controls

Through participating effectively in training, individuals can easily discuss their views, mute their surroundings and virtually "raise" their hands.

Features of Our Virtual Classroom Courses

How to Choose and Attend Your Ideal Course?

FIND COURSES

We provide 400+ courses covering broader aspects of personal and professional development training needed by any individual. You can choose any course as per your need or requirement. Our courses are designed to fulfil the current organisational and job marketplace requirements.

Select the Course

Choose the course you want to attend to fulfil your desired goals.

Attend the Course

Attend the training with your prefered method at your convenience.

Get Certification

Upon finishing the course, you will get the completion certificate validating your learning.

Implementing Cisco Secure Mobility Solutions

Benefits of Attending Our Online Courses

We provide a variety of certification programmes or courses for individuals to master a skill set and pursue a full-time career in management, IT, or other domains through the online method to provide them with the convenience of learning. Our dedicated staff works tirelessly to assure the availability of courses with eminence quality that's not found anywhere with benefits like:

Learn a New Skill From Onsite Training

Adaptable Courses

We provide onsite courses modified according to our client's organisational needs.

Cost-Effective Learning

Onsite training helps you to reduce travelling and venue expenses.

Learn in Familiar Surroundings

Training at your convenient place can be ideal for learning new skills.

Team Building Opportunity

Attending onsite training with your team can help to improve your team dynamics tremendously.

Best Practice Training provides specially designed training courses in 410+ locations spanning over 30+ countries globally. All our locations have state of the art facilities for the learners. Some of the Popular Locations are: