After taking this course, you should be able to:

• Describe information security concepts and strategies within the network
• Describe common TCP/IP, network application, and endpoint attacks
• Describe how various network security technologies work together to guard against attacks
• Implement access control on Cisco ASA appliance and Cisco Firepower Next-Generation Firewall
• Describe and implement basic email content security features and functions provided by Cisco Email Security Appliance
• Describe and implement web content security features and functions provided by Cisco Web Security Appliance
• Describe Cisco Umbrella® security capabilities, deployment models, policy management, and Investigate console
• Introduce VPNs and describe cryptography solutions and algorithms
• Describe Cisco secure site-to-site connectivity solutions and explain how to deploy Cisco Internetwork Operating System (Cisco IOS®) Virtual Tunnel Interface (VTI)-based point-to-point IPsec VPNs, and point-to-point IPsec VPN on the Cisco ASA and Cisco Firepower Next-Generation Firewall (NGFW)
• Describe and deploy Cisco secure remote access connectivity solutions and describe how to configure 802.1X and Extensible Authentication Protocol (EAP) authentication

• Describing Information Security Concepts*
• Describing Common TCP/IP Attacks*
• Describing Common Network Application Attacks*
• Describing Common Endpoint Attacks*
• Describing Network Security Technologies
• Deploying Cisco ASA Firewall
• Deploying Cisco Firepower Next-Generation Firewall
• Deploying Email Content Security
• Deploying Web Content Security
• Deploying Cisco Umbrella*
• Explaining VPN Technologies and Cryptography
• Introducing Cisco Secure Site-to-Site VPN Solutions
• Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs
• Deploying Point-to-Point IPsec VPNs on the Cisco ASA and Cisco Firepower NGFW
• Introducing Cisco Secure Remote Access VPN Solutions
• Deploying Remote Access SSL VPNs on the Cisco ASA and Cisco Firepower NGFW
• Explaining Cisco Secure Network Access Solutions
• Describing 802.1X Authentication
• Configuring 802.1X Authentication
• Describing Endpoint Security Technologies*
• Deploying Cisco Advanced Malware Protection (AMP) for Endpoints*
• Introducing Network Infrastructure Protection*
• Deploying Control Plane Security Controls*
• Deploying Layer 2 Data Plane Security Controls*
• Deploying Layer 3 Data Plane Security Controls*
• Deploying Management Plane Security Controls*
• Deploying Traffic Telemetry Methods*
• Deploying Cisco Stealthwatch Enterprise*
• Describing Cloud and Common Cloud Attacks*
• Securing the Cloud*
• Deploying Cisco Stealthwatch Cloud*
• Describing Software-Defined Networking (SDN*)

*  This section is self-study material that can be done at your own pace if you are taking the instructor-led version of this course.

• Security engineer
• Network engineer
• Network designer
• Network administrator
• Systems engineer
• Consulting systems engineer
• Technical solutions architect
• Network manager
• Cisco integrators and partners

• To fully benefit from this course, you should have the following knowledge and skills:
• Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA®) v1.0 course
• Familiarity with Ethernet and TCP/IP networking
• Working knowledge of the Windows operating system
• Working knowledge of Cisco IOS networking and concepts
• Familiarity with basics of networking security concepts

These Cisco courses are recommended to help you meet these prerequisites:

•  Implementing and Administering Cisco Solutions (CCNA) v1.0