Implementing Cisco Threat Control Solutions (SITCS) 1.0

Course description

Implementing Cisco Threat Control Solutions (SITCS) v1.0 is a newly created five-day instructor-led training course, which is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’s Next Generation Firewall (NGFW) as well as Web Security, Email Security and Cloud Web Security. The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed security on Cisco ASA firewalls utilizing Cisco Next Generation product solution which integrates Cisco Prime Security Manager for managing identity policies. The student will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing traffic traversing the firewall. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s Next Generation Firewall security appliance feature and provide operational support for Intrusion Prevention Systems, Email Security, and Web based security appliances.

Course Objectives

• Upon completing this course, the learner will be able to meet these overall objectives:

• Understand Cisco ASA Next-Generation Firewall (NGFW)
• Deploy Cisco Web Security appliance to mitigate malware
• Configure Web Security appliance for acceptable use controls
• Configure Cisco Cloud Web Security Connectors
• Describe Cisco Email Security Solution
• Configure Cisco Email Appliance Incoming and Outgoing Policies
• Describe IPS Threat Controls
• Configure and Implement Cisco IPS Sensor into a Network.

Course outlines :

 Cisco Web Security Appliance

• Describing The Cisco Web Security Appliance (WSA) Solutions
• Integrating the Cisco Web Security Appliance
• Configuring Cisco Web Security Appliance Identities and User Authentication Controls
• Configuring Cisco Web Security Appliance Acceptable Use Control
• Configuring Cisco Web Security Appliance Anti-Malware Controls
• Configuring Cisco Web Security Appliance Decryption
• Configuring Cisco Web Security Appliance Data Security Controls

Cisco Cloud Web Security

• Describing the Cisco Cloud Web Security Solutions
• Configuring Cisco Cloud Web Security Connectors
• Describing the Web Filtering Policy in Cisco ScanCenter

Cisco Email Security Appliance

• Describe the Cisco Email Security Solutions
• Describing the Cisco Email Security Appliance Basic Setup Components
• Configuring Cisco Email Security Appliance Basic Incoming and Outgoing Mail Policies

Advanced Malware Protection for Endpoints

• AMP for Endpoints Overview and Architecture
• Customizing Detection and AMP Policy
• IOCs and IOC Scanning
• Deploying AMP Connectors
• AMP Analysis Tools

Cisco FirePOWER Next-Generation IPS

• Describing the Cisco FireSIGHT System
• Configuring and Managing Cisco FirePOWER Devices
• Implementing an Access Control Policy
• Understanding Discovery Technology
• Configuring File-Type and Network Malware Detection
• Managing SSL Traffic with Cisco FireSIGHT
• Describing IPS Policy and Configuration Concepts
• Describing the Network Analysis Policy
• Creating Reports
• Describing Correlation Rules and Policies
• Understanding Basic Rule Syntax and Usage

Cisco ASA FirePOWER Services Module

• Installing Cisco ASA 5500-X Series FirePOWER Services (SFR) Module