Course

Course Summary
Credit Type:
Course
ACE ID:
SKIL-0161
Organization:
Location:
Classroom-based
Length:
Self-paced, 14 hours
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Lower-Division Baccalaureate 2 Network Security, Networking, or Computer Networks
Description

Objective:

The course objective is to help prepare learners for the Implementing Cisco Edge Network Security Solutions (SENSS) certification exam.

Learning Outcomes:

  • Configure a new Cisco router or switch, including basic configuration settings and specific security-related settings designed to harden the attack surface of the device
  • Complete zone-based firewall configuration by creating policy maps, attaching classes to them, and configuring service policies
  • Configure a new Cisco ASA firewall, including the initial configuration commands needed to enable the firewall
  • Create and use access control lists to filter network traffic and enforce network policies
  • Use IPv6 NAT and the advanced traffic inspection features to prevent network attacks
  • Configure IP Source Guard and DHCP snooping to mitigate MAC address hijacking attacks
  • Use port security to restrict MAC Addresses and use it to prevent unauthorized hubs and switches on a network
  • Describe centralized device management solutions and demonstrate how they can be used to gain visibility and manageability across a network
  • Configuring filtered command sets that can be assigned to users based on their role
  • Create and manage multiple virtual firewalls and use multi-context mode to create contexts for virtual firewalls
  • Cluster firewalls and configure them for automatic failover to provide high availability

General Topics:

  • SENSS 1.0: IOS Security Configuration
  • SENSS 1.0: Role-Based Access Control
  • SENSS 1.0: Zone-Based Firewalls
  • SENSS 1.0: ASA Firewall Configuration and Access Control
  • SENSS 1.0: Twice NAT and Network Object NAT
  • SENSS 1.0: ASA Firewall Access Control
  • SENSS 1.0: IPv6 Support and Traffic Inspection
  • SENSS 1.0: Transparent Firewalls and Security Contexts
  • SENSS 1.0: High Availability and Private VLANs
  • SENSS 1.0: DHCP Snooping and IP Source Guard
  • SENSS 1.0: Cisco Port-Based Traffic Control
  • SENSS 1.0: Traffic and Device Monitoring
  • SENSS 1.0: Centralized Logging and Device Management
Instruction & Assessment

Instructional Strategies:

  • Computer Based Training
  • Practical Exercises

Methods of Assessment:

  • Examinations

Minimum Passing Score:

70%
Supplemental Materials