Slide 1

Cisco CCNA Security Overview Updated October 2012 Slide 2 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 2 OverviewCourse DesignInstructor Training 123 For More Information 4 Slide 3 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 3 Slide 4 Cisco Public 4 CCNA Security helps students: Understand core security concepts and how to develop and implement security policies to mitigate risks Acquire skills needed configure, monitor, and troubleshoot network security Prepare for CCNA Security certification exam Start or advance a career in network security Differentiate themselves in the market with specialized skills and expertise to achieve success Slide 5 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 5 Upon completion of this course, students will be able to: Describe security threats facing modern network infrastructures Secure network device access Implement AAA on network devices Mitigate threats to networks using ACLs Implement secure network management and reporting Mitigate common Layer 2 attacks Implement the Cisco IOS firewall feature set Implement an adaptive security appliance (ASA) Implement the Cisco IOS Intrusion Prevention System (IPS) feature set Implement site-to-site IP Sec VPNs Administer effective security policies Slide 6 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 6 Aligns with updated CCNA Security certification exam (IINS 640-554) Cisco Adaptive Security Appliances (ASA) content added in a new chapter (Chapter 10), including four ASA labs Cisco Configuration Professional (CP) replaced Security Device Manager (SDM) throughout the course and labs Expanded content scope, including the following: Mitigating SNMP threats IPv6 ACLs and object groups Cisco IPS Global Correlation and Security Intelligence Operation (SIO) Bridge Protocol Data Unit (BPDU) filtering Cisco protected port feature (PVLAN edge) Cisco SecureX Architecture The Secure Copy (SCP) command Slide 7 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 CourseExam NameExam NumberAvailability CCNA Security v1.0IINS640-553Available through 30-Sept-2012 CCNA Security v1.1IINS640-554Available from 28-Feb-2012 End-of-Life Announcement Last Class Start Date Last Class End Date End-of-Support and End-of-Availability 8-MAR-201231-May-201231-Aug-2012 Cisco IINS Certification Exam Availability End-of-Life Milestones for CCNA Security v1.0 Slide 8 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 8 College and university-level students seeking career-oriented, entry- level security specialist skills IT professionals wishing to broaden or add specialized skills to their technology expertise Current CCNA Certification holders who wish to build on their CCNA knowledge base Prerequisites: CCNA-level networking knowledge and skills Slide 9 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 9 Cisco Packet Tracer Student Networking Knowledge and Skills IT Essentials: PC Hardware and Software Networking for Home and Small Businesses Working at a Small-to-Medium Business or ISP Introducing Routing and Switching in the Enterprise Designing and Supporting Computer Networks Network Fundamentals Routing Protocols and Concepts LAN Switching and Wireless Accessing the WAN CCNA Security ROUTE: Implementing IP Routing SWITCH: Implementing IP Switched Networks TSHOOT: Troubleshooting and Maintaining IP Networks Network Professional IT Technician Network Technician Network Associate Network Specialist CCNA Discovery CCNA Exploration CCNP CCNA Security IT Essentials Slide 10 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 10 Courses Align with Globally Recognized Certifications CompTIA A+ CCNA CCENT CCNA CCNA Security CCNP CCNA Discovery CCNA Exploration CCNP CCNA Security IT Essentials Student Networking Knowledge and Skills Slide 11 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 11 Certification Name Years of Experience Job Role Number of Exams CCNA Security1 3 Network Security Specialist, Security Administrator, Network Security Support Engineer 1 CCNP Security3 5Network Security Engineer4 CCIE Security7+Network Security Engineer2 Slide 12 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 12 Verifies an individuals skills in the following roles: Network Security Specialist Security Administrator Network Security Support Engineer Prerequisite for CCNP Security certification Potential employers can feel confident that candidates have the skills needed to install, troubleshoot, and monitor Cisco security technologies. The U.S. National Security Agency (NSA) and the Committee on National Security Systems (CNSS) recognizes that the Cisco CCNA Security courseware meets the CNSS 4011 training standard (learn more).learn more Slide 13 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 13 Slide 14 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 14 Same GUI as CCNA Discovery and CCNA Exploration curricula 10 chapters and chapter exams 10 Cisco Packet Tracer activities 16 hands-on labs One Packet Tracer Practice skills-based assessment One final exam and one skills-based assessment Balance of theory, hands-on practice, and application Available in English only, no translated versions are planned Enabled for both in-person and blended learning environments Slide 15 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 15 Leverages CCNA Discovery/Exploration equipment bundle and topology and is identical to v1.0 equipment list with the addition of a Cisco ASA (Model 5505) NDG NETLAB+ can be enabled for remote lab equipment operation. The required Advanced IP Services feature set (ISR G1) and the Security (SEC) technology package license are available for academies that are part of Networking Academy Maintenance Minimum System Requirements Curriculum requirements: 1 Student PC per student 1 local curriculum server Lab bundle requirements : 3 Cisco routers, 2 with the SEC technology package 3 two-port serial WAN interface cards 3 Cisco switches 1 Cisco Adaptive Security Appliance (ASA) Assorted Ethernet and Serial cables and hubs Detailed equipment information is available in the Instructor Lab Manual and the CCNA Security Equipment List located in the CCNA Security resources folder on Cisco NetSpace and in the Equipment Information area on Academy Connection. Slide 16 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 16 Course Chapters and Goals Chapter 1 Modern Network Security Threats Goal: Explain network threats, mitigation techniques, and the basics of securing a network. Chapter 2 Securing Network Devices Goal: Secure administrative access on Cisco routers. Chapter 3 Authentication, Authorization and Accounting Goal: Secure administrative access with AAA. Chapter 4 Implementing Firewall Technologies Goal: Implement firewall technologies to secure the network perimeter. Chapter 5 Implementing Intrusion Prevention Goal: Configure IPS to mitigate attacks on the network. Chapter 6 Securing the Local Area Network Goal: Describe LAN security considerations and implement endpoint and Layer 2 security features. Chapter 7 Cryptographic Systems Goal: Describe methods for protecting data confidentiality and integrity. Chapter 8 Implementing Virtual Private Networks Goal: Implement secure virtual private networks. Chapter 9 Managing A Secure Network Goal: Create and implement a comprehensive security policy to meet the security needs of an enterprise. Chapter 10 Implementing the Cisco Adaptive Security Appliance (ASA) Goal: Implement firewall technologies using the ASA to secure the network perimeter. Slide 17 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 17 Slide 18 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 18 All instructors should have CCNA-level networking knowledge and skills Instructor training is required for new CCNA Security instructors Fast track option available with evidence of CCNA Security or higher certification or industry experience Instructor training is delivered by Instructor Training Centers (ITCs) 40-hour training: in-person, blended, or remote delivery formats Slide 19 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 19 The CCNA Security v1.1 Instructor Resource Site provides best practices, tips for classroom management and discussions, and teaching analogies http://lms.netacad.net/ index.php http://lms.netacad.net/ index.php Slide 20 Cisco Public 2012 Cisco and/or its affiliates. All rights reserved. 20 Slide 21 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 Latest documents are posted in the CCNA Security resources area, which can be accessed through the Offerings menu on NetSpace, or in the Course Catalog on Academy Connection: CCNA Security Scope and Sequence CCNA Security FAQs CCNA Security Datasheet CCNA Security At-a-Glance CCNA Security Overview Presentation Visit the CCNA Security v1.1 Instructor Resource SiteCCNA Security v1.1 Instructor Resource Site Visit the CCNA Security certification pageCCNA Security certification page Slide 22 Thank you.