IAUWS - Implementing Advanced Cisco Unified Wireless Security v1.0

Classroom Learning

Also available via

Virtual Classroom e-Learning

On-Site Learning

Who Needs to Attend

Wireless network professionals, including wireless network engineers, mid-level wireless support engineers, wireless test engineers, wireless network designers with 3-5 years experience, in the networking field who will be required to define the security requirements for various deployment models

Prerequisites

CCNA Wireless

CCNA Boot Camp v2.0

Follow-On Courses

Certification Programs and Certificate Tracks

This course is part of the following programs or tracks:

CCNP Wireless

Cisco Course v 1.0 | Prepares you for Cisco Exam 642-736.

In this course designed to help you prepare for the professional-level CCNP Wireless certification, you will learn to secure wireless networks from security threats via appropriate security policies and best practices. You will learn to implement security standards and configure security components. Hands-on labs ensure that you thoroughly understand how to secure a wireless network. This course replaces CWLS - Cisco Wireless LAN Security.

Certification:

Prepares you for Cisco Exam 642-736 to earn your Cisco CCNP Wireless certification

What You'll Learn

Organizational and regulatory Security Policies
How to segment enterprise and quest WLAN traffic
Configure administration and security on a WLAN controller
Configure administration and security on a WLAN controller using TACACS+
Secure client devices using EAP authentication
Configure Cisco Secure Services Client
Design and implement guest services on a WLAN controller.
Configure the WLAN controller for Cisco NAC
Configure Local authentication on the WLAN controller
Configure Management Frame Protection (MFP) on the WLAN controller
Implement Access Control Lists (ACL) on a WLAN controller
WLAN controller-based Intrusion Detection Signatures (IDS)
Configure the WLAN controller to integrate with IPS and IDS appliances

Course Outline

1. Organizational and Regulatory Security Policies

Regulatory Compliance
Segmenting Traffic
Configuring Administrative Security
Managing WLAN Controller and Cisco WCS Alarms
Security Audit Tools

2. Secure Client Devices

Configuring EAP Authentication
Impact of Security on Application and Roaming
Configuring Cisco Secure Services Client
Troubleshooting Wireless Connectivity

3. Design and Implement Guest Access Services

Guest Access Architecture
Configuring the WLAN to Support Guest Access
Configuring Guest Access Accounts
Troubleshooting Guest Access

4. Design and Integrate Wireless Network with NAC

Cisco NAC Appliance Solution
Configuring the Controller for Cisco NAC Out-of-Band Operations

5. Implement Secure Wireless Connectivity Services

Configuring Authentication for the WLAN Infrastructure
Configuring Management Frame Protection
Configuring Certificate Services
Implementing Access Control Lists
Configuring Identity-Based Networking on the Controller Issues
Troubleshooting Secure Wireless Connectivity

6. Internal and Integrated External Security Mitigations

Mitigating Wireless Vulnerabilities
Using Controller-Based IDS
Cisco's End-to-End Security Solutions
Integrating Cisco WCS with Wireless IPS

Labs

Lab 1-1: Segmenting Traffic Identifying

Lab 1-2: Configuring Administrative Security

Lab 2-1: Configuring EAP Authentication on the Clients

Lab 2-2: Configuring Cisco Secure Services Client

Lab 2-3: Troubleshooting Wireless Connectivity

Lab 3-1: Configure the WLAN to Support Guest Access

Lab 3-2: Configure a Controller to use the NAC Guest Server for Authentication

Lab 3-3: Troubleshooting Guest Access Issues

Lab 4-1: Configuring the Controller for Cisco NAC

Lab 5-1: Configuring Local Authentication on the WLAN Controller

Lab 5-2: Configuring H-REAP for WAN Failure

Lab 5-3: Configuring Management Frame Protection

Lab 5-4: Configuring Certificate Services

Lab 5-5: Implementing Access Control Lists

Lab 5-6: Implementing IBN

Lab 5-7: Troubleshooting H-REAP Security

Lab 5-8: Troubleshooting Secure Wireless Connectivity

Lab 6-1: Using Controller-Based IDS

Travel budget cut? Can't be away from the office for a whole week? Check out our new live, virtual classroom schedule for this course.

Classroom Dates and Locations

Date	Location Details
Aug 16 - 20, 2010	Herndon, VA	Register
Aug 30 - Sep 3, 2010	Toronto, ON	Register
Sep 27 - Oct 1, 2010	Baltimore, MD	Register
Oct 4 - 8, 2010	Cleveland, OH	Register
Nov 1 - 5, 2010	Minneapolis, MN	Register
Nov 29 - Dec 3, 2010	Detroit, MI	Register
Dec 6 - 10, 2010	San Antonio, TX	Register
Dec 13 - 17, 2010	Atlanta, GA	Register