Securing Data Center Networks and VPNs with Cisco Firewall Threat Defence

• System Installers
• System Integrators
• System Administrators
• Network Administrators
• Solutions Designers

• Describe Cisco Secure Firewall Threat Defense
• Describe advanced deployment options on Cisco Secure Firewall Threat Defense
• Describe advanced device settings for Cisco Secure Firewall Threat Defense device
• Configure dynamic routing on Cisco Secure Firewall Threat Defense
• Configure advanced network address translation on Cisco Secure Firewall Threat Defense
• Configure SSL decryption policy on Cisco Secure Firewall Threat Defense
• Deploy Remote Access VPN on Cisco Secure Firewall Threat Defense
• Deploy identity-based policies on Cisco Secure Firewall Threat Defense
• Deploy site-to-site IPsec-based VPN on Cisco Secure Firewall Threat Defense
• Deploy advanced access control settings on Cisco Secure Firewall Threat Defense
• Describe advanced event management on Cisco Secure Firewall Threat Defense
• Describe available integrations with Cisco Secure Firewall Threat Defense
• Troubleshoot traffic flow using advanced options on Cisco Secure Firewall Threat Defense
• Describe benefits of automating configuration and operations of Cisco Secure Firewall Threat Defense
• Describe configuration migration to Cisco Secure Firewall Threat Defense

This training will help you:

• Attain advanced knowledge of Cisco Secure Firewall Threat Defense technology
• Gain competency and skills required to implement and manage a Cisco Secure Firewall Threat Defense system regardless of platform
• Learn detailed information on policy management, traffic flow through the system, and the system architecture
• Deploy and manage many of the advanced features available in the Cisco Secure Firewall Threat Defense system
• Gain knowledge for protocols, solutions, and designs to acquire professional-level and expert-level data center roles
• Earn 40 CE credits toward recertification

Course Outlines:

1. Introducing Cisco Secure Firewall Threat Defense
2. Describing Advanced Deployment Options on Cisco Secure Firewall Threat Defense
3. Configuring Advanced Device Settings on Cisco Secure Firewall Threat Defense
4. Configuring Dynamic Routing on Cisco Secure Firewall Threat Defense
5. Configuring Advanced NAT on Cisco Secure Firewall Threat Defense
6. Configuring SSL Policy on Cisco Secure Firewall Threat Defense
7. Deploying Remote Access VPN on Cisco Secure Firewall Threat Defense
8. Deploying Identity-Based Policies on Cisco Secure Firewall Threat Defense
9. Deploying Site-to-Site VPN on Cisco Secure Firewall Threat Defense
10. Configuring Snort Rules and Network Analysis Policies
11. Describing Advanced Event Management Cisco Secure Firewall Threat Defense
12. Describing Integrations on Cisco Secure Firewall Threat Defense
13. Troubleshooting Advanced Traffic Flow on Cisco Secure Firewall Threat Defense
14. Automating Cisco Secure Firewall Threat Defense
15. Migrating to Cisco Secure Firewall Threat Defense

Labs Outlines:

1. Deploy Advanced Connection Settings
2. Configure Dynamic Routing
3. Configure SSL Policy
4. Configure Remote Access VPN
5. Configure Site-to-Site VPN
6. Customize IPS and NAP Policies
7. Configure Cisco Secure Firewall Threat Defense Integrations
8. Troubleshoot Cisco Secure Firewall Threat Defense
9. Migrate Configuration from Cisco Secure Firewall ASA

Attendees should meet the following prerequisites:

• Knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP)
• Basic knowledge of routing protocols
• Familiarity with the content explained in the Securing Internet Edge with Cisco Secure Firewall Threat Defense training
• These skills can be found in the following Cisco Courses:
  • Implementing and Administering Cisco Solutions v2.0
  • Securing Internet Edge with Cisco Secure Firewall Threat Defense 1.0

• SFWIPF - Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention

Recommended as preparation for the following exam:

• 300-710 - Securing Networks with Cisco Firewall Exam

Exam topics are currently spread over two courses SSNGFW and SSFIPS, these are being replaced with SFWIPF and SFWIPA

• Cisco Certified Specialist – Network Security Firepower