Cisco security devices via an API Layer 2 and Layer 3+ security VPNs
Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture. Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages. Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.
Implement secure remote communications with Virtual Private Network (VPN) solutions including secure communications, architectures, and troubleshooting Implementing Site to Site IPsec VPN on Routers & ASA Implementing FlexVPN with IKEv2 on Cisco Routers
Describe common network security concepts Secure routing and switching infrastructure Deploy basic authentication, authorization and accounting services
Describe the various VPN technologies and deployments as well as the cryptographic algorithms and protocols that provide VPN security Implement and maintain Cisco site-to-site VPN solutions Implement and maintain Cisco FlexVPN in point-to-point, hub-and-spoke, and spoke-to-spoke IPsec VPNs
Understanding and implementing Cisco modular Network Security Architectures such as SecureX and TrustSec Deploy Cisco Infrastructure management and control plane security controls Configuring Cisco layer 2 and layer 3 data plane security controls
Understand Cisco Identity Services Engine (ISE) architecture and access control capabilities Understand 802.1X architecture, implementation and operation Understand commonly implemented Extensible Authentication Protocols (EAP)
Have the knowledge to implement Cisco FirePOWER NGIPS (Next-Generation Intrusion Prevention System) Have the knowledge to implement Cisco AMP (Advanced Malware Protection) Have the knowledge to implement Web Security Appliance (WSA)
ASA to FirePOWER Migration Firepower Threat Defense Administration with FirePOWER Device Manager