Cisco CCNA Security Training Course

In as Little as 13 Hours, You'll Learn How To Identify, Lockdown, & Secure Vulnerabilities in a Small to Medium Enterprise Branch Network...And Have the Knowledge Necessary to Pass the Cisco CCNA Security/IINS 640-553 Exam...Guaranteed!

You cannot be a Cisco Network Administrator without knowing Cisco Security. Today, security knowledge is no longer a luxury, it is a necessity in nearly any IT position.

Any job applicant, from the most experienced network admin to the entry level junior admin will be required to demonstrate a substantial amount of knowledge concerning security elements.

Passing the CCNA Security exam and proving your security knowledge is difficult. That's why I have created this comprehensive course that shows you how to tackle the diverse security issues that you will face on the exam and in the real world.

As with all Train Signal courses, this CCNA Security course presents the same combination of clearly explained theory and an abundance of "real world" lab examples using the new Security Device Manager (SDM) and the Command Line. This exciting course contains over 13 hours of video instruction where I break down network security theory as you work hands on with real Cisco routers & switches... and secure your own network!

• Complete Exam Coverage for "CCNA 640-552"
• Nearly 13 Hours of Cisco CCNA Computer Training Videos on 4 Jam Packed DVDs!
• Scenario based training taught by a CCIE with over 10 years of experience
• PDF of Instructor Notes allow you to follow along with the videos and take more organized notes.
• Multiple File Formats Make It Convenient for You To Learn Anywhere You Go! iPod Video, Mp3 Audio, .WMV & high quality .AVI video
• FREE FULL VERSION of Transcender's CCNA 640-553 Practice Exam! We've partnered with Transcender, the leading exam simulation provider in the world! Purchased separately, you would pay $159. But you get it FREE as the perfect training companion to our Cisco CCNA Security course!
• Taught by a CCIE with "Real World" Cisco Network Experience!

Free with this course Windows Server 2008 R2

 

Watch a Demo Now!

"Am I Qualified To Take This Cisco CCNA Security Course?"

YES! If you are a network administrator, an aspiring network administrator, or have on-the-job security experience, this course will build a stronger foundation of advanced security concepts.

YES! If you have Cisco CCNA Certification or a basic understanding of Cisco Routers and Switches (without certification), this course is for you.

Note: The prerequisite to take the Cisco CCNA Security exam is Cisco CCNA certification.

Note: If you plan to continue on to the CCSP certification, the Cisco CCNA Security certification is the prerequisite.

"Do I need Cisco equipment to complete this training course?"

NO! You do not need any Cisco equipment to watch the videos or to pass the Cisco CCNA Security/IINS 640-553 exam; however, working hands-on with Cisco equipment may enhance your training experience.

"I already have my CCNA. Do I need my Cisco CCNA Security certification?"

YES! The ability to secure a Cisco network is one of the most marketable skills for any Cisco professional and network security has never been more important.

Cisco CCNA Security Course Outline:

Video 1
Hackers – Their Motives and Methods
Learn about Hacker Roles and why they hack. Discover what your Network Security Goals should be, and how to implement Network Security Best Practices to achieve those goals to keep from suffering the consequences of ineffective network security.

• Why Do Hackers Hack?
• General Network Security Goals
• The Consequences of Ineffective Network Security
• Where Network Attacks Originate From
• Social Engineering Attacks
• Trojan Horses and Privilege Escalation Attacks
• Using Ping Sweeps and Port Scans on Your Own Network
• Best Practices

Video 2
Introduction to SDM (Security Device Manager)
Improve productivity, simplify router deployments, and troubleshoot complex connectivity issues using the Security Device Manager. Plus, launch, login, and tour SDM and discover some Real World SDM issues as you learn to manage your router away from the Command Line.

• Cisco's Security Device Manager (SDM)
• Pre-installation Configuration
• Installing SDM
• Launching and Loading SDM
• SDM Settings - User Preferences
• SDM Configure Window
• Additional Tasks Tab
• SDM Monitor Window
• SDM in Internet Explorer Problem

Video 3
Authentication, Authorization, and Accounting (AAA)
Learn how Authentication works in AAA, what happens when you specify different devices used for Authentication, and discover commands used in Authentication, Authorization, and Accounting that will be useful in the real world and on the exam. Plus, configure TACAS+ and RADIUS security protocols.

• What is AAA?
• TACAS+ vs. RADIUS
• TACAS+ and RADIUS Configuration
• Authentication Configuration
• No Authentication Option
• Telnet Login Problem
• Real World Not About AAA Lists
• Using AAA for Privileged EXEC Mode and PPP
• Accounting
• Authorization
• Configuring AAA with SDM

Video 4
Layer 2 Security
Learn how to prevent security threats like CAM Overflow attacks by configuring and implementing Port Security, Sticky Addresses, Lightweight Extensible Authentication Protocol (LEAP), and SPAN. Plus, discover the relationship between DHCP Snooping, Dynamic ARP Inspection, and IP Source Guard and learn to configure and operate Root Guard and BPDU Guard.

• Basic L2 Security Features
• Cisco Password Rules Review
• Preventing CAM Overflow Attacks with Port Security
• Port Security
• Configuring Port Security
• Misconfiguring Port Security
• Aging Time for Secure Addresses
• Sticky Addresses
• Configuring MAC Table Event Notification
• Dot1x Port-Based Authentication
• Cisco Lightweight Extensible Authentication Protocol (LEAP)
• Extensible Authentiaction Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST)
• Local SPAN Configuration
• Remote SPAN Configuration
• Filtering Intra-VLAN Traffic
• VLAN Access List (VACL)
• Private VLAN
• DHCP Snooping
• Dynamic ARP Inspection
• IP Source Guard
• MAC Address Flooding Attacks
• VLAN Hopping
• Root Guard
• BPDU Guard

Video 5
Layer 3 Security
This is one of the most important videos in the course because of the volume of detailed information that you will use on the exam and in the real world. Learn about "Salting" your MD5 to make an encrypted password even stronger and discover how Network Time Protocol (NTP) will be important in your security deployment. Plus, learn to configure and use Superviews, Autosecure, Security Audits, and One-Step Lockdown via SDM to thwart ICMP based attacks, IP Spoofing, and Recon Attacks.

• Configuring Enable Password
• Privileged Level Password vs. Privleged Level Secret
• Encrypting Passwords
• Strong Passwords vs. Weak Passwords
• Creating and Testing Minimum Length Password Policy
• ”Salting” your MD5
• Network Time Protocol (NTP)
• Configuring NTP Master Time Source
• Synchronizing System Clocks
• Configuring Peering with NTP Peers Command
• Other Clock Commands
• Telnet and SSH
• Creating Banners
• Different Types of Network Attacks
• Denial of Services (DoS) Attack and SYN Flooding Attack
• TCP Intercept Defense
• ICMP (Ping) Sweep, Port Scan and Port Sweep
• Ping of Death vs. Invite of Death and Ping Floods
• Smurf Attacks
• Availability Attacks: Don't Forget the Physical Layer!
• IP Spoofing
• IP Source Routing
• Packet Sniffers and Queries
• Other Confidentiality Attacks
• Password Attacks
• Salami Attack
• Other Network Attacks Types - Trust Exploitation
• Superviews - Role-Based CLI Views
• AutoSecure
• One-Step Lockdown
• Security Audit
• NTP and SSH in SDM
• Differences Between SDM and AutoSecure
• SNMP
• Logging
• Viruses and Worms
• Cisco IOS Logging Enhancements
• Buffer Overflow
• Cisco IOS Resilient Conofiguration and Login Enhancements
• exec-timeout Command

Video 6
The Intrusion Prevention System (IPS)
Learn the differences between Intrusion Detection (IDS) and Intrusion Prevention (IPS) and how they operate. Plus, discover the different approaches to identifying malicious traffic and learn to use NIPS, HIPS and Honeypots to stop it. We'll also configure your Intrusion Prevention System using the Security Device Manager (SDM) and we'll use the Command Line to verify this IPS configuration.

• Intrusion Detection (IDS) vs. Intrusion Prevention (IPS)
• Signatures and Signature Types
• NIPS and HIPS
• Honeypots
• Configuring IPS in SDM
• Editing IPS Rules
• Editing Global Settings
• SDEE Message Logs
• Viewing Signatures
• Editing and Deleting Signatures
• Verifying Your IPS Configuration

Video 6
ARP, DNS and DHCP
This section will teach you these fundamental protocols which are necessary for use within any network.

• One Destination, Two Destination Addresses
• DNS and DHCP Process
• The ARP Process
• Routers, Broadcasts, and Proxy ARP
• Configuring DHCP on a Cisco Router With SDM
  

Video 7
Firewalls
Learn to enable a Cisco router to act as a firewall using the Cisco IOS Firewall Set. Plus, discover concepts relatively new to Cisco like Zone-based Firewalls that are meant to phase out CBAC and the “ip inspect” command. We'll also configure and edit a firewall using the Security Device Manager's (SDM) Basic Firewall Wizard and we'll draw distinctions between the Basic Firewall Wizard and SDM's Advanced Firewall Wizard.

• Firewall Basics
• Stateless and Stateful Firewalls
• Application Layer Gateway (ALG)
• The Cisco IOS Firewall Feature Set Components
• Authentication Proxy
• Plan for Firewall Success Then Succeed!
• ACL Review
• Extended ACL Review
• Extended Access Control Lists
• Real-World ACL Success Tips
• Introduction to Turbo ACLs
• CBAC and “ip inspect” command
• Real-World Tips and Best Practices
• TCP and UDP Generic Inspection
• Deep Pocket Inspection (DPI)
• Zone-Based Firewall Configuration
• Class Maps and Policy Maps
• Basic Zone Commands
• Configuring Zone Pairs
• Configuring Firewall with SDM's Basic Firewall Wizard
• Editing Firewall with SDM
• SDM's Advanced Firewall Wizard
• Watch Your Directions - More Tips
• ICMP Inspection
• Final Note

Video 8
Cryptography and Virtual Private Networks (VPNs)
Learn how Asymetric and Symetric Algorithms can be used to implement Cryptography Techniques that help encrypt clear text passwords. Plus, configure your own IKE policy using the Command Line and get your hands dirty by using the Security Device Manager (SDM) to configure Site-to-Site VPN and Generic Routing Encapsulation (GRE) over IPsec.

• Cryptography Techniques
• Asymmetric and Symmetric Algorithms
• RSA Algorithm
• Diffie-Hellman (DH)
• A Word or Two About SHA
• What is VPN?
• VPN Terminology and Theory
• Introduction to PKI and the Certificate of Authority
• Public Key Cryptography Standards (PKCS)
• Internet Key Exchange (IKE)
• Steps to Configure Site-to-Site VPN
• Configuring IKE Policy Using Command Line
• Policy Match Criteria
• Crypto ACLs
• Mirror Configuration
• Creating Crypto Map
• Using SDM to Configure Site-to-Site VPN
• Generating Mirror in SDM
• Testing Our Configuration
• Verifying SDM Configuration Using Command Line
• The Return of Generic Routing Encapsulation (GRE) Over IPSec
• Using SDM to Configure GRE over IPSec

Video 9
Introduction to Voice and SAN Security
You do not need to be an expert in Voice Networking or Storage Area Networking (SAN) to learn how to keep these types of networks secure. Learn the differences between FCAP and FCPAP, discover the details of LUN and LUN Masking, and delve deeper into VoIP (Voice Over IP). Whatever your experience level may be, this detailed overview of Voice and SAN Networking will provide you the insight you need to get into one of the fastest growing areas in the IT field..  

• “Voice Over IP Overview
• Gateways and Gatekeepers
• VoIP Protocols
• Typical VoIP Attacks and Precautions
• Introduction to Storage Area Networking (SAN)
• SAN Transport Technologies and Protocols
• SAN Security - LUNS and LUN Masking
• SAN Zones
• Virtual SANs (VSANs)
• FCAP and FCPAP

Video 10
Introduction to Cisco Network Solutions
This video will introduce you to Cisco Network Solutions including: ASA 5500, Cisco Self-Defending Network, Cisco Security Management Suite, and Cisco Security Agent. Plus, learn about the five phases of the Cisco SDLC (System Development Life Cycle) and discover the differences between Quantitative Risk Analysis and Qualitative Risk Analysis.

• System Development Life Cycle
• Cisco SDLC Phase 1 - Initiation
• Cisco SDLC Phase 2 - Acquisition and Development
• Cisco SDLC Phase 3 - Implementation
• Cisco SDLC Phase 4 - Operation and Maintenance
• Cisco SDLC Final Phase - Disposition
• Disaster Recover - Hot, Warm and Cold Sites
• Risk Analysis - Quantitative and Qualitative
• Cisco Self-Defending Network
• Cisco Security Management Suite
• IronPort
• Cisco Security Agent
• Cisco Security Agent Interceptors
• Cisco ACS
• “in-band” and “out of band”

Here is what you get....

11 videos (29 Hours) will be provided in High-Quality AVI & WMV format. In other words, you get perfect quality and replication of your instructor's screens. An easy-to-use table of contents allows you to navigate to key areas you wish to focus on.

11 iPod video files to watch Train Signal on the go! A popular request amongst our students who wish to study while they commute (i.e., train). These 320x240 .m4v files are compressed versions of the original course, and play on any iPod that supports video. Also great for reviewing and refreshing your mind "on the job."

11 MP3 Files to listen to Train Signal on the go. Some of our students have requested this option. People would like to be able to listen in their car or while working out. Can be burnt to a CD or copied to portable device. Great supplemental training to the videos.

Free full version of Transcender's CCNA SecurityPractice Exam! (SAVE $159!) We've partnered with Transcender, the world's leading exam simulation provider! Their award-winning simulations look and feel so much like the actual exam, you'll feel confident on exam day! These Practice Questions are the Perfect Training Companion to Our CCNA Security Course
 

CCNA Security Training Course

Only £180 (ex vat & del)
per user

Multi user pricing available - call sales now

Official Purchase orders accepted from Government, Education, Health & Charity, Times 1000 plc's,  Professional Partnerships and other pre-approved accounts. Want to order more than one course ? Contact sales for a custom quote.