CCSP Bootcamp
Course Content
This class is designed for those individuals with Cisco router experience that are
implementing Cisco security solutions. In this class students will learn the basics of Cisco
Security and will learn to configure Cisco Routers, PIX Firewalls, Intrusion Detection
Systems, and VPN Concentrators to properly protect a network.
This class covers all 5 classes required for the CCSP® in only 12 days. It will include the
Authorized Courseware for the 5 classes.
Course Objectives
In this course, students will be provided with the knowledge required to pass the CCSP
certification tests to include materials from the following courses:
 Securing Networks with Cisco Routers and Switches (SNRS)
Securing Networks with PIX and ASA (SNPA)
Implementing Cisco Intrusion Detection Systems (IPS)
Cisco Secure VPN (CSVPN)
Securing Cisco Network Devices (SND)
Course Outline
Securing Networks with Cisco Routers and Switches (SNRS)
Monday - Wednesday
Module 1 - Cisco Secure ACS for Windows configuration
Module 2 - Configuring Cisco IOS Security Feature Set including IOS Firewall
CBAC(Context-Based Access Control), Authentication Proxy and IPS(Intrusion Prevention
System)
Module 3 - Layer 2 Security, including Cisco IBNS(Identity Based Network Services), and
802.1x Port-Based Authentication
Module 4 - Building Cisco IOS-based VPNs Using Cisco Routers and Pre-Shared Keys
Module 5 - Building Cisco IOS-based VPNs Using Cisco Routers and Certificate Authorities
Module 6 - Cisco IOS Remote Access Using Cisco Easy VPN
Module 7 - Cisco Security Device Manager(SDM).
642-511 CSVPN® - Cisco Secure VPN (CSVPN®)
Thursday - Friday
Overview of Virtual Private Networks and IPSec Technologies
-Cisco
products
enable a
secure
VPN
-IPSec overview
-IPSec protocol framework
-How IPSec works
Cisco Virtual Private Network 3000 Concentrator Series Hardware
-Overview of the Cisco VPN 3000 Concentrator Series
-Cisco VPN 3000 Concentrator
-Cisco VPN 3000 Concentrator Series Client support
Configuring the Cisco VPN 3000 Series Concentrator for Remote Access Using Preshared Keys
-Overview of remote access using pre-shared keys
-Initial configuration of the Cisco VPN 3000 Concentrator Series for remote access
-Browser configuration of the Cisco VPN 3000 Series Concentrator
-Configure users and groups
-More in-depth configuration information
-Configure the Cisco Windows VPN Software Client
Configure Cisco Virtual Private Network 3000 Series Concentrator for Remote Access
Using Digital Certificates
-CA support overview
-Certificate generation
-Validating certificates
-Configuring the Cisco VPN 3000 Concentrator Series for CA support
Configure the Cisco Virtual Private Network Firewall Feature for IPSec Software Client
-Overview of software client's firewall feature
-Software Client's Are You There feature
-Software Client's Central Policy Protection feature
-Software Client's firewall statistics
-Customizing firewall policy
Configure the Cisco Virtual Private Network Client Auto-Initiation Feature
-Overview of the Cisco VPN Software Client auto-initiation
-Configure the Cisco VPN Software Client auto-initiation
Monitor and Administer Cisco VPN 3000 Remote Access Networks
-Monitoring
-
Administration
-Bandwidth Management
Configure the Cisco VPN 3002 Hardware Client for Remote Access
-Cisco VPN 3002 Hardware client remote access with pre-shared keys
Configure the Cisco Virtual Private Network 3002 Hardware Client
-Overview of the Hardware Client interactive unit and user authentication features
-Configuring the Hardware Client interactive unit authentication feature
-Configuring the Hardware Client user authentication feature
-Monitoring the Hardware Client user statistics
Configure the Cisco Virtual Private Network Client Backup Server and Load Balancing
-Configuring the Cisco VPN Client backup server feature
-Configuring the Cisco VPN Client load balancing feature
-Overview of the Cisco VPN Client Reverse Route Injection feature
Configure the Virtual Private Network 3002 Hardware Client for Software Auto-Update
-Overview and configuration of the VPN 3002 Hardware Client software auto-update feature
-Monitoring the Cisco VPN 3002 Hardware Client software auto-update feature
Configure the Cisco Virtual Private Network 3000 Series Concentrator for the IPSec
Over UDP and IPSec Over TCP
-Overview of Port Address Translation
-Configuring IPSec over UDP
-Configuring NAT-Transversal
-Configuring IPSec over TCP
Cisco Virtual Private Network 3000 Series Concentrator LAN-to-LAN with Pre-Shared
Keys
-Cisco VPN 3000 Series Concentrator IPSec LAN-to-LAN
-LAN-to-LAN configuration
Cisco Virtual Private Network 3000 Series Concentrator LAN-to-LAN with NAT
-LAN-to-LAN overview
-Configuring the Concentrator LAN-LAN NAT feature
Cisco
Virtual
Private
Network
3000
Series
Concentrator LAN-to-LAN using Digital Certificates
-Root certificate installation
-Identify certificate installation
Securing Networks with PIX and ASA (SNPA)
Saturday-Monday
Module 1. Course Introduction
Module 2. Cisco Security Appliance Technology and Features
Module 3. Cisco PIX Security Appliance and ASA Adaptive Security Appliance Families
Module 4. Getting Started with Cisco Security Appliances
Module 5. Translations and Connections
Module 6. Access Control Lists and Content Filtering
Module 7. Object Grouping
Module 8. Authentication, Authorization, and Accounting
Module 9. Switching and Routing
Module 10. Modular Policy Framework
Module 11. Advanced Protocol Handling
Module 12. Virtual Private Network Configuration
Module 13. Configuring Security Appliance Remote Access Using Cisco Easy VPN
Module 14. Configuring ASA for WebVPN
Module 15. Configuring Transparent Firewall
Module 16. Configuring Security Contexts
Module 17. Failover
Module 18. Cisco Security Appliance Device Manager
Module 19. AIP-Security Services Module-Getting Started
Module 20. Managing Security Appliances
Module 21. Configuring PIX Security Appliance Remote Access Using Cisco Easy VPN
Module 22.Firewall Services Module
Implementing Cisco Intrusion Detection Systems (IPS)
Tuesday - Thursday (a.m.)
Lesson 1:Course Introduction
Lesson 2:Security Fundamentals
Lesson 3:Intrusion Prevention Overview
Lesson 4:Getting Started with the IDS Command Line Interface
Lesson
5:Using
IDM
Lesson
6:Basic
Sensor
Configuration
Lesson 7:Cisco Intrusion Detection System Alarms and Signatures
Lesson 8:Signature Engines
Lesson 9:Signature Configuration
Lesson 10:Sensor Tuning
Lesson 11:Alarm Monitoring and Management
Lesson 12:Blocking Configuration
Lesson 13:Cisco Intrusion Detection System Network Module
Lesson 14:Intrusion Detection System Module Configuration
Lesson 15:Capturing Network Traffic for Intrusion Detection Systems
Lesson 16:Sensor Maintenance
Lesson 17:Verifying System Configuration
Securing Cisco Network Devices (SND)
Thursday (p.m.) - Friday
Module 1 Securing a Network with Cisco SAFE
Module 2 Securing the Perimeter
Module 3 Cisco Security Appliances
Module 4 Building IPSec VPNs
Module 5 Securing Networks with Host- and Network-based IPS
Module 6 Securing Access with Cisco Secure ACS
Module 7 Managing Network Security