SSECMGT v4.0 - Managing Enterprise Security with Cisco Security Manager SSECMGT v4.0

• Lesson 1: Introducing Cisco Security Manager
  • Product Overview
  • Using Cisco Security Manager
  • Installing Cisco Security Manager
  • Cisco Security Manager Installation Procedure
  • Working with the Cisco Security Manager User Interface
  • New Features in Cisco Security Manager 4.0
• Lesson 2: Managing Devices
  • Preparing the Devices for Cisco Security Manager
  • Understanding the Device View
  • Adding Devices to Cisco Security Manager Inventory
  • Working with Devices with Dynamically Assigned IP Addresses
  • Understanding Device Properties
  • Understanding Device Credentials
  • Managing Devices
  • Understanding Device Grouping
  • On-Demand Out–of-Band Change Detection
• Lesson 3: Managing Policies
  • Understanding Policies
  • Managing Policies in Device View
  • Managing Shared Policies in Policy View
  • Interface Roles
  • Advanced Policy Features
  • Policy Locking
  • Discovering Policies
• Lesson 4: Managing Objects
  • Objects Overview
  • Understanding the Policy Object Manager Window
  • Overriding Global Objects for Individual Devices
  • Selecting Objects for Policies
• Lesson 5: Using Map View
  • Displaying Your Network on the Map
  • Managing Firewall Services in Map View
  • Managing VPNs in Map View
  • Managing Device Policies in Map View

• Lesson 1: Managing Firewall Services
  • Overview of Managing Firewall Services
  • Managing Rules Tables
  • Understanding Access Rules
  • Understanding Access Control Settings
  • Understanding Inspection Rules
  • Understanding Access Rule Functions
  • Understanding AAA Rules
  • Understanding Web Filter Rules
  • Understanding Transparent Firewall Rules
  • Understanding Zone-Based Firewall Rules
  • Understanding Interface and Global Rules
  • Understanding Botnet Traffic Filtering
• Lesson 2: Managing Firewall Devices
  • Platform Policies on Firewall Devices
  • NAT Policies on Firewall Devices
  • Bridging Policies on Firewall Devices
  • Device Administration Policies on Firewall Devices
  • Logging Policies on Firewall Devices
  • Multicast Policies on Firewall Devices
  • Routing Policies on Firewall Devices
  • Security Policies on Firewall Devices
  • Service Policy Rules on Firewall Devices
  • Security Contexts on Firewall Devices
• Lesson 3: Event Monitoring and Rule Correlation for Firewalls
  • Supported Devices and Events in Event Viewer
  • EventServer Overview
  • Cisco ASA Device Bootstrapping
  • Introduction to Event Viewer
  • Event-to-Policy Correlation
  • Event Collection and Event Viewer Settings

• Lesson 1: Managing VPNs
  • Overview of Site-to-Site VPNs
  • Working with VPN Topologies
  • Working with Site-to-Site VPN Policies
  • Configuring Advanced VPN Platforms
• Lesson 2: Managing Remote Access IPsec VPNs
  • Overview of Remote-Access VPNs
  • Working with Policies in Remote-Access VPNs
  • Configuring VPN Options
• Lesson 3: Configuring Client-Based SSL VPNs
  • SSL VPN Management Features and Platform Support
  • Overview of Remote-Access SSL VPNs
  • Bootstrapping Cisco ASA Adaptive Security Appliance for Full Tunnel SSL VPN
  • Configuring Full Tunnel SSL VPN
• Lesson 4: Configuring Clientless SSL VPNs
  • Clientless SSL VPN Overview
  • Clientless SSL VPN Configuration
  • Working with Application Plug-Ins
  • SSL VPN Portal Customization
• Lesson 5: Configuring Advanced VPN Configurations
  • Managing Cisco Security Desktop Policy
  • Configuring DAP
  • Creating Group Policies
  • Creating Remote Connection Profiles
  • Working with VPN AAA
• Lesson 6: Deploying Advanced VPN Technologies
  • DMVPN Overview
  • Hub-and-Spoke Prerequisites
  • Configuring DMVPN
  • Managing DMVPN
  • GET VPN Overview
  • Configuring GET VPN
  • Managing GET VPN
  • GRE over IPsec
  • VPN Dial Backup
  • VRF-Aware IPsec
  • VPN High Availability

• Lesson 1: Managing Cisco IPS Services
  • Overview of Network Sensing
  • Configuring Interfaces
  • Configuring Signatures
  • Working with IPS Signatures
  • Configuring Anomaly Detection
  • Configuring Event Actions
  • Configuring Global Correlation
• Lesson 2: Managing Cisco IPS Devices
  • Managing Cisco IPS Modules and Appliances
  • Configuring Policies for Cisco IOS IPS Devices
  • Managing Cisco IPS Updates
• Lesson 3: Managing Cisco IPS Events
  • Cisco Security Manager IPS Event Management
  • Mapping IPS Events to Policies

• Lesson 1: Managing Routers
  • Overview of Policy Management on Cisco IOS Routers
  • Working with Platform Policies for Cisco IOS Routers
  • NAT Policies
  • Interface Policies
  • Device Administration Policies
  • Configuring Device Administration Policies
  • Identity Policies
  • Logging and QoS Policies
  • Routing Policies
  • Advanced Routing Configuration Options
  • Zone-Based Firewall
• Lesson 2: Using the Cisco Catalyst 6500 Series Switch and Cisco 7600 Series Router Device Manage
  • Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers Overview
  • Managing Policies for Catalyst 6500 Series Switches and 7600 Series Routers

• Lesson 1: Managing FlexConfigs
  • Understanding FlexConfig
  • Creating FlexConfig Policy Objects
  • Working with FlexConfig
• Lesson 2: Managing Activities and Workflow Deployments
  • Managing Activities
  • Working with Activities
  • Managing Deployment
• Lesson 3: Implementing Integration Between Cisco Security Manager and Cisco Secure ACS
  • Understanding Roles in Cisco Security Manager
  • Understanding RBAC with Cisco Secure ACS
  • Configuring Cisco Secure ACS and Cisco Security Manager for RBAC Integration
• Lesson 4: Backing Up and Restoring Cisco Security Manager Databases
  • Database Backup in Cisco Security Manager
  • Database Restore in Cisco Security Manager
• Lesson 5: Using Monitoring, Troubleshooting, and Diagnostic Tools

The knowledge and skills that a learner must have before attending this course are as follows:

• Cisco CCNP® Security certification:
  • Securing Networks with Cisco Routers and Switches (SECURE)
  • Deploying Cisco ASA Firewall Features (FIREWALL)
  • Deploying Cisco ASA VPN Solutions (VPN)
  • Implementing Cisco Intrusion Prevention System (IPS)
• Understanding of networking and routing (on the CCNP level, but no certification is required).
• Understanding of different VPN technologies (such as DMVPN, GET VPN, and SSL VPN).
• Working knowledge of the Microsoft Windows operating system.