CCIE SECURITY
I have included the Security V3 lab blueprint here with my study goals. It is a work in progress and will be updated regularly. Below the Table is the amount of study hours that I have put into this expedition. These hours are accounted for starting March 24th 2010. It does no account study hours before then (which have been quite a few).
June 24 Update
Well, I have finally made some updates to this table. I have updated the skills I have learned the past few months and it looks like I am making progress (at least I think I am). I still don’t feel ready so the next 2 months are going to be hardcore for me. I hope to update this with all 10′s in a few months time. I hope your studies are going well too.
Section Topic Proficiency 1 Beginner - 10 Expert Study Time
1 Implementing Secure Networks Using Cisco ASA Firewalls
Configuring and Troubleshooting Cisco ASA Firewalls Mar 29 - 7
June 24 - 8
1.01. Initializing the Basic Cisco ASA Firewall (IP Address, Mask, Default Route, etc.) Mar 29 - 9
June 24 - 10
1.02. Understanding Security Levels (Same Security Interface) Mar 29 - 7
June 24 - 10
1.03. Understanding Single vs. Multimode Mar 29 - 9
June 24 - 10
1.04. Understanding Firewall vs. Transparent Mode Mar 29 - 9
June 24 - 9
1.05. Understanding Multiple Security Contexts Mar 29 - 7
June 24 - 9
1.06. Understanding Shared Resources for Multiple Contexts Mar 29 - 9
June 24 - 9
1.07. Understanding Packet Classification in Multiple-Contexts Mode Mar 29 - 9
June 24 - 9
1.08. VLAN Subinterfaces Using 802.1Q Trunking Mar 29 - 9
June 24 - 10
1.09. Multiple-Mode Firewall with Outside Access Mar 29 - 9
June 24 - 9
1.10. Single-Mode Firewall Using the Same Security Level Mar 29 - 9
June 24 - 9
1.11. Multiple-Mode, Transparent Firewall Mar 29 - 5
June 24 - 9
1.12. Single-Mode, Transparent Firewall with NAT Mar 29 - 6
June 24 - 6
1.13. ACLs in Transparent Firewall (for Pass-Through Traffic) Mar 29 - 6
June 24 - 7
1.14. Understanding How Routing Behaves on the Adaptive Security Appliance (Egress and Next-Hop Selection Process) Mar 29 - 6
June 24 - 7
1.15. Understanding Static vs. Dynamic Routing Mar 29 - 8
June 24 - 9
1.16. Static Routes Mar 29 - 9
June 24 - 9
1.17. RIP with Authentication Mar 29 - 9
June 24 - 10
1.18. OSPF with Authentication Mar 29 - 9
June 24 - 10
1.19. EIGRP with Authentication Mar 29 - 9
June 24 - 10
1.20. Managing Multiple Routing Instances Mar 29 - 9
June 24 - 9
1.21. Redistribution Between Protocols Mar 29 - 7
June 24 - 8
1.22. Route Summarization Mar 29 - 5
June 24 - 6
1.23. Route Filtering Mar 29 - 6
June 24 - 6
1.24. Static Route Tracking Using an SLA Mar 29 - 8
June 24 - 9
1.25. Dual ISP Support Using Static Route Tracking Mar 29 - 8
June 24 - 9
1.26. Redundant Interface Pair Mar 29 - 9
June 24 - 10
1.27. LAN-Based Active/Standby Failover (Routed Mode) Mar 29 - 9
June 24 - 9
1.28. LAN-Based Active/Active Failover (Routed Mode) Mar 29 - 9
June 24 - 9
1.29. LAN-Based Active/Standby Failover (Transparent Mode) Mar 29 - 9
June 24 - 9
1.30. LAN-Based Active/Active Failover (Transparent Mode) Mar 29 - 9
June 24 - 9
1.31. Stateful Failover Link Mar 29 - 9
June 24 - 9
1.32. Device Access Management Mar 29 - 9
June 24 - 9
1.33. Enabling Telnet Mar 29 - 9
June 24 - 10
1.34. Enabling SSH Mar 29 - 9
June 24 - 10
1.35. The nat-control Command vs. no nat-control Command Mar 29 - 9
June 24 - 9
1.36. Enabling Address Translation (NAT, Global, and Static) Mar 29 - 9
June 24 - 9
1.37. Dynamic NAT Mar 29 - 8
June 24 - 9
1.38. Dynamic PAT Mar 29 - 8
June 24 - 9
1.39. Static NAT Mar 29 - 8
June 24 - 9
1.40. Static PAT Mar 29 - 8
June 24 - 9
1.41. Policy NAT Mar 29 - 8
June 24 - 9
1.42. Destination NAT Mar 29 - 8
June 24 - 9
1.43. Bypassing NAT When NAT Control Is Enabled Using Identity NAT Mar 29 - 9
June 24 - 10
1.44. Bypassing NAT When NAT Control Is Enabled Using NAT Exemption Mar 29 - 9
June 24 - 10
1.45. Port Redirection Using NAT Mar 29 - 8
June 24 - 9
1.46. Tuning Default Connection Limits and Timeouts Mar 29 - 6
June 24 - 8
1.47. Basic Interface Access Lists and Access Group (Inbound and Outbound) Mar 29 - 8
June 24 - 9
1.48. Time-Based Access Lists Mar 29 - 8
June 24 - 9
1.49. ICMP Commands Mar 29 - 8
June 24 - 9
1.50. Enabling Syslog and Parameters Mar 29 - 6
June 24 - 7
1.51. NTP with Authentication Mar 29 - 9
June 24 - 9
1.52. Object Groups (Network, Protocol, ICMP, and Services) Mar 29 - 9
June 24 - 9
1.53. Nested Object Groups Mar 29 - 9
June 24 - 9
1.54. URL Filtering Mar 29 - 8
June 24 - 9
1.55. Java Filtering Mar 29 - 8
June 24 - 9
1.56. ActiveX Filtering Mar 29 - 8
June 24 - 9
1.57. ARP Inspection Mar 29 - 6
June 24 - 7
1.58. Modular Policy Framework (MPF) Mar 29 - 7
June 24 - 8
1.59. Application-Aware Inspection Mar 29 - 7
June 24 - 8
1.60. Identifying Injected Errors in Troubleshooting Scenarios Mar 29 - 6
June 24 - 7
1.61. Understanding and Interpreting Adaptive Security Appliance show and debug Outputs Mar 29 - 6
June 24 - 7
1.62. Understanding and Interpreting the packet-tracer and capture Commands Mar 29 - 8
June 24 - 9
2 Implementing Secure Networks Using Cisco IOS Firewalls
Configuring and Troubleshooting Cisco IOS Firewalls Mar 29 Overall - 6
June 24 Overall - 7
2.01. Zone-Based Policy Firewall Using Multiple-Zone Scenarios Mar 29 - 7
June 24 - 8
2.02. Transparent Cisco IOS Firewall (Layer 2) Mar 29 - 3
June 24 - 9
2.03. Context-Based Access Control (CBAC) Mar 29 - 6
June 24 - 8
2.04. Proxy Authentication (Auth Proxy) Mar 29 - 6
June 24 - 7
2.05. Port-to-Application Mapping (PAM) Usage with ACLs Mar 29 - 5
June 24 - 8
2.06. Use of PAM to Change System Default Ports Mar 29 - 5
June 24 - 9
2.07. PAM Custom Ports for Specific Applications Mar 29 - 5
June 24 - 9
2.08. Mapping Nonstandard Ports to Standard Applications Mar 29 - 5
June 24 - 9
2.09. Performance Tuning Mar 29 - 4
June 24 - 6
2.10. Tuning Half-Open Connections Mar 29 - 5
June 24 - 7
2.11. Understanding and Interpreting the show ip port-map Commands Mar 29 - 5
June 24 - 8
2.12. Understanding and Interpreting the show ip inspect Commands Mar 29 - 8
June 24 - 9
2.13. Understanding and Interpreting the debug ip inspect Commands Mar 29 - 7
June 24 - 8
2.14. Understanding and Interpreting the show zone|zone-pair Commands Mar 29 - 7
June 24 - 8
2.15. Understanding and Interpreting the debug zone Commands Mar 29 - 7
June 24 - 8
3 Implementing Secure Networks Using Cisco VPN Solutions
Configuring and Troubleshooting Cisco VPN Solutions Mar 29 Overall - 7
June 24 - 8
3.01. Understanding Cryptographic Protocols (ISAKMP, IKE, ESP, Authentication Header, CA) Mar 29 - 8
June 24 - 9
3.02. IPsec VPN Architecture on Cisco IOS Software and Cisco ASA Security Appliance Mar 29 - 8
June 24 - 9
3.03. Configuring VPNs Using ISAKMP Profiles Mar 29 - 8
June 24 - 9
3.04. Configuring VPNs Using IPsec Profiles Mar 29 - 8
June 24 - 9
3.05. GRE over IPsec Using IPsec Profiles Mar 29 - 8
June 24 - 9
3.06. Router-to-Router Site-to-Site IPsec Using the Classical Command Set (Using Preshared Keys and Certificates) Mar 29 - 8
June 24 - 9
3.07. Router-to-Router Site-to-Site IPsec Using the New VTI Command Set (Using Preshared Keys and Certificates) Mar 29 - 9
June 24 - 9
3.08. Router-to-ASA Site-to-Site IPsec (Using Preshared Keys and Certificates) Mar 29 - 8
June 24 - 9
3.09. Understanding DMVPN architecture (NHRP, mGRE, IPsec, Routing) Mar 29 - 8
June 24 - 9
3.10. DMVPN Using NHRP and mGRE (Hub-and-Spoke) Mar 29 - 8
June 24 - 9
3.11. DMVPN Using NHRP and mGRE (Full-Mesh) Mar 29 - 8
June 24 - 9
3.12. DMVPN Through Firewalls and NAT Devices Mar 29 - 6
June 24 - 9
3.13. Understanding GET VPN Architecture (GDOI, Key Server, Group Member, Header Preservation, Policy, Rekey, KEK, TEK, and COOP) Mar 29 - 6
June 24 - 8
3.14. Implementing GET VPN (Using Preshared Keys and Certificates) Mar 29 - 8
June 24 - 9
3.15. GET VPN Unicast Rekey Mar 29 - 6
June 24 - 9
3.16. GET VPN Multicast Rekey Mar 29 - 6
June 24 - 7
3.17. GET VPN Group Member Authorization List Mar 29 - 6
June 24 - 6
3.18. GET VPN Key Server Redundancy Mar 29 - 7
June 24 - 7
3.19. GET VPN Through Firewalls and NAT Devices Mar 29 - 6
June 24 - 8
3.20. Integrating GET VPN with a DMVPN Solution Mar 29 - 8
June 24 - 8
3.21. Basic VRF-Aware IPsec Mar 29 - 4
June 24 - 7
3.22. Enabling the CA (PKI) Server (on the Router and Cisco ASA Security Appliance) Mar 29 - 8
June 24 - 9
3.23. CA Enrollment Process on a Router Client Mar 29 - 8
June 24 - 9
3.24. CA Enrollment Process on a Cisco ASA Security Appliance Client Mar 29 - 8
June 24 - 9
3.25. CA Enrollment Process on a PC Client Mar 29 - 8
June 24 - 9
3.26. Clientless SSL VPN (Cisco IOS WebVPN) on the Cisco ASA Security Appliance (URLs) Mar 29 - 8
June 24 - 8
3.27. AnyConnect VPN Client on Cisco IOS Software Mar 29 - 8
June 24 - 9
3.28. AnyConnect VPN Client on the Cisco ASA Security Appliance Mar 29 - 8
June 24 - 9
3.29. Remote Access Using a Traditional Cisco VPN Client on a Cisco IOS Router Mar 29 - 8
June 24 - 8
3.30. Remote Access Using a Traditional Cisco VPN Client on a Cisco ASA Security Appliance Mar 29 - 8
June 24 - 8
3.31. Cisco Easy VPN Router Server and Router Client (Using DVTI) Mar 29 - 8
June 24 - 8
3.32. Cisco Easy VPN Router Server and Router Client (Using Classical Style) Mar 29 - 8
June 24 - 8
3.33. Cisco Easy VPN Cisco ASA Server and Router Client Mar 29 - 5
June 24 - 7
3.34. Cisco Easy VPN Remote Connection Modes (Client, Network, Network+) Mar 29 - 6
June 24 - 8
3.35. Enabling Extended Authentication (XAUTH) on Cisco IOS Software and the Cisco ASA Security Appliance Mar 29 - 6
June 24 - 8
3.36. Enabling Split Tunneling on Cisco IOS Software and the Cisco ASA Security Appliance Mar 29 - 8
June 24 - 9
3.37. Enabling Reverse Route Injection (RRI) on Cisco IOS Software and the Cisco ASA Security Appliance Mar 29 - 8
June 24 - 9
3.38. Enabling NAT-T on Cisco IOS Software and the Cisco ASA Security Appliance Mar 29 - 7
June 24 - 8
3.39. High-Availability Stateful Failover for IPsec with Stateful Switchover (SSO) and Hot Standby Router Protocol (HSRP) Mar 29 - 6
June 24 - 7
3.40. High Availability Using Link Resiliency (with Loopback Interface for Peering) Mar 29 - 6
June 24 - 8
3.41. High Availability Using HSRP and RRI Mar 29 - 6
June 24 - 8
3.42. High Availability Using IPsec Backup Peers Mar 29 - 7
June 24 - 8
3.43. High Availability Using GRE over IPsec (Dynamic Routing) Mar 29 - 6
June 24 - 7
3.44. Basic QoS Features for VPN Traffic on Cisco IOS Software and the Cisco ASA Security Appliance Mar 29 - 6
June 24 - 7
3.45. Identifying Injected Errors in Troubleshooting Scenarios (for Site-to-Site, DMVPN, GET VPN, and Cisco Easy VPN) Mar 29 - 7
June 24 - 8
3.46. Understanding and Interpreting the show crypto Commands Mar 29 - 8
June 24 - 8
3.47. Understanding and Interpreting the debug crypto Commands Mar 29 - 8
June 24 - 8
4 Configuring Cisco IPS to Mitigate Network Threats
Configuring and Troubleshooting Cisco IPS Mar 29 Overall - 4
June 24 Overall - 7
4.01. Understanding Cisco IPS System Architecture (System Design, MainApp, SensorApp, EventStore) Mar 29 - 5
June 24 - 7
4.02. Understanding Cisco IPS User Roles (Administrator, Operator, Viewer, Service) Mar 29 - 5
June 24 - 7
4.03. Understanding Cisco IPS Command Modes (Privileged, Global, Service, Multi-Instance) Mar 29 - 3
June 24 - 6
4.04. Understanding Cisco IPS Interfaces (Command and Control, Sensing, Alternate TCP Reset) Mar 29 - 5
June 24 - 7
4.05. Understanding Promiscuous (IDS) vs. Inline (IPS) Monitoring Mar 29 - 7
June 24 - 9
4.06. Initialization Basic Sensor (IP Address, Mask, Default Route, etc.) Mar 29 - 8
June 24 - 10
4.07. Troubleshooting Basic Connectivity Issues Mar 29 - 8
June 24 - 9
4.08. Managing Sensor ACLs Mar 29 - 8
June 24 - 9
4.09. Allowing Services Ping and Telnet from/to Cisco IPS Mar 29 - 7
June 24 - 8
4.10. Enabling Physical Interfaces Mar 29 - 8
June 24 - 10
4.11. Promiscuous Mode Mar 29 - 6
June 24 - 8
4.12. Inline Interface Mode Mar 29 - 6
June 24 - 9
4.13. Inline VLAN Pair Mode Mar 29 - 6
June 24 - 9
4.14. VLAN Group Mode Mar 29 - 4
June 24 - 7
4.15. Inline Bypass Mode Mar 29 - 4
June 24 - 5
4.16. Interface Notifications Mar 29 - 4
June 24 - 6
4.17. Understanding the Analysis Engine Mar 29 - 3
June 24 - 6
4.18. Creating Multiple Security Policies and Applying Them to Individual Virtual Sensors Mar 29 - 5
June 24 - 7
4.19. Understanding and Configuring Virtual Sensors (vs0, vs1) Mar 29 - 5
June 24 - 8
4.20. Assigning Interfaces to the Virtual Sensor Mar 29 - 6
June 24 - 9
4.21. Understanding and Configuring Event Action Rules (rules0, rules1) Mar 29 - 4
June 24 - 7
4.22. Understanding and Configuring Signatures (sig0, sig1) Mar 29 - 4
June 24 - 7
4.23. Adding Signatures to Multiple Virtual Sensors Mar 29 - 5
June 24 - 8
4.24. Understanding and Configuring Anomaly Detection (ad0, ad1) Mar 29 - 3
June 24 - 6
4.25. Using the Cisco IDM (IPS Device Manager) Mar 29 - 6
June 24 - 7
4.26. Using Cisco IDM Event Monitoring Mar 29 - 6
June 24 - 8
4.27. Displaying Events Triggered Using the Cisco IPS Console Mar 29 - 4
June 24 - 8
4.28. Troubleshooting Events Not Triggering Mar 29 - 2
June 24 - 5
4.29. Displaying and Capturing Live Traffic on the Cisco IPS Console (Packet Display and Packet Capture) Mar 29 - 4
June 24 - 6
4.30. SPAN and RSPAN Mar 29 - 8
June 24 - 8
4.31. Rate Limiting Mar 29 - 4
June 24 - 5
4.32. Configuring Event Action Variables Mar 29 - 4
June 24 - 7
4.33. Target Value Ratings Mar 29 - 4
June 24 - 7
4.34. Event Action Overrides Mar 29 - 4
June 24 - 6
4.35. Event Action Filters Mar 29 - 4
June 24 - 7
4.36. Configuring General Settings Mar 29 - 4
June 24 - 6
4.37. General Signature Parameters Mar 29 - 4
June 24 - 7
4.38. Alert Frequency Mar 29 - 4
June 24 - 6
4.39. Alert Severity Mar 29 - 4
June 24 - 8
4.40. Event Counter Mar 29 - 4
June 24 - 6
4.41. Signature Fidelity Rating Mar 29 - 4
June 24 - 7
4.42. Signature Status Mar 29 - 4
June 24 - 7
4.43. Assigning Actions to Signatures Mar 29 - 5
June 24 - 8
4.44. AIC Signatures Mar 29 - 3
June 24 - 6
4.45. IP Fragment Reassembly Mar 29 - 3
June 24 - 5
4.46. TCP Stream Reassembly Mar 29 - 3
June 24 - 5
4.47. IP Logging Mar 29 - 3
June 24 - 5
4.48. Configuring SNMP Mar 29 - 2
June 24 - 5
4.49. Signature Tuning (Severity Levels, Throttle Parameters, Event Actions) Mar 29 - 3
June 24 - 6
4.50. Creating Custom Signatures (Using the CLI and Cisco IDM) Mar 29 - 5
June 24 - 7
4.51. Understanding Various Types of Signature Engines Mar 29 - 3
June 24 - 6
4.52. Understanding Various Types of Signature Variables Mar 29 - 3
June 24 - 6
4.53. Understanding Various Types of Event Actions Mar 29 - 3
June 24 - 6
4.54. Understanding New Cisco IPS 6.0 Features (e.g., Deny Packets for High-Risk Events by Default) Mar 29 - 3
June 24 - 7
4.55. Creating a Custom String TCP Signature Mar 29 - 3
June 24 - 7
4.56. Creating a Custom Flood Engine Signature Mar 29 - 3
June 24 - 5
4.57. Creating a Custom AIC MIME-Type Engine Signature Mar 29 - 3
June 24 - 5
4.58. Creating a Custom Service HTTP Signature Mar 29 - 5
June 24 - 6
4.59. Creating a Custom Service FTP Signature Mar 29 - 3
June 24 - 5
4.60. Creating a Custom ATOMIC.ARP Engine Signature Mar 29 - 3
June 24 - 5
4.61. Creating a Custom ATOMIC.IP Engine Signature Mar 29 - 3
June 24 - 7
4.62. Creating a Custom TCP Sweep Signature Mar 29 - 3
June 24 - 5
4.63. Creating a Custom ICMP Sweep Signature Mar 29 - 3
June 24 - 5
4.64. Creating a Custom Trojan Engine Signature Mar 29 - 3
June 24 - 5
4.65. Enabling Shunning and Blocking (Enabling Blocking Properties) Mar 29 - 5
June 24 - 7
4.66. Shunning on a Router Mar 29 - 2
June 24 - 7
4.67. Shunning on the Cisco ASA Security Appliance Mar 29 - 6
June 24 - 8
4.68. Enabling the TCP Reset Function Mar 29 - 4
June 24 - 7
4.69. Cisco IOS IPS on a Router Using Version 5.x Format Signatures Mar 29 - 3
June 24 - 10
4.70. Loading a Version 5.x Signature File onto the Router Mar 29 - 3
June 24 - 10
4.71. Understanding the Signature Engines for Cisco IOS IPS Mar 29 - 3
June 24 - 7
4.72. Transparent Cisco IOS IPS Mar 29 - 2
June 24 - 7
5 Implementing Identity Management Mar 29 Overall - 3
June 24 - 6
Configuring and Troubleshooting Identity Management Mar 29 Overall - 9
June 24 Overall - 9
5.01 Understanding the AAA Framework Mar 29 - 6
June 24 - 8
5.02 Understanding the RADIUS Protocol Mar 29 - 6
June 24 - 8
5.03 Understanding RADIUS Attributes (Cisco AV-PAIRS) Mar 29 - 6
June 24 - 8
5.04 Understanding the TACACS+ Protocol Mar 29 - 6
June 24 - 8
5.05 Understanding TACACS+ Attributes Mar 29 - 6
June 24 - 7
5.06 Comparison of RADIUS and TACACS+ Mar 29 - 6
June 24 - 7
5.07 Configuring Basic LDAP Support Mar 29 - 6
June 24 - 8
5.08 Overview of Cisco Secure ACS Mar 29 - 6
June 24 - 8
5.09 How to Navigate Cisco Secure ACS Mar 29 - 7
June 24 - 9
5.10. Cisco Secure ACS Network Settings Parameters Mar 29 - 7
June 24 - 7
5.11. Cisco Secure ACS User Settings Parameters Mar 29 - 6
June 24 - 8
5.12. Cisco Secure ACS Group Settings Parameters Mar 29 - 6
June 24 - 8
5.13. Cisco Secure ACS Shared Profiles Components (802.1X, NAF, NAR, Command Author, Downloadable ACL, etc.) Mar 29 - 4
June 24 - 6
5.14. Cisco Secure ACS Shell Command Authorization Sets Using Both Per-Group Setup and Shared Profiles Mar 29 - 3
June 24 - 7
5.15. Cisco Secure ACS System Configuration Parameters Mar 29 - 4
June 24 - 6
5.16. Cisco Secure ACS Posture Validation Policies for NAC Setup Mar 29 - 1
June 24 - 8
5.17. Cisco Secure ACS Using Network Access Profiles (NAPs) Mar 29 - 1
June 24 - 6
5.18. Cisco Secure ACS MAC Authentication Bypass (MAB) Using NAP Mar 29 - 1
June 24 - 4
5.19. Enabling AAA on a Router for vty Lines Mar 29 - 6
June 24 - 8
5.20. Enabling AAA on a Switch for vty Lines Mar 29 - 6
June 24 - 8
5.21. Enabling AAA on a Router for HTTP Mar 29 - 6
June 24 - 8
5.22. Enabling AAA on the Cisco ASA Security Appliance for Telnet and SSH Protocols Mar 29 - 7
June 24 - 8
5.23. Using Default vs. Named Method Lists Mar 29 - 7
June 24 - 9
5.24. Complex Command Authorization and Privilege Levels, and Relevant Cisco Secure ACS Profiles Mar 29 - 3
June 24 - 6
5.25. Proxy Service Authentication and Authorization on the Cisco ASA Security Appliance for Pass-Through Traffic (FTP, Telnet, and HTTP), and Relevant Cisco Secure ACS Profiles Mar 29 - 5
June 24 - 8
5.26. Using Virtual Telnet on the Cisco ASA Security Appliance Mar 29 - 2
June 24 - 10
5.27. Using Virtual HTTP on the Cisco ASA Security Appliance Mar 29 - 2
June 24 - 9
5.28. Downloadable ACLs Mar 29 - 6
June 24 - 7
5.29. AAA 802.1X Authentication Using RADIUS on a Switch Mar 29 - 3
June 24 - 9
5.30. NAC-L2-802.1X on a Switch Mar 29 - 3
June 24 - 7
5.31. NAC-L2-IP on a Switch Mar 29 - 3
June 24 - 6
5.32. Troubleshooting Failed AAA Authentication or Authorization Mar 29 - 6
June 24 - 7
5.33. Troubleshooting Using Cisco Secure ACS Logs Mar 29 - 6
June 24 - 8
5.34. Using the test aaa Command on the Router, Switch, or Cisco ASA Security Appliance Mar 29 - 6
June 24 - 9
5.35. Understanding and Interpreting the debug radius Command Mar 29 - 5
June 24 - 8
5.36. Understanding and Interpreting the debug tacacs+ Command Mar 29 - 5
June 24 - 7
5.37. Understanding and Interpreting the debug aaa authentication Command Mar 29 - 6
June 24 - 7
5.38. Understanding and Interpreting the debug aaa authorization Command Mar 29 - 6
June 24 - 7
5.39. Understanding and Interpreting the debug aaa accounting Command Mar 29 - 6
June 24 - 7
6 Implementing Control Plane and Management Plane Security
Configuring and Troubleshooting Router Traffic Plane Security Mar 29 - 6
June 24 - 7
6.01 Understanding Four Types of Traffic Planes on a Cisco Router (Control, Management, Data, and Services) Mar 29 - 6
June 24 - 8
6.02 Understanding Control Plane Security Technologies and Core Concepts Covering Security Features Available to Protect the Control Plane Mar 29 - 6
June 24 - 8
6.03 Understanding Management Plane Security Technologies and Core Concepts Covering Security Features Available to Protect the Management Plane Mar 29 - 6
June 24 - 8
6.04 Configuring Control Plane Policing (CoPP) Mar 29 - 6
June 24 - 8
6.05 Control Plane Rate Limiting Mar 29 - 5
June 24 - 7
6.06 Disabling Unused Control Plane Services (IP Source Routing, Proxy ARP, Gratuitous ARP, etc.) Mar 29 - 7
June 24 - 8
6.07 Disabling Unused Management Plane Services (Finger, BOOTP, DHCP, Cisco Discovery Protocol, etc.) Mar 29 - 7
June 24 - 8
6.08 MPP (Management Plane Protection) and Understanding OOB (Out-of-Band) Management Interfaces Mar 29 - 4
June 24 - 7
6.09 Configuring Protocol Authentication Mar 29 - 8
June 24 - 9
6.1 Route Filtering and Protocol-Specific Filters Mar 29 - 6
June 24 - 7
6.11 ICMP Techniques to Reduce the Risk of ICMP-Related DoS Attacks (IP Unreachable, IP Redirect, IP Mask Reply, etc.) Mar 29 - 6
June 24 - 8
6.12 Selective Packet Discard (SPD) Mar 29 - 3
June 24 - 6
6.13 MQC and FPM Types of Service Policy on the CoPP Interface Mar 29 - 5
June 24 - 7
6.14 Broadcast Control on a Switch Mar 29 - 4
June 24 - 7
6.15 Catalyst Switch Port Security Mar 29 - 6
June 24 - 8
6.16 Cisco IOS Software-Based CPU Protection Mechanisms (Options Drop, Logging Interval, CPU Threshold) Mar 29 - 5
June 24 - 7
6.17 The Generalized TTL Security Mechanism Known as BGP TTL Security Hack (BTSH) Mar 29 - 7
June 24 - 8
6.18 Device Access Control (vty ACL, HTTP ACL, SSH Access, Privilege Levels) Mar 29 - 6
June 24 - 8
6.19 SNMP Security Mar 29 - 4
June 24 - 5
6.2 System Banners Mar 29 - 5
June 24 - 6
6.21 Secure Cisco IOS File Systems Mar 29 - 5
June 24 - 7
6.22 Understanding and Enabling Syslog Mar 29 - 5
June 24 - 7
6.23 NTP with Authentication Mar 29 - 5
June 24 - 8
6.24 Role-Based CLI Views and Cisco Secure ACS Setup Mar 29 - 3
June 24 - 7
6.25 Service Authentication on Cisco IOS Software (FTP, Telnet, HTTP) Mar 29 - 5
June 24 - 7
6.26 Network Telemetry Identification and Classification of Security Events (IP Traffic Flow, NetFlow, SNMP, Syslog, RMON) Mar 29 - 4
June 24 - 7
7 Configuring Advanced Security
Configuring and Troubleshooting Advanced Security Features Mar 29 Overall - 5
June 24 Overall - 7
7.01 Implementing RFC 1918 Antispoofing Filtering Mar 29 - 8
June 24 - 10
7.02 Implementing RFC 2827 Antispoofing Filtering Mar 29 - 5
June 24 - 7
7.03 Implementing RFC 2401 Antispoofing Filtering Mar 29 - 5
June 24 - 7
7.04 Marking Packets Using DSCP and IP Precedence and Other Values Mar 29 - 4
June 24 - 6
7.05 Unicast RPF (uRPF) With or Without an ACL (Strict and Loose Mode) Mar 29 - 5
June 24 - 8
7.06 RTBH Filtering (Remote Triggered Black Hole) Mar 29 - 2
June 24 - 7
7.07 Basic Traffic Filtering Using Access Lists: SYN Flags, Established, etc. (Named vs. Numbered ACLs) Mar 29 - 6
June 24 - 8
7.08 Managing Time-Based Access Lists Mar 29 - 6
June 24 - 8
7.09 Enabling NAT and PAT on a Router Mar 29 - 6
June 24 - 7
7.1 Conditional NAT on a Router Mar 29 - 6
June 24 - 8
7.11 Multihome NAT on a Router Mar 29 - 5
June 24 - 7
7.12 Enabling a TCP Intercept on a Router Mar 29 - 4
June 24 - 7
7.13 Enabling a TCP Intercept on the Cisco ASA Security Appliance Mar 29 - 5
June 24 - 7
7.14 FPM (Flexible Packet Matching) and Protocol Header Definition File (PHDF) Files and Configuration of Nested Policy Maps Mar 29 - 2
June 24 - 6
7.15 CAR Rate Limiting with Traffic Classification Using ACLs Mar 29 - 4
June 24 - 8
7.16 PBR (Policy-Based Routing) and Use of Route Maps Mar 29 - 4
June 24 - 5
7.17 Advanced MQC (Modular QoS CLI) on a Router Mar 29 - 5
June 24 - 7
7.18 Advanced Modular Policy Framework (MPF) on the Cisco ASA Security Appliance Mar 29 - 6
June 24 - 7
7.19. Classification Using NBAR Mar 29 - 5
June 24 - 8
7.20. Understanding and Enabling NetFlow on a Router Mar 29 - 5
June 24 - 7
7.21 Traffic Policing on a Router Mar 29 - 5
June 24 - 6
7.22 Port Security on a Switch Mar 29 - 6
June 24 - 8
7.23 Storm Control on a Switch Mar 29 - 4
June 24 - 7
7.24 Private VLAN (PVLAN) on a Switch Mar 29 - 4
June 24 - 7
7.25 Port Blocking on a Switch Mar 29 - 5
June 24 - 7
7.26 Port ACL on a Switch Mar 29 - 3
June 24 - 5
7.27 MAC ACL on a Switch Mar 29 - 2
June 24 - 5
7.28 VLAN ACL on a Switch Mar 29 - 2
June 24 - 5
7.29 Spanning Tree Protocol (STP) Protection Using BPDU Guard and Loop Guard on a Switch Mar 29 - 3
June 24 - 6
7.3 DHCP Snooping on a Switch Mar 29 - 3
June 24 - 7
7.31 IP Source Guard on a Switch Mar 29 - 3
June 24 - 7
7.32 Dynamic ARP Inspection (DAI) on a Switch Mar 29 - 3
June 24 - 6
7.33 Disabling DTP on All Nontrunking Access Ports Mar 29 - 3
June 24 - 9
8 Identifying and Mitigating Network Attacks
Configuring and Troubleshooting Network Attacks
Note: This section uses the same products and technologies discussed in all the previous sections above particularly the Configuring Advanced Security section, but with greater focus and emphasis on reactive measures and attack mitigation Mar 29 Overall - 4
June 24 Overall - 6
8.01 Concept of Proactive vs. Reactive Measures Mar 29 - 6
June 24 - 7
8.02 Knowledge of Protocols: TCP, UDP, HTTP, SMTP, ICMP, FTP Mar 29 - 7
June 24 - 8
8.03 Knowledge of Common Attacks: Network Reconnaissance, IP Spoofing, DHCP Snooping, DNS Spoofing, MAC Spoofing, ARP Snooping, Fragment Attack, Smurf Attack, TCP SYN Attack Mar 29 - 6
June 24 - 7
8.04 Understanding and Interpreting ARP Header Structure Mar 29 - 4
June 24 - 7
8.05 Understanding and Interpreting IP Header Structure Mar 29 - 4
June 24 - 7
8.06 Understanding and Interpreting TCP Header Structure Mar 29 - 4
June 24 - 7
8.07 Understanding and Interpreting UDP Header Structure Mar 29 - 4
June 24 - 7
8.08 Understanding and Interpreting HTTP Header Structure Mar 29 - 4
June 24 - 6
8.09 Understanding and Interpreting ICMP Header structure Mar 29 - 4
June 24 - 7
8.1 Understanding and Interpreting ICMP Type Name and Codes Mar 29 - 5
June 24 - 7
8.11 Understanding and Interpreting Syslog Messages Mar 29 - 5
June 24 - 7
8.12 Understanding and Interpreting Packet Capture Outputs (Sniffer, Ethereal, Wireshark, TCPDump) Mar 29 - 6
June 24 - 7
8.13 Understanding Different Types of Attack Vectors Mar 29 - 5
June 24 - 7
8.14 Interpreting Various show and debug Outputs Mar 29 - 5
June 24 - 7
8.15 Traffic Characterization Mar 29 - 6
June 24 - 8
8.16 Packet Classification Mar 29 - 5
June 24 - 7
8.17 Packet-Marking Techniques Mar 29 - 4
June 24 - 6
8.18 Classifying Attack Patterns Using FPM Mar 29 - 3
June 24 - 7
8.19 Memorizing Common Protocol and Port Numbers Mar 29 - 6
June 24 - 8
8.2 Preventing an ICMP Attack Using ACLs Mar 29 - 6
June 24 - 8
8.21 Preventing an ICMP Attack Using NBAR Mar 29 - 5
June 24 - 7
8.22 Preventing an ICMP Attack Using Policing Mar 29 - 5
June 24 - 7
8.23 Preventing an ICMP Attack Using the Modular Policy Framework (MPF) on the Cisco ASA Security Appliance Mar 29 - 5
June 24 - 7
8.24 Preventing a SYN Attack Using ACLs Mar 29 - 5
June 24 - 7
8.25 Preventing a SYN Attack Using NBAR Mar 29 - 5
June 24 - 7
8.26 Preventing a SYN Attack Using Policing Mar 29 - 5
June 24 - 7
8.27 Preventing a SYN Attack Using CBAC Mar 29 - 6
June 24 - 8
8.28 Preventing a SYN Attack Using CAR Mar 29 - 5
June 24 - 7
8.29 Preventing a SYN Attack Using a TCP Intercept Mar 29 - 5
June 24 - 7
8.3 Preventing a SYN Attack Using the Modular Policy Framework (MPF) on the Cisco ASA Security Appliance Mar 29 - 6
June 24 - 7
8.31 Preventing Application ProtocolSpecific Attacks Using FPM (e.g., HTTP, SMTP) Mar 29 - 3
June 24 - 7
8.32 Preventing Application ProtocolSpecific Attacks Using NBAR (e.g., HTTP, SMTP) Mar 29 - 3
June 24 - 7
8.33 Preventing Application ProtocolSpecific Attacks Using the Modular Policy Framework (MPF) on the Cisco ASA Security Appliance (e.g., HTTP, SMTP) Mar 29 - 4
June 24 - 7
8.34 Preventing IP Spoofing Attacks Using Antispoofing ACLs Mar 29 - 5
June 24 - 7
8.35 Preventing IP Spoofing Attacks Using uRPF Mar 29 - 5
June 24 - 7
8.36 Preventing IP Spoofing Attacks Using IP Source Guard Mar 29 - 5
June 24 - 7
8.37 Preventing Fragment Attacks Using ACLs Mar 29 - 5
June 24 - 7
8.38 Preventing MAC Spoofing Attacks Using Port Security Mar 29 - 5
June 24 - 8
8.39 Preventing ARP Spoofing Attacks Using DAI Mar 29 - 4
June 24 - 6
8.4 Preventing VLAN Hopping Attacks Using the switchport mode access Command Mar 29 - 4
June 24 - 9
8.41 Preventing STP Attacks Using the Root Guard or BPDU Guard Mar 29 - 4
June 24 - 8
8.42 Preventing DHCP Spoofing Attacks Using Port Security Mar 29 - 5
June 24 - 7
8.43 Preventing DHCP Spoofing Attacks Using DAI Mar 29 - 4
June 24 - 6
8.44 Preventing Port Redirection Attacks Using ACLs Mar 29 - 4
June 24 - 6
Study Hours
March 24 – 20:00-