CCIE Security Lab (v6.0) Certification Online Training

Syllabus of CCIE Security Lab (v6.0) Certification Online Training

• Deployment modes on Cisco ASA and Cisco FTD
• Firewall features on Cisco ASA and Cisco FTD
• Security features on Cisco IOS/IOS-XE
• Cisco Firepower Management Center (FMC) features
• NGIPS deployment modes
• Next Generation Firewall (NGFW) features
• Detect, and mitigate common types of attacks
• Clustering/HA features on Cisco ASA and Cisco FTD
• Policies and rules for traffic control on Cisco ASA and Cisco FTD
• Routing protocols security on Cisco IOS, Cisco ASA and Cisco FTD
• Network connectivity through Cisco ASA and Cisco FTD
• Correlation and remediation rules on Cisco FMC

• AnyConnect client-based remote access VPN technologies on Cisco ASA
• Cisco FTD, and Cisco Routers
• Cisco IOS CA for VPN authentication
• FlexVPN, DMVPN, and IPsec L2L Tunnels
• Uplink and downlink MACsec (802.1AE)
• VPN high availability using
• Infrastructure segmentation methods

• Device hardening techniques
• Control plane protection methods
• Management plane protection techniques
• Data plane protection techniques
• Layer 2 security techniques
• Wireless security technologies
• Monitoring protocols
• Security features such as security policies, procedures, and standards
• Cisco SAFE model to validate network security design and to find security threats
• to different Places in the Network
• Using basic Python scripts interaction with network devices through APIs
• Cisco DNAC Northbound APIs use cases

• ISE scalability using multiple nodes and personas
• Network access AAA with Cisco ISE with Cisco switches and Cisco Wireless LAN Controllers
• Cisco devices for administrative access with ISE
• AAA for network access with 802.1X and MAB using ISE
• Lifecycle management using ISE and Cisco Wireless LAN controllers
• BYOD on-boarding and network access flows
• ISE integration with external identity sources
• Provisioning of AnyConnect with ISE and ASA
• Posture assessment with ISE
• Endpoint profiling using ISE and Cisco network infrastructure
• Integration of MDM with ISE
• Certificate-based authentication using ISE
• Authentication methods
• Identity mapping on ASA, ISE, WSA, and FTD
• pxGrid integration between security devices WSA, ISE, and Cisco FMC
• Integration of ISE with multi-factor authentication
• Access control and single sign-on using Cisco DUO security technology

• AMP for networks, AMP for endpoints, and AMP for content security
• Detect, analyze, and mitigate malware incidents
• Do the packet capture and analysis with Wireshark, tcpdump, SPAN
• ERSPAN, and RSPAN
• DNS layer security, intelligent proxy, and user identification using Cisco
• Umbrella
• User identification, Web filtering, and Application Visibility
• WCCP redirection on Cisco devices
• Email security features
• HTTPS decryption and inspection
• SMA for centralized content security management
• Cisco advanced threat solutions and their integration