Knowledge Nugget

CCNA Security
Click to edit Master subtitle style
Jaskaran Kalsi (jkalsi@cisco.com) Assoc. Technical Manager Europe North & South; Europe Central Cisco Networking Academy
2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1

Overview CCNA Security Goals Whats Changed in v1.1 New Equipment Requirements

CCNA Security

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

CCNA Security
CCNA Security provides a next step for individuals wanting to

enhance their CCNA-level skill set.

Curricula provides an introduction to core security concepts

and skills needed for:

Troubleshooting Monitoring of network devices

CCNA Security helps prepare students for entry-level security

career opportunities and the globally recognized CCNA Security certification.

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

CCNA Security Course Goals

CCNA Security helps students:
Understand core security concepts and how to

develop and implement security policies to mitigate risks troubleshoot network security using actual equipment and simulation tools

Acquire skills needed configure, monitor, and

Prepare for CCNA Security certification exam Start or build a career in network security Differentiate themselves in the market with

specialized skills and expertise to achieve success

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

CCNA Security v1.1

Key Competencies
Upon completion of the course, students will be able to:

Subtitle: Size 24, Left Aligned

Describe the security threats facing modern network infrastructures Secure network device access Implement AAA on network devices Mitigate threats to networks using ACLs Implement secure network management and reporting Mitigate common Layer 2 attacks Implement the Cisco IOS firewall feature set Implement an ASA Implement the Cisco IOS IPS feature set Implement site-to-site IPSec VPNs Administer effective security policies

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

New in CCNA Security v1.1

Aligns with updated CCNA Security (IINS) Certification Exam

(640-554) Cisco ASA content added in a new chapter (Ch. 10) including four ASA labs Cisco Configuration Professional (CCP) replaced Security Device Manager (SDM) throughout the course content and labs Expanded scope of existing content, including the following:

Info on mitigating SNMP threats Discussion on IPv6 ACLs and object groups Content on IPS Global Correlation and Security Intelligence Operation (SIO) Info on Bridge Protocol Data Unit (BPDU) filtering Info on Cisco protected port feature (PVLAN Edge) Content on Cisco SecureX security architecture Info on the Secure Copy (SCP) command
Cisco Confidential 6

2010 Cisco and/or its affiliates. All rights reserved.

Course & Certification Availability

End-of-Life Milestones for CCNA Security v1.0
End-of-Life Announcement 8-MAR-2012 Last Class Start Date 31-May-2012 Last Class End date 31-Aug-2012 End-of-Support and End-of-Availability 31-Aug-2012

Cisco IINS Certification Exam Availability

Course CCNA Security v1.0 CCNA Security v1.1 Exam Name IINS IINS Exam Number 640-553 640-554 Availability Available through September 30, 2012 From February 28, 2012

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

CCNA Security v1.1

Equipment Requirements
Minimum System Requirements
Curriculum requirements:
1 Student PC per student 1 local curriculum server

Lab bundle requirements for CCNA Security:

3 Cisco routers, 2 with the Security Technology Package 3 Two-Port Serial WAN Interface Cards 3 Cisco switches 1 Cisco Adaptive Security Appliance (ASA) Assorted Ethernet and Serial cables and hubs Detailed equipment information is available in the Instructor version of the Lab Manual and in the official CCNA Security Equipment List on in the Equipment Information section on Academy Connection.

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Thank you.

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential