Cisco ^â Certified Firewall Specialist

Weekly Blog - What's Happening Now?

Cisco security certifications focus on the growing need for knowledgeable computer network professionals who can implement complete computer security solutions. Cisco Firewall Specialists focus on securing network access using Cisco IOS Software and Cisco PIX Firewall Technologies.  Includes training on:  Basic computer training and knowledge of the Windows operating system; Familiarity with the networking and security terms and concepts, and ; Familiar with encryption technologies: DES, 3DES, RSA, hashing algorithms (MD5/SHA), and IPSec.

Prerequisites:  Certification as a CCNA ^Ò 

Cisco Exams:             642-551 SND
                                    642-552 SNPA

 The Securing Cisco Network Devices 642-551 SND exam forms the foundation of the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certifications. Candidates can prepare for this exam by taking the SND course. This exam includes simulations and tests a candidate's knowledge and ability to describe, configure, and verify basic security features of Cisco Layer 2 devices, Cisco Routers, Cisco IDS/IPS Sensors, Cisco VPN 3000 Concentrators, and Cisco PIX Security Appliances.

Describe the products in the Cisco security portfolio and explain how they mitigate security threats to a computer network

Identify the appropriate devices to secure a network; Identify the appropriate device feature to secure a network; Describe the difference in functionality and capabilities of the different security devices; Identify security issues with common management protocols; Describe threats to a network and network devices; Identify different techniques to deal with security threats.  

Describe the security features available for a Cisco Layer 2 device in a secure network

Identify security features on a Layer 2 device; Describe basic security feature configurations on a Layer 2 device.  

Implement security on a Cisco IOS Router

Identify mitigation techniques for common physical router security threats; Configure router for secure administrative access; Implement basic AAA for router administrative authentication; Configure AutoSecure to harden Cisco routers; Configure router access lists to secure networks; Configure security for router services and interfaces; Implement Syslog logging; Identify major components of the SDM.  

Describe and configure Cisco IPS and HIPS

Configure user accounts; Describe and configure Network Access lists; Describe how the sensor device is secure by default; Install the sensor on the network; Describe the methods used to access a sensor; Describe the process for displaying the sensor configuration; Identify major components of IDM; Describe basic sensor operations; Describe the process of using alarms to identify network attacks; Identify the appropriate platform required to install the CSA MC; Configure the default group; Describe the process of agent kit deployment and verifying management of the agent; Describe key features and concepts of VMS; Describe the interoperability of the components of VMS; Describe the hardware and software requirements of VMS.  

Configure and verify basic remote access on a Cisco VPN 3000 Concentrator

Perform an initial configuration; Configure users and groups; Configure VPN clients; Verify IPSec tunnel establishment.  

Implement a Cisco PIX security appliance

Describe basic PIX security appliance hardware and software architecture; Identify appropriate PIX security appliance hardware and software configuration; Configure basic network settings using CLI; Configure basic interface features on a PIX security appliance; Verify initial configurations; Identify major components of the FWDM; Configure static address translation; Configure Network Address Translation; Configure firewall to secure inbound traffic; Verify inbound traffic restrictions; Describe basic IPSec topologies; Define the services provided by IPSec; Describe the IPSec protocol framework; Describe the IPSec algorithm framework; Describe the concepts of split tunneling; Describe the various authentication methods; Describe how the PIX security appliance uses IPSec to secure networks

Candidates can prepare for this exam by taking the SNPA v4.0 course. This exam includes simulations and tests a candidate's knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA security appliance products.

Install and configure a security appliance for basic network connectivity

Describe the Security Appliance hardware and software architecture; Determine the Security Appliance hardware and software configuration and verify if it is correct; Use setup or the CLI to configure basic network settings, including interface configurations; Use appropriate show commands to verify initial configurations; Configure NAT and global addressing to meet user requirements; Configure DHCP client option; Set default route; Configure logging options; Describe the firewall technology; Explain the information contained in syslog files; Configure static address translations; Configure Network Address Translations: PAT; Configure static port redirection; Configure a net static; Set embryonic and connection limits on the security appliance; Verify network address translation operation.  

Configure a security appliance to restrict inbound traffic from untrusted sources

Configure access-lists to filter traffic based on address, time, and protocols; Configure object-groups to optimize access-list processing; Configure Network Address Translations: Nat0; Configure Network Address Translations: Policy NAT; Configure java / active X filtering; Configure URL filtering; Verify inbound traffic restrictions.  

Configure a security appliance to provide secure connectivity using site-to-site VPNs

Explain certificates, certificate authorities and how they are used; Explain the basic functionality of IPSec; Configure IKE with preshared keys; Configure IKE to use certificates; Differentiate between the types of encryption; Configure IPSec parameters; Configure crypto-maps and ACLs.  

Configure a security appliance to provide secure connectivity using remote access VPNs

Explain the functions of EasyVPN; Configure IPSec using EasyVPN Server/Client; Configure the Cisco Secure VPN client; Explain the purpose of WebVPN; Configure WebVPN services: Server/Client; Verify VPN operations.  

Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance

Explain differences between L2 and L3 operating modes; Configure security appliance for transparent mode (L2); Explain purpose of virtual firewalls; Configure security appliance to support virtual firewall; Monitor and maintain virtual firewall; Explain the types, purpose and operation of fail-over; Install appropriate topology to support cable-based or LAN-based fail-over; Explain the hardware, software and licensing requirements for high-availability; Configure the SA for active/standby fail-over; Configure the SA for stateful fail-over; Configure the SA for active-active fail-over; Verify fail-over operation; Recover from a fail-over.  

Configure AAA services for access through a security appliance

Configure ACS for security appliance support; Configure security appliance to use AAA feature; Configure authentication using both local and external databases; Configure authorization using an external database; Configure the ACS server for downloadable ACLs; Configure accounting of connection start/stop; Verify AAA operation.  

Configure routing and switching on a security appliance

Enable DHCP server and relay functionality; Configure VLANs on a security appliance interface; Configure routing functionality of security appliance including OSPF, RIP; Configure security appliance to pass multi-cast traffic; Configure ICMP on the security appliance.  

Configure a modular policy on a computer security appliance

Configure a class-map; Configure a policy-map; Configure a service-policy; Configure a ftp-map; Configure a http-map; Configure an inspection protocol; Explain the function of protocol inspection; Explain DNS guard feature; Describe the AIP-SSM HW and SW; Load IPS SW on the AIP-SSM; Verify AIP-SSM; Configure an IPS modular policy  

Monitor and manage an installed security appliance

Obtain and apply OS updates; Backup and restore configurations and software; Explain the security appliance file management system; Perform password/lockout recovery procedures; Obtain and upgrade license keys; Configure passwords for various access methods: Telnet, serial, enable, SSH; Configure various access methods: Telnet, SSH, PDM; Configure command authorization and privilege levels; Configure local username database; Verify access control methods; Enable ASDM functionality; Verify a security appliance configuration via ASDM; Verify the licensing available on a security appliance.

CCNA Recertification:  The CCNA Certification is valid for three years. Certificate holders have a number of options for renewing their valid CCNA certification. Successful completion of the CCNA 640-801 or ICND 640-811 exams will extend the date that the CCNA certification is valid by three years from the exam date. Also, successful completion of any exam bearing the prefix 642-xxx will renew the CCNA certification for three years from the exam date. However, it is important to note that it is not possible to renew a certification after the expiration date has passed.

Cisco Firewall Specialist Recertification:  Cisco Firewall Specialist certifications are valid for two years. To recertify, either pass the current version of the exams, or pass a CCIE written exam.

Cisco has developed several recommended courses that are only available through a Cisco Certified Learning Partner. Hyperlearning Technologies is affiliated with another Virginia Beach Certification Training facility, to whom we outsource the Cisco certification training.  Refer to the CCNP website for information about the recommended training for each CCNP Certification exam.

All Cisco certification exams are administered through Cisco Test Delivery Partners, Prometric and Pearson VUE, worldwide.

Class Features:

We are an OppInc/Workforce Investment Act ( http://nex-step.org/job_seekers/workforce_centers.htm ) Approved Contractor; we participate with Tidewater Community College's (TCC) Virginia Workforce Development program ( http://www.tcc.edu/wd/ ); and we are approved for GI Bill computer certification.  We can even refer you to a bank (if your credit is good, or you have a co-signer)
If you have any questions or would like more information about our training or services, email or call or fax George Geyer, Will Harper, Roger W. Geyer, or Mary Russell, our Training Consultant.

HyperLearning Technologies
Microsoft Gold Certified Partner for Learning Solutions (CPLS)
Computer Training, Computer Certifications, Computer Bootcamps, Computer Classroom Rentals, Corporate Training and Corporate Meeting Rooms
google map to this location

PLEASE NOTE:
HyperLearning has moved to a bigger, better training facility on Feb 18, 2008.
Please update your records and visit us soon!
Click HERE to view Photographs
HyperLearning Technologies
3630 S. Plaza Trail, Suite 250
Virginia Beach, VA 23452
Phone:  757.495.0714 (Training Center)
757.495.5487 (Home Office)
757.651.1117 / 377.3165 (Cell)
Call any time between 8:00 AM and 8:30 PM.
After 5:00 PM, call the Training Consultant line, direct, at (757) 287-5674.
(Training Consultant direct line is not open until after 5:00 PM)
Fax: 757.495.3725
email:

[Projected Certification Training Night Class Schedule ] [ Technology Certification Certification Training Capabilities at HyperLearning Technologies in Virginia Beach ] [ Microsoft MSCE MCSA MCP MCDST MOUS / MOS Certification Training ] [ Data Cabling Fiber Optic Training and Certification ] [ Computer Security Training and Certification ] [ PMP Project Management Professional PMI Credential ] [ About HyperLearning Technology Certification Training ] [ Facility Description Nine and Twelve Student Hands-on Classrooms ] [ What Customers are Saying ] [ Web-based eMail Contact Form ]