CCNP Security SFWIPF – Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention

Course Certification

This course helps you prepare to take the:
Exam 300-710 SNCF Securing Networks with Cisco Firepower;

Course Outline

• Need for a Firewall
• Traditional Network Security and the New Reality
• Cisco Secure Portfolio
• Cisco Secure Firewall Threat Defense Features Overview
• Cisco Secure Firewall Threat Defense Platform Overview
• Cisco Secure Firewall Use Cases
• Cisco Secure Firewall Smart Licensing
• Deployment Modes Overview
• Firewall Deployment Mode
• Configuring Global Interfaces
• Configuring IPS Interfaces
• Resilient and Scalable Design
• Cisco Secure Firewall Threat Defense Management Overview
• Cisco Secure Firewall Management Center
• Cisco Secure Firewall Threat Defense Device Manager
• Cisco Defense Orchestrator
• Initial Cisco Secure Firewall Threat Defense Setup
• Cisco Secure Firewall Management Center Initial Setup
• Cisco Secure Firewall Threat Defense Registration with Cisco Secure Firewall Management Center
• Cisco Secure Firewall Threat Defense Device Management
• Interfaces and Security Zones Configuration
• Static Routing Configuration
• Platform Settings Configuration
• Health Policy
• Perform Initial Device Setup
• Active/Standby Failover Overview
• Stateless and Stateful Failover
• Health Monitor Initiated Failover
• Active/Standby Failover Configuration
• Verify and Troubleshoot Active/Standby High Availability
• Configure High Availability
• NAT Overview
• Auto NAT Configuration
• Configure Network Address Translation
• Objects Overview
• Policies Overview
• Cisco Secure Firewall Engines and Detailed Packet Processing
• Discovery Policy Overview
• Network Discovery Policy Configuration
• Discovery Events and Host Profile Analysis
• Configure Network Discovery
• Prefilter Policy Overview
• Prefilter Policy Configuration
• Connection Events Analysis
• Access Control Policy Overview
• Access Control Policy Rules and Rule Actions
• Access Control Policy Deployment
• Access Control Policy Best Practices
• Configure Prefilter and Access Control Policy
• Security Intelligence Overview
• Security Intelligence Objects
• IP and URL Security Intelligence Configuration and Verification
• DNS Security Intelligence Configuration and Verification
• Configure Security Intelligence
• File Policy Overview
• Network Malware Protection and File Type Detection Architecture
• File Policy Configuration
• Malware and File Events Analysis
• Implement File Control and Advanced Malware Protection
• IPS and Snort Introduction
• Intrusion (Snort) Rule Introduction
• Intrusion Policy Fundamentals
• Creating Customizable (User Created) IPS Policies
• Intrusion Event Overview
• Configure Cisco Secure IPS
• Events Overview
• Indications of Compromise
• Context Explorer
• Dashboards
• Reports
• Using the Unified Event Viewer
• Threat Analysis Example
• Detailed Analysis Using the Firewall Management Center
• Update Management
• User Account Management
• Backup of the System
• Configuration Export and Import
• Configuration Rollback
• Manage Cisco Secure Firewall Threat Defense System
• Cisco Secure Firewall Threat Defense CLI
• Traffic Flow Troubleshooting Process and Tools
• Traffic Flow Troubleshooting Examples
• Secure Firewall Troubleshooting Fundamentals
• Cisco Secure Firewall Threat Defense Device Manager Initial Configuration
• Cisco Secure Firewall Threat Defense Device Manager Policies Overview
• Configure Managed Devices Using Cisco Secure Firewall Device Manager

Course Mode

Instructor-Led Remote Live Classroom Training;

Trainers

Trainers are Cisco Official Instructors and certified in other IT technologies, with years of hands-on experience in the industry and in Training.

Lab Topology

For all types of delivery, the Trainee can access real Cisco equipment and systems in our laboratories or directly at the Cisco data centers remotely 24 hours a day. Each participant has access to implement the various configurations thus having a practical and immediate feedback of the theoretical concepts.
Here are some Cisco Labs network topologies available: