4 CCNA Security Course Goals CCNA Security helps students:Understand core security concepts and how to develop and implement security policies to mitigate risksAcquire skills needed configure, monitor, and troubleshoot network securityPrepare for CCNA Security certification examStart or advance a career in network securityDifferentiate themselves in the market with specialized skills and expertise to achieve success
5 CCNA Security v1.1: Key Competencies Upon completion of this course, students will be able to:Describe security threats facing modern network infrastructuresSecure network device accessImplement AAA on network devicesMitigate threats to networks using ACLsImplement secure network management and reportingMitigate common Layer 2 attacksImplement the Cisco IOS firewall feature setImplement an adaptive security appliance (ASA)Implement the Cisco IOS Intrusion Prevention System (IPS) feature setImplement site-to-site IP Sec VPNsAdminister effective security policies
6 New Features in Version 1.1 Aligns with updated CCNA Security certification exam (IINS )Cisco Adaptive Security Appliances (ASA) content added in a new chapter (Chapter 10), including four ASA labsCisco Configuration Professional (CP) replaced Security Device Manager (SDM) throughout the course and labsExpanded content scope, including the following:Mitigating SNMP threatsIPv6 ACLs and object groupsCisco IPS Global Correlation and Security Intelligence Operation (SIO)Bridge Protocol Data Unit (BPDU) filteringCisco protected port feature (PVLAN edge)Cisco SecureX ArchitectureThe Secure Copy (SCP) command
7 Course and Certification Exam Availability End-of-Life Milestones for CCNA Security v1.0End-of-Life AnnouncementLast ClassStart DateEnd DateEnd-of-Support andEnd-of-Availability8-MAR-201231-May-201231-Aug-2012Cisco IINS Certification Exam AvailabilityCourseExam NameExam NumberAvailabilityCCNA Security v1.0IINSAvailable through 30-Sept-2012CCNA Security v1.1Available from 28-Feb-2012
8 CCNA Security Course Who Should Enroll? College and university-level students seeking career-oriented, entry- level security specialist skillsIT professionals wishing to broaden or add specialized skills to their technology expertiseCurrent CCNA Certification holders who wish to build on their CCNA knowledge basePrerequisites: CCNA-level networking knowledge and skills
9 Student Networking Knowledge and Skills Curricula PortfolioROUTE: Implementing IP RoutingSWITCH: Implementing IP Switched NetworksTSHOOT: Troubleshooting and Maintaining IP Networks Networking for Home and Small BusinessesWorking at a Small-to-Medium Business or ISPIntroducing Routing and Switching in the EnterpriseDesigning and Supporting Computer NetworksNetwork FundamentalsRouting Protocols and ConceptsLAN Switching and WirelessAccessing the WANNetwork ProfessionalCisco Packet TracerNetwork SpecialistNetwork AssociateCCNPCCNA SecurityCCNA SecurityNetwork TechnicianIT Essentials: PC Hardware and SoftwareCCNA DiscoveryCCNA ExplorationIT TechnicianIT EssentialsStudent Networking Knowledge and Skills
10 Alignment to Industry Certifications Courses Align with Globally Recognized CertificationsCCNA CCENTCCNACCNA SecurityCCNPCompTIA A+CCNPIT EssentialsCCNA SecurityCCNA DiscoveryCCNA ExplorationStudent Networking Knowledge and Skills
11 Cisco Security Certifications Certification NameYears of ExperienceJob RoleNumber of ExamsCCNA Security1 – 3Network Security Specialist, Security Administrator, Network Security Support Engineer1CCNP Security3 – 5Network Security Engineer4CCIE Security7+2
12 CCNA Security Certification Meets Growing Demand Verifies an individual’s skills in the following roles:Network Security SpecialistSecurity AdministratorNetwork Security Support EngineerPrerequisite for CCNP Security certificationPotential employers can feel confident that candidates have the skills needed to install, troubleshoot, and monitor Cisco security technologies.The U.S. National Security Agency (NSA) and the Committee on National Security Systems (CNSS) recognizes that the Cisco CCNA Security courseware meets the CNSS 4011 training standard (learn more).
14 CCNA Security v1.1 Course Design Same GUI as CCNA Discovery and CCNA Exploration curricula10 chapters and chapter exams10 Cisco Packet Tracer activities16 hands-on labsOne Packet Tracer Practice skills-based assessmentOne final exam and one skills-based assessmentBalance of theory, hands-on practice, and applicationAvailable in English only, no translated versions are plannedEnabled for both in-person and blended learning environments
15 CCNA Security v1.1 Equipment Requirements Leverages CCNA Discovery/Exploration equipment bundle and topology and is identical to v1.0 equipment list with the addition of a Cisco ASA (Model 5505)NDG NETLAB+ can be enabled for remote lab equipment operation.The required Advanced IP Services feature set (ISR G1) and the Security (SEC) technology package license are available for academies that are part of Networking Academy MaintenanceMinimum System RequirementsCurriculum requirements: 1 Student PC per student 1 local curriculum serverLab bundle requirements : 3 Cisco routers, 2 with the SEC technology package 3 two-port serial WAN interface cards 3 Cisco switches 1 Cisco Adaptive Security Appliance (ASA) Assorted Ethernet and Serial cables and hubsDetailed equipment information is available in the Instructor Lab Manual and the CCNA Security Equipment List located in the CCNA Security resources folder on Cisco NetSpace and in the Equipment Information area on Academy Connection.
16 CCNA Security Course Outline Course Chapters and GoalsChapter 1Modern Network Security ThreatsGoal: Explain network threats, mitigation techniques, and the basics of securing a network.Chapter 2Securing Network DevicesGoal: Secure administrative access on Cisco routers.Chapter 3Authentication, Authorization and AccountingGoal: Secure administrative access with AAA.Chapter 4Implementing Firewall TechnologiesGoal: Implement firewall technologies to secure the network perimeter.Chapter 5Implementing Intrusion PreventionGoal: Configure IPS to mitigate attacks on the network.Chapter 6Securing the Local Area NetworkGoal: Describe LAN security considerations and implement endpoint and Layer 2 security features.Chapter 7Cryptographic SystemsGoal: Describe methods for protecting data confidentiality and integrity.Chapter 8Implementing Virtual Private NetworksGoal: Implement secure virtual private networks.Chapter 9Managing A Secure NetworkGoal: Create and implement a comprehensive security policy to meet the security needs of an enterprise.Chapter 10Implementing the Cisco Adaptive Security Appliance (ASA)Goal: Implement firewall technologies using the ASA to secure the network perimeter.
18 CCNA Security Instructor Training All instructors should have CCNA-level networking knowledge and skillsInstructor training is required for new CCNA Security instructorsFast track option available with evidence of CCNA Security or higher certification or industry experienceInstructor training is delivered by Instructor Training Centers (ITCs)40-hour training: in-person, blended, or remote delivery formats
19 CCNA Security Instructor Resource Site The CCNA Security v1.1 Instructor Resource Site provides best practices, tips for classroom management and discussions, and teaching analogies index.php
21 For More InformationLatest documents are posted in the CCNA Security resources area, which can be accessed through the Offerings menu on NetSpace, or in the Course Catalog on Academy Connection:CCNA Security Scope and SequenceCCNA Security FAQsCCNA Security DatasheetCCNA Security At-a-GlanceCCNA Security Overview PresentationVisit the CCNA Security v1.1 Instructor Resource SiteVisit the CCNA Security certification page