CCIE Security Lab candidates who are two or more months away from their lab exam. Because this class does not cover introductory material students are expected to have at least a CCSP level of knowledge and experience with the topics covered.

This class will also benefit CCIE candidates who may have attempted the actual CCIE Security Lab Exam without passing and feel they need to take their knowledge and understanding of Security topics to the next level before attempting the Lab again.

Internetwork Expert's CCIE Security Advanced Technologies Class Online is a five-day instructor-led class delivered through our state-of-the-art online classroom. This class uses a hands-on lecture approach that is designed to provide students with a CCIE level of understanding of the technologies covered in Cisco Systems' CCIE Security Lab Exam. It will take your understanding to the next level that is required to obtain the CCIE certification. This class delves deep into advanced implementations of Security topics, as well as advanced interactions that occur when multiple technologies are used in tandem. Understanding the topics covered in this class will ensure that students are ready to take the next step in their CCIE preparation, applying the technologies in full-scale 8-hour lab scenarios.

At-a-Glance

• Course length is five days, Monday - Friday.
• Class is delivered through our state-of-the-art online classroom software allowing students to attend from any location with a computer and Internet access.  
• Online class starts at 7am Pacific time and typically runs 8+ hours per day.

Class Topics

This class is based on the January 2007 Blueprint for the CCIE Security Lab Exam. Below is a short list of some of the technologies covered in the CCIE Security Advanced Technologies Class Online. This list is not meant to be exhaustive or all-inclusive, but is a rough guideline as to what topics will be generally covered in the class.

• Firewall
  • PIX and ASA Firewall
    • Basic Initialization
    • Access Management
    • Address Translation
    • ACLs
    • IP Routing
    • Object Groups
    • VLANs
    • AAA
    • VPNs
    • Filtering
    • Failover
    • Layer 2 Transparent Firewall
    • Security Contexts (Virtual Firewall)
    • Modular Policy Framework
    • Application-Aware Inspection
    • High Availability Scenarios
    • QoS Policies
    • Other Advanced Features
  • IOS Firewall
    • CBAC
    • Audit
    • Auth Proxy
    • PAM
    • Access Control
    • Performance Tuning
    • Advanced Features

• VPN
  • IPSec LAN-to-LAN
  • SSL VPN
  • DMVPN
  • CA (PKI)
  • Remote Access VPN
  • VPN3000 Concentrator
  • VPN3000 IP Routing
  • Unity Client
  • WebVPN
  • EzVPN Hardware Client
  • XAuth, Split-tunnel, RRI, NAT-T
  • High Availability
  • QoS for VPN
  • GRE, mGRE
  • L2TP
  • PPTP
  • Advanced VPN Features

• Intrusion Prevention System (IPS)
  • IPS 4200 Series Sensor Appliance
  • Basic Initialization
  • Sensor Configuration
  • Sensor Management
  • Promiscuous and Inline Monitoring
  • Signature Tuning
  • Custom Signatures
  • Blocking
  • TCP Resets
  • Rate Limiting
  • Signature Engines
  • IDM
  • Event Action
  • Event Monitoring
  • IOS IPS
  • PIX IDS
  • SPAN, RSPAN
  • Advanced Features

• Identity Management
  • Security Protocols (RADIUS and TACACS+)
  • Cisco Secure ACS Configuration
  • Access Management (Telnet, SSH, Pwds, Priv Levels)
  • Proxy Authentication
  • Service Authentication (FTP, Telnet, HTTP, other)
  • Network Admission Control (NAC Framework solution)
  • 80
  • 1x
  • Advanced Features

• Advanced Security
  • Mitigation Techniques
  • Packet Marking Techniques
  • Security RFCs (RFC1918, RFC2827, RFC2401)
  • Service Provider Security
  • Black Holes, Sink Holes
  • RTBH Filtering (Remote Triggered Black Hole)
  • Traffic Filtering using Access-lists
  • NAT
  • TCP Intercept
  • uRPF
  • CAR
  • NBAR
  • NetFlow
  • Flooding
  • Spoofing
  • Policing
  • Fragmentation
  • Sniffer Traces
  • Catalyst Management and Security
  • Traffic Control and Congestion Management
  • Catalyst Features and Advanced Configuration
  • IOS Security Features

• Network Attacks
  • Network Reconnaissance
  • IP Spoofing Attacks
  • MAC Spoofing Attacks
  • ARP Spoofing Attacks
  • Denial of Service (DoS)
  • Distributed Denial of Service (DDoS)
  • Man-in-the-Middle (MiM) Attacks
  • Port Redirection Attacks
  • DHCP Attacks
  • DNS Attacks
  • Fragment Attacks
  • Smurf Attacks
  • SYN Attacks
  • MAC Attacks
  • VLAN Hopping Attacks
  • Other Layer2 and Layer3 Attacks