Updated February 2012

2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Overview

Course Design

Instructor Training

Where to Find More Information

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 2

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

CCNA Security helps students:

Understand core security concepts and how to

develop and implement security policies to mitigate risks

Acquire skills needed configure, monitor, and

troubleshoot network security using actual equipment and simulation tools

Prepare for CCNA Security certification exam

Start or build a career in network security

Differentiate themselves in the market with

specialized skills and expertise to achieve success

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 4

Upon completion of the course, students will be able to:

Describe the security threats facing modern network infrastructures Secure network device access Implement AAA on network devices Mitigate threats to networks using ACLs Implement secure network management and reporting Mitigate common Layer 2 attacks Implement the Cisco IOS firewall feature set Implement an ASA Implement the Cisco IOS IPS feature set Implement site-to-site IPSec VPNs Administer effective security policies

Subtitle: Size 24, Left Aligned

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 5

 Aligns with updated CCNA Security (IINS) Certification Exam (640-

554) Cisco ASA content added in a new chapter (Ch. 10) including four ASA labs Cisco Configuration Professional (CCP) replaced Security Device Manager (SDM) throughout the course content and labs Expanded scope of existing content, including the following:
Info on mitigating SNMP threats Discussion on IPv6 ACLs and object groups Content on IPS Global Correlation and Security Intelligence Operation (SIO) Info on Bridge Protocol Data Unit (BPDU) filtering Info on Cisco protected port feature (PVLAN Edge) Content on Cisco SecureX security architecture Info on the Secure Copy (SCP) command

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 6

End-of-Life Milestones for CCNA Security v1.0

End-of-Life Announcement 8-MAR-2012 Last Class Start Date 31-May-2012 Last Class End date 31-Aug-2012 End-of-Support and End-of-Availability 31-Aug-2012

Cisco IINS Certification Exam Availability

Course CCNA Security v1.0 CCNA Security v1.1 Exam Name IINS IINS Exam Number 640-553 640-554 Availability Available through September 30, 2012 From February 28, 2012

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 7

Who Should Enroll?

College and university-level students seeking career-oriented,

entry-level security specialist skills

IT professionals wishing to broaden or add specialized skills to

their technology expertise

Current CCNA Certification holders who wish to continue to build

on their CCNA knowledge base

Prerequisites: CCNA-level networking concepts and skills

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 8

ROUTE: Implementing IP Routing

Networking for Home and Small Businesses

Working at a Small-to-Medium Business or ISP Network Fundamentals Routing Protocols and Concepts LAN Switching and Wireless Accessing the WAN CCNA Security

SWITCH: Implementing IP Switched Networks TSHOOT: Troubleshooting and Maintaining IP Networks

Network Professional Network Specialist Network Associate Network Technician IT Technician

IT Essentials: PC Hardware and Software

Introducing Routing and Switching in the Enterprise Designing and Supporting Computer Networks

CCNP

CCNA Security CCNA Discovery CCNA Exploration

IT Essentials
PACKET TRACER

Student Networking Knowledge and Skills

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco Confidential 9

Courses Align with Globally Recognized Certifications

CompTIA A+ CCNA CCENT CCNA Security

CCNA

CCNP

IT Essentials

CCNA Discovery

CCNA Exploration

CCNA Security

CCNP

Student Networking Knowledge and Skills

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco Confidential 10

Certification Name

Years of Experience

Job Role

Number of Exams

CCNA Security

13

Network Security Specialist, Security Administrator, Network Security Support Engineer

CCNP Security

35

Network Security Engineer

CCIE Security

7+

Network Security Engineer

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 11

Meets Growing Demand

Verifies an individuals skills in the following roles:

Network Security Specialists Security Administrators Network Security Support Engineers

Enables installation, troubleshooting and

monitoring of Cisco Security devices/technologies

Ability to develop security policies and mitigate risk

in networks
Serves as prerequisite for CCNP Security

Certification
Employers hiring individuals can feel confident their

staff has the skills needed to install, troubleshoot and monitor Cisco security technologies
2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco Confidential 12

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

 Same Graphical User Interface (GUI) as the CCNA Discovery and CCNA

Exploration curricula 10 chapters and chapter exams

10 Packet Tracer activities 16 hands-on labs One Packet Tracer Practice skills-based assessment One final exam and one skills-based assessment Balance of theory, hands-on practice, and application Available in English only, no translated versions are planned Enabled for both in-person and blended learning environments

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 14

Equipment Requirements
Leverages CCNA Discovery/CCNA Exploration equipment bundle and topology and is identical to the v1.0 equipment list with the addition of a Cisco ASA (Model 5505). NDG NetLab-compatible topologyenabled for remote operation The Advanced IP Service feature set (ISR G1) and the Security Technology Package (SEC) license required are available for academies that are part of Networking Academy Maintenance

Minimum System Requirements

Curriculum requirements:
1 Student PC per student 1 local curriculum server

Lab bundle requirements for CCNA Security:

3 Cisco routers, 2 with the Security Technology Package 3 Two-Port Serial WAN Interface Cards 3 Cisco switches 1 Cisco Adaptive Security Appliance (ASA) Assorted Ethernet and Serial cables and hubs Detailed equipment information is available in the Instructor version of the Lab Manual and in the official CCNA Security Equipment List on in the Equipment Information section on Academy Connection.
2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco Confidential 15

Course Chapters and Goals

Ch. 1 Ch. 2 Ch. 3 Ch. 4 Ch. 5 Ch. 6 Ch. 7 Ch. 8 Ch. 9 Ch. 10 Modern Network Security Threats
Goal: Explain network threats, mitigation techniques, and the basics of securing a network.

Securing Network Devices

Goal: Securing administrative access on Cisco routers.

Authentication, Authorization and Accounting

Goal: Securing administrative access with AAA.

Implementing Firewall Technologies

Goal: Implement firewall technologies to secure the network perimeter.

Implementing Intrusion Prevention

Goal: Configure IPS to mitigate attacks on the network.

Securing the Local Area Network

Goal: Describe LAN security considerations and implement endpoint and Layer 2 security features.

Cryptographic Systems
Goal: Describe methods for implementing data confidentiality and integrity.

Implementing Virtual Private Networks

Goal: Implement secure virtual private networks.

Managing A Secure Network

Goal: Given the security needs of an enterprise, create and implement a comprehensive security policy.

Implementing the Cisco Adaptive Security Appliance (ASA)

Goal: Implement firewall technologies using the ASA to security the network perimeter.

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 16

 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

17

 All instructors should have CCNA-level

networking knowledge and skills New CCNA Security instructors Instructor training required Fast track possible with evidence of CCNA Security or higher certification or industry experience Instructor training format and materials Delivered by CCNA Security Training Centers or Instructor Training Centers (ITCs) 40 hours trainingin-person, blended (3day in-person), or remote delivery formats

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 18

 Instructor training is delivered by authorized CCNA Security

Training Centers
Open modelinstructors can participate in instructor training from

any training center in their region

Complete global list of authorized CCNA Security Training Centers

available on CCNA Security Course Catalog page on Academy Connection

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 19

Academy wants to offer CCNA Security

Has Instructor passed CCNA Security Training?

No

Register for a CCNA Security instructor training class with a CCNA Security Training Center or Instructor Training Center (ITC) in your region

Yes

Academies who have completed their Academy Evolution migration should contact the Networking Academy Global Support Desk to request the addition of the CCNA Security curriculum to their academy. If your academy has not yet completed migration ,your CCNA Security Training Center will be able to add the curriculum for you.

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 20

Academy Connection System Prerequisites

Students

No Academy Connection Prerequisites Prerequisites for Students must have: CCNA-level networking knowledge and skills Student Basic PC and internet navigation skills Enrollment Students encouraged to complete CCNA Discovery or CCNA Exploration curricula

Instructors

Prerequisites to Teach Student Classes

CCNA Security AND Orientation OR CCNA Security Instructor Fast Track AND Orientation

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 21

 Latest documents are posted on CCNA Security Course Catalog

page on Academy Connection

CCNA Security Scope and Sequence CCNA Security FAQs CCNA Security Datasheet CCNA Security At A Glance CCNA Security Overview Presentation The CCNA Security v1.1 Instructor learning opportunity located @

http://lms.netacad.net/index.php
Certification information CCNA Concentrations Q&A CCNA Security certification

2011 Cisco and/or its affiliates. All rights reserved. 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential Cisco Confidential 22

Thank you.