SENSS 1.0: Secure Design Principles

Anyone wishing to obtain the Implementing Cisco Edge Network Security Solutions (SENSS) v1.0 certification; one of four designed for the CCNP Security track from Cisco. Knowledge of Cisco Certified Network Associate (CCNA) certification is required and knowledge of Cisco Certified Network Associate (CCNA) Security certification and Knowledge of Microsoft Windows Operating System are helpful.

Prerequisite
None

Expected Duration
90 minutes

Description
This course is intended to assist network architects and security practitioners with the appropriate placement of services into Network Security Zones. The Cisco modular network architecture best practices, designs, and configurations are introduced, and the necessary information to help network and security engineers succeed in designing, implementing, and operating secure network infrastructures based on Cisco products and technologies are covered. The course also describes the Cisco SecureX architecture and Cisco TrustSec, which are context-aware security solutions. Since the network infrastructure is one of the foundation elements of enterprise IT infrastructures and is a critical business asset of telecommunications service providers, this course concludes by providing an overview of network infrastructure protection controls on Cisco IOS routers, and switches, and describes some of its features.

Objective

Network Security Zoning

  • start the course
  • describe the concepts of Network Security Zones
  • describe Zoning
  • describe Zone Interface Point
  • identify placement of services within the network zone architecture

Cisco Modular Network and SecureX Architecture

  • describe Cisco modular network architecture principles and designs
  • match the Cisco SecureX security solution to its function
  • identify features of Cisco Security Intelligence Operations (SIO)
  • identify how Cisco Security Intelligence Operations (SIO) devices operate
  • describe the Cisco TrustSec solution architecture

Introducing Network Infrastructure Protection

  • recognize the need for network infrastructure protection
  • identify where to place network infrastructure protection into the Cisco modular network architecture design architectures
  • match the network device plane operation to its identified objective
  • describe plane security controls available
  • classify Layer 2 and Layer 3 data plane security controls

Practice: Implementing Secure Design Principles

  • describe the use of Network Security Zones, SecureX, and TrustSec within a security system design

MONTHLY SUBSCRIPTION

$129/month
 

ANNUAL SUBSCRIPTION

$1295/year

Multi-license discounts available for Annual and Monthly subscriptions.