Securing Network With Cisco Firepower (SNCF) 300-710
Duration
5 Days (40 Hours)
Price
$1,400.00
The Securing Networks with Cisco Firepower course shows you how to deploy and use Cisco Firepower® Next-Generation Intrusion Prevention System (NGIPS).
This hands-on course gives you the knowledge and skills to use the platform features and includes firewall security concepts, platform architecture and key features;
in-depth event analysis including detection of network-based malware and file type, NGIPS tuning and configuration including application control, security intelligence, firewall,
and network-based malware and file controls; Snort® rules language; file and malware inspection, security intelligence, and network analysis policy configuration designed to detect traffic patterns;
configuration and deployment of correlation policies to take action based on events detected; troubleshooting; system and user administration tasks, and more.
This course helps you prepare to take the exam, Securing Networks with Cisco Firepower (300-710 SNCF), which leads to CCNP Security and Cisco Certified Specialist–Network Security Firepower certifications.
The 300-710 SNCF exam has a second preparation course as well, Securing Networks with Cisco Firepower Next Generation Firewall (SSNGFW).
Learning Objectives
Describe the components of Cisco Firepower Threat Defense and the managed device registration process
Detail Next-Generation Firewalls (NGFW) traffic control and configure the Cisco Firepower system for network discovery
Implement access control policies and describe access control policy advanced features
Configure security intelligences features and the Advanced Malware Protection (AMP) for Networks implementation procedure for file control and advanced malware protection
Implement and manage intrusion and network analysis policies for NGIPS inspection
Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
Integrate the Cisco Firepower Management Center with an external logging destination
Describe and demonstrate the external alerting options available to Cisco Firepower Management Center and configure a correlation policy
Describe key Cisco Firepower Management Center software update and user account management features
Identify commonly misconfigured settings within the Cisco Firepower Management Center and use basic commands to troubleshoot a Cisco Firepower Threat Defense device
-
-
-
Course Outline
Expand All
1 - Deployment
- 1.1 Implement NGFW modes
- 1.1.a Routed mode
- 1.1.b Transparent mode
- 1.2 Implement NGIPS modes
- 1.2.a Passive
- 1.2.b Inline
- 1.3 Implement high availability options
- 1.3.a Link redundancy
- 1.3.b Active/standby failover
- 1.3.c Multi-instance
- 1.4 Describe IRB configurations
2 - Configuration
- 2.1 Configure system settings in Cisco Firepower Management Center
- 2.2 Configure these policies in Cisco Firepower Management Center
- 2.2.a Access control
- 2.2.b Intrusion
- 2.2.c Malware and file
- 2.2.d DNS
- 2.2.e Identity
- 2.2.f SSL
- 2.2.g Prefilter
- 2.3 Configure these features using Cisco Firepower Management Center
- 2.3.a Network discovery
- 2.3.b Application detectors (Open AppID)
- 2.3.c Correlation
- 2.3.d Actions
- 2.4 Configure objects using Firepower Management Center
- 2.4.a Object Management
- 2.4.b Intrusion Rules
- 2.5 Configure devices using Firepower Management Center
- 2.5.a Device Management
- 2.5.b NAT
- 2.5.c VPN
- 2.5.d QoS
- 2.5.e Platform Settings
- 2.5.f Certificates
3 - Management and Troubleshooting
- 3.1 Troubleshoot with FMC CLI and GUI
- 3.2 Configure dashboards and reporting in FMC
- 3.3 Troubleshoot using packet capture procedures
- 3.4 Analyze risk and standard reports
4 - Integration
- 4.1 Configure Cisco AMP for Networks in Firepower Management Center
- 4.2 Configure Cisco AMP for Endpoints in Firepower Management Center
- 4.3 Implement Threat Intelligence Director for third-party security intelligence feeds
- 4.4 Describe using Cisco Threat Response for security investigations
- 4.5 Describe Cisco FMC PxGrid Integration with Cisco Identify Services Engine (ISE)
- 4.6 Describe Rapid Threat Containment (RTC) functionality within Firepower Management Center
Target Audience