Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention (SFWIPA)

 

Course Overview

The Securing Data Center Networks and VPNs with Cisco Secure Firewall Threat Defense training shows you how to deploy and configure Cisco Secure Firewall Threat Defense system and its features as a data center network firewall or as an Internet Edge firewall with Virtual Private Network (VPN) support. You will learn how to configure identity-based policies, Secure Sockets Layer (SSL) decryption, remote-access VPN, and site-to-site VPN before moving on to advanced Intrusion Prevention System (IPS) configuration and event management, integrations with other systems, and advanced troubleshooting. You will also learn how to automate configuration and operations of Cisco Secure Firewall Threat Defense system using programmability and Application Programming Interfaces (APIs) and how to migrate configuration from Cisco Secure Firewall Adaptive Security Appliances (ASA).

This training prepares you for the 300-710 Securing Networks with Cisco Firepower (SNCF) exam. If passed, you earn the Cisco Certified Specialist – Network Security Firepower certification and satisfy the concentration exam requirement for the Cisco Certified Networking Professional (CCNP) Security certification. This training also earns you 40 Continuing Education (CE) credits toward recertification.

How You'll Benefit

This training will help you:

  • Attain advanced knowledge of Cisco Secure Firewall Threat Defense technology
  • Gain competency and skills required to implement and manage a Cisco Secure Firewall Threat Defense system regardless of platform
  • Learn detailed information on policy management, traffic flow through the system, and the system architecture
  • Deploy and manage many of the advanced features available in the Cisco Secure Firewall Threat Defense system
  • Gain knowledge for protocols, solutions, and designs to acquire professional-level and expert-level data center roles
  • Earn 40 CE credits toward recertification

What to Expect in the Exam

300-710 SNCF: Securing Networks with Cisco Firepower is a 90-minute exam associated with the Cisco Certified Specialist – Network Security Firepower certification and satisfies the concentration exam requirement for the CCNP Security certification.

The multiple-choice format tests your knowledge of Cisco Firepower Threat Defense and Firepower 7000 and 8000 Series virtual appliances, including:

  • Policy configurations
  • Integrations
  • Deployments
  • Management and troubleshooting

Who should attend

  • System Installers
  • System Integrators
  • System Administrators
  • Network Administrators
  • Solutions Designers

Certifications

This course is part of the following Certifications:

Prerequisites

The knowledge and skills you are expected to have before attending this training are:

  • Knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP)
  • Basic knowledge of routing protocols
  • Familiarity with the content explained in the Securing Internet Edge with Cisco Secure Firewall Threat Defense training

These skills can be found in the following Cisco Learning Offerings:

Course Objectives

  • Describe Cisco Secure Firewall Threat Defense
  • Describe advanced deployment options on Cisco Secure Firewall Threat Defense
  • Describe advanced device settings for Cisco Secure Firewall Threat Defense device
  • Configure dynamic routing on Cisco Secure Firewall Threat Defense
  • Configure advanced network address translation on Cisco Secure Firewall Threat Defense
  • Configure SSL decryption policy on Cisco Secure Firewall Threat Defense
  • Deploy Remote Access VPN on Cisco Secure Firewall Threat Defense
  • Deploy identity-based policies on Cisco Secure Firewall Threat Defense
  • Deploy site-to-site IPsec-based VPN on Cisco Secure Firewall Threat Defense
  • Deploy advanced access control settings on Cisco Secure Firewall Threat Defense
  • Describe advanced event management on Cisco Secure Firewall Threat Defense
  • Describe available integrations with Cisco Secure Firewall Threat Defense
  • Troubleshoot traffic flow using advanced options on Cisco Secure Firewall Threat Defense
  • Describe benefits of automating configuration and operations of Cisco Secure Firewall Threat Defense
  • Describe configuration migration to Cisco Secure Firewall Threat Defense

Outline: Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention (SFWIPA)

  • Introducing Cisco Secure Firewall Threat Defense
  • Describing Advanced Deployment Options on Cisco Secure Firewall Threat Defense
  • Configuring Advanced Device Settings on Cisco Secure Firewall Threat Defense
  • Configuring Dynamic Routing on Cisco Secure Firewall Threat Defense
  • Configuring Advanced NAT on Cisco Secure Firewall Threat Defense
  • Configuring SSL Policy on Cisco Secure Firewall Threat Defense
  • Deploying Remote Access VPN on Cisco Secure Firewall Threat Defense
  • Deploying Identity-Based Policies on Cisco Secure Firewall Threat Defense
  • Deploying Site-to-Site VPN on Cisco Secure Firewall Threat Defense
  • Configuring Snort Rules and Network Analysis Policies
  • Describing Advanced Event Management Cisco Secure Firewall Threat Defense
  • Describing Integrations on Cisco Secure Firewall Threat Defense
  • Troubleshooting Advanced Traffic Flow on Cisco Secure Firewall Threat Defense
  • Automating Cisco Secure Firewall Threat Defense
  • Migrating to Cisco Secure Firewall Threat Defense

Prices & Delivery methods

Online Training

Duration
5 days

Price
  • US $ 4,000
  • Cisco Learning Credits: 40
Classroom Training

Duration
5 days

Price
  • United States: US $ 4,000
  • Cisco Learning Credits: 40

Click on town name or "Online Training" to book Schedule

This is an Instructor-Led Classroom course
Instructor-led Online Training:   This is an Instructor-Led Online (ILO) course. These sessions are conducted via WebEx in a VoIP environment and require an Internet Connection and headset with microphone connected to your computer or laptop.
This is a FLEX course, which is delivered simultaneously in two modalities. Choose to attend the Instructor-Led Online (ILO) virtual session or Instructor-Led Classroom (ILT) session.

United States

Online Training 09:00 Eastern Daylight Time (EDT) Enroll
Online Training 09:00 Central Daylight Time (CDT) Enroll
Online Training 09:00 Eastern Daylight Time (EDT) Enroll
Online Training 09:00 Pacific Standard Time (PST) Enroll

Canada

Online Training 08:00 Eastern Daylight Time (EDT) Enroll
Online Training 08:00 Central Daylight Time (CDT) Enroll
Online Training 08:00 Eastern Daylight Time (EDT) Enroll
Online Training 08:00 Pacific Standard Time (PST) Enroll