Cisco Learning Connection

The software release 6.1 introduces a series of new features and several minor enhancements to the six products:

Cisco Guard
Cisco Anomaly Detector
Cisco Guard Module (1Gbps and 3Gbps flavors)
Cisco Anomaly Detector module (1Gbps and 2Gbps flavors)
This training was designed to provide an overview of the new features and enhancements , as well as basic operating and troubleshooting examples. Products documentation provides the most definite reference for all of these. Students should have prior experience and knowledge of the previous software releases (Release 6.0 and earlier).
At the end of this training, students will:

Understand the major new concepts introduced in Release 6.1
Receive basic operating examples (CLI and Web-Based Management Interface)

Welcome to the Cisco DDoS multiple Device Manager ver. 1.5 New Product Introduction training.

The MDM software allows you to monitor and manage multiple Detector and Guard devices that protect your network against Distributed Denial of Service (DDoS) attacks. The MDM runs on a Linux server and has a web-based GUI that provides easy access to network and device status and statistical information. The MDM also enables you to perform the following tasks:

•Define and manage the network zones, or regions of your network that the devices protect
•Display a consolidated view of ongoing and past attacks on all zones
•Display consolidated statistical information related to all zones and devices
•Create aggregated reports
•Configure or modify zone information on one device and then synchronize the zone to copy configuration information to the other zone devices
•Activate anomaly detection on all of the zone Detectors
•Activate zone protection (attack mitigation) on all of the zone Guards
•Activate the learning process on one, or all, of the zone devices

This training covers the new features and concepts that were added in MDM 1.5 . The assumption is the students are familiar with MDM 1.0 and the devices being managed by it:
Cisco Anomaly Guard
Cisco Anomaly detector.

This update builds upon the Secure Services Client 4.2 / 5.0 training from August 2007.

This training will look at both the maintenance releases since the last training and look forward to the release of the Secure Services Client 5.1. Specifically, this update includes: Secure Services Client 4.2.1, 5.0.1, 5.0.2, and 5.1.0.

The training is designed to provide fundamental and practical knowledge on the use and troubleshooting of the product as well as changes from previous versions.

At the end of this training, students will:
• Understand the different revisions of the Secure Services Client
• Understand the new features associated with each revision and why they are important to the product
• Understand how to configure the product to meet customer requirements
• Complete a lab installing, configuring, and troubleshooting the Secure Services Client 5.1.

Cisco® Secure Access Control Server (ACS) is an industry-leading access control server that provides a comprehensive identity-based networking solution to enterprise customers for network access (wired, wireless, remote access) and device administration. Cisco ACS extends security to users, machines, and device administrators by providing authentication, authorization, and accounting (AAA) services through robust access policies. These policies defining AAA access are managed from a centralized, identity-based networking framework that gives enterprise networks greater flexibility, mobility, and security resulting in user productivity gains.

The Cisco ACS family of products introduces the new Cisco Secure ACS Express 5.0, which is intended for commercial (fewer than 350 users), retail, and enterprise branch office deployments. The product offers a comprehensive yet simplified feature set, a cutting-edge user-friendly GUI, and an attractive price point that allows customers to deploy this product in situations where Cisco Secure ACS for Windows or Cisco Secure ACS Solution Engine may not be suitable.

Cisco ACS Express is available as a 1-rack-unit (RU), security-hardened appliance with a preinstalled Cisco Secure ACS Express license. Cisco ACS Express supports a maximum of 50 AAA clients and 350 unique user logons in a 24-hour period.

This training was designed to provide fundamental and practical knowledge on the use ACS Express. The assumption is that students already have prior experience and knowledge in AAA and other Cisco Secure ACS products.

At the end of this training, students will:
- understand feature differences between ACS 4 and ACS Express 5
- know how to configure ACS Express
- understand how to troubleshoot authentication problems
- understand how to troubleshoot system problems

Puts you on the fast track to utilizing the Set command in CSA 5.0. It includes a brief explanation of the Set command, followed by a demonstration on how to configure a rule using the Set command, apply that rule to a policy, and associate the policy to a group.

Puts you on the fast track to configuring Trusted QoS in CSA 5.0. It includes a brief explanation of Trusted QoS, followed by a demonstration on how to configure a rule module for trusted QoS, apply that rule to a policy, and associate the policy to a group.

An E-learning course using the Cisco Security Agent 5.0 product to protect host systems from intrusions and security threats. The Cisco Security Agent functions to protect from intrusions, as compared to simply detecting attempted intrusions. The course takes a task-oriented approach to teaching the skills to deploy and configure and administer the Cisco Security Agent to protect server and workstation hosts.

In this Quick Learning Module, you will learn how to use the Packet Tracer feature of the Cisco ASA to trace a packet during its life span in the ASA, which will enable proactive verification of an applied policy and aid easy troubleshooting on network issues.

Learn to use active/active failover to provide high availability for your network by enabling two Cisco ASA 5500 Series Adaptive Security Appliances to actively process traffic while serving as backup for each other. After a brief description of active/active failover and how it enables you to use load balancing on your network, watch a step-by-step demonstration of configuring active/active failover using an Ethernet failover link.

Learn to use the Modular Policy Framework to apply QoS policies and security policies on a traffic flow basis to achieve granular, flexible control over traffic traversing the security appliance. After a brief explanation of how the Modular Policy Framework functions, watch a step-by-step demonstration of the configuration process.

Learn how to migrate from the Cisco PIX 500 Series Security Appliance to the Cisco ASA 5500 Series Adaptive Security Appliance by performing three simple tasks. After a brief explanation of the migration tasks, watch a step-by-step demonstration of the process.

Learn how to use the Cisco Incident Control Server (Cisco ICS) to mitigate network worms and viruses. After a brief explanation of how the ICS works, watch a step-by-step demonstration of configuring the ICS and using the IDM to verify its functionality.

This document, ACS 4.0 Primer, has been designed to provide a primer to the Cisco Secure Access Control Server (ACS), version 4.0. It covers installation and configuration, ACS databases, ACS authentication, NAS interaction, and Network Access Profiles.

Learn two methods for simplifying the creation and management of access control lists (ACLs) on your Cisco ASA 5500 Series Adaptive Security Appliance. After a brief explanation of the two methods, object grouping and using commands to edit ACLs, watch a step-by-step demonstration of object group configuration.

Puts you on the fast track to configuring event action rules on the Cisco IPS. It includes a brief explanation of the how event action rules work, followed by a demonstration on how to configure an event action rule. This module is a supplement to the recommended training for individuals seeking certification as a Cisco CCSP.

Puts you on the fast track to configuring the meta event generator on Cisco IPS. It includes a brief explanation of meta events and how they work, followed by a demonstration on how to configure a meta event using IDM. This module is a supplement to the recommended training for individuals seeking certification as a Cisco CCSP.

Puts you on the fast track to configuring inline IPS. It includes a brief explanation of the difference between inline IPS and promiscuous mode IDS, followed by a demonstration on how to configuring inline IPS.

Learn the difference between uplink inline IPS and inline VLAN IPS as well as how to configure inline VLAN IPS. After a brief explanation of how inline VLAN IPS works, watch a step-by-step demonstration of the configuration process.

Learn how to use the Advanced Inspection and Prevention Security Services Module (AIP-SSM) to add intrusion prevention services to your Cisco ASA 5500 Series Adaptive Security Appliance. After a brief explanation of how the AIP-SSM works, watch a step-by-step demonstration.

Puts you on the fast track to being able to upgrade from IDS version 4.1 to IPS version 5.0. It includes a brief explanation of the files and procedure necessary to upgrade a sensor, followed by a demonstration on how to upgrade. This module is a supplement to the recommended training for individuals seeking certification as a Cisco CCSP.

Bring to bear your networking knowledge, gaming acumen, and awareness of Cisco solutions to tackle a trilogy of learning games. This trilogy combines the Network Defenders game, the Storage Area Network (SAN) Rover game, and the IPC Rockin' Retailer game.

Teaches how to lock down Ethernet switch security. It feature the "top ten" security steps every system administrator should take on their switches. Based on industry-vetted security procedures and Cisco switch security features, SECL contains technical tutorials, step-by-step procedures, configuration examples (Cisco IOS and CatOS), e-lab simulations, interactive exercises, and a built-in assessment test. Account Managers and Systems Engineers–gain security-specific knowledge that can help you win sales and design more secure systems!

Teaches the "top ten" steps to improving Cisco router security. It combines an updated version of the popular Cisco Router Security (CRS) course with the new Advanced Cisco Router Security (ACRS) course. Based on industry best practices and the newest in Cisco IOS security features, it contains tutorials, configuration examples, e-lab simulations, a built-in assessment to test your knowledge, and a course evaluation to provide feedback.

This VoD provides a detailed introduction to Security features and functions found in Cisco's line of Integrated Services Routers. Intended primarily for a Channel Sales audience.

CRS is designed to help you improve the security posture of Cisco routers under your control. It focuses on the top five steps you should take to elevate Cisco router security. The course is based on industry best practices Cisco IOS software features, such as AutoSecure and Security Device Manager.

Hands-on e-learning exercises provide you with a realistic simulation of the Cisco IOS software command-line interface. Challenging quizzes help you assess your knowledge and provide an optional link back to topic pages when you need additional study.

Multimedia overview of SMB Class Security, Mobility, Network Foundation, and IP Communications.

Part 1: Cisco applies a security philosophy within its own business environment that secures the information and infrastructure while still maintaining a culture of openness and trust with its employees.

Part 2: This seminar presents an overview of some of these security policies, and the technology and processes used to enforce these policies, within Cisco itself.

In this Quick Learning Module, you will identify functionalities of the Cisco ASA 5505 as an Easy VPN Hardware Client and learn how to configure the same via the Cisco ASDM.

In this Quick Learning Module, you will learn how to configure the L2TP/IPSEC feature on the Cisco ASA.

Learn how the VPN clustering, or load balancing, feature of the Cisco ASA 5500 Series Adaptive Security Appliance provides high VPN availability by enabling multiple ASAs to share their remote VPN session loads. After a brief explanation of VPN clustering, watch a step-by-step demonstration of using ASDM to perform the configuration steps.

Puts you on the fast track to configuring the Concentrator so WebVPN clients will be able to use the Cisco SSL VPN Client (for WebVPN), given an already functioning WebVPN configuration. It also explains the functionality and purpose of the Cisco SSL VPN Client.

Puts you on the fast track to configuring the Cisco Secure Desktop Software. It also describes the software necessary to install the CSD. Given an already functioning WebVPN configuration, this Quick Learning Module shows how to install the CSD software and configure it for WebVPN users on a VPN 3000 Concentrator.

Cisco migrated its European WAN to a service provider to a MPLS VPN network late in 2002. This MPLS VPN network has provided significant cost savings and other benefits to Cisco. This presentation describes the history and lessons learned.

Pt 1: Cisco Hardware VPN for Enterprise Class Teleworker
Cisco IT supports two different VPN remote access services: software VPN for flexible access from any Internet access point, and hardware VPN for high performance access from a home office. The hardware VPN solution supports QoS, firewall and IDS features based on Cisco IOS.

Pt 2: Deployment and Management

Learn to use the Cisco Secure Desktop (CSD) to provide end-point security for remote-access connections to your network. After a brief explanation of CSD and how it protects you from data theft and client system malware, watch a step-by-step demonstration of the installation and configuration process.

In this Quick Learning Module, you will learn how to set up different VLANs in the Cisco ASA 5505. You will also learn how to configure the various features of the Cisco ASA 5505 such as dynamic DNS and DHCP relay.