Catalog > All Topics

Cisco Secure Firewall Threat Defense and Intrusion Prevention for Site Operators (CSFSO)

Cisco
3 Days
Download Course Outline
$2,800.00
Request a Quote
28 Learning Credits
Share
Schedule
Export to CSV
  • No schedule events found for this course.
      • PC
        Private Class
        Privately train a group of your employees at your facility, virtually, or any of our locations.
    Request
  • LCLive Classroom
    Live Classroom
    Learn and interact with your instructor and peers in-person in our classrooms.
  • VCVirtual Classroom
    Virtual Classroom
    Attend any of our instructor-led classes virtually regardless of your physical location.
  • PCPrivate Class
    Private Class
    Privately train a group of your employees at your facility, virtually, or any of our locations.
  • GTRGuaranteed to Run
    Guaranteed to Run
    GTR classes are guaranteed to run as promised and delivered.
Course Summary
Show All

Description

The goal of the course is to train site operation personnel to better understand and troubleshoot the Cisco Secure Firewall Threat Defense on the network.

The course is intended to provide comprehensive Cisco Secure Firewall / IPS training for site operation personnel. The focus of this course will be the Firewall and IPS technologies to better equip the students to support their mission.

Outline

Course Introduction

  • Overview
  • Course Goal and Objectives
  • Course Flow
  • Your Training Curriculum
  • Learner Introductions

 

Section 1: Introducing Cisco Secure Firewall Threat Defense

Objectives:

  • Describe Cisco Secure Firewall Threat Defense.

 

This lesson includes these topics:

  • Need for a Firewall
  • Objectives:
  • Introduce firewall concepts and technologies with examples of each type.
  • Traditional Network Security and the New Reality
  • Objectives:
  • Describe traditional network security and how it does not keep up with today’s modern threats.
  • Cisco Secure Portfolio
  • Objectives:
  • Provide an overview of the traditional security workplace and how it has changed to an evolving workplace.
  • Cisco Secure Firewall Threat Defense Features Overview
  • Objectives:
  • Provide an overview of Cisco Secure Firewall Threat Defense features.
  • Cisco Secure Firewall Threat Defense Platform Overview
  • Objectives:
  • Describe the different Cisco Secure Firewall deployments and recommendations for any size network and deployment type.
  • Cisco Secure Firewall Use Cases
  • Objectives:
  • Describe typical use cases for Cisco Secure Firewall.
  • Cisco Secure Firewall Licensing
  • Objectives:
  • Describe permanent licensing of the Cisco Secure Firewall devices when using Permanent License Reservation (PLR) method and show the user to configure/convert the FMC license model to PLR (using terminal).

 

Section 2: Describing Cisco Secure Firewall Threat Defense Deployment Options

Objectives:

  • Describing Cisco Secure Firewall Threat Defense Deployment Options

 

This lesson includes these topics:

  • Deployment Modes Overview
  • Objectives:
  • Describe the deployment options of Cisco Secure Firewall, including firewall modes, IPS interface modes, and redundancy options.
  • Firewall Deployment Mode
  • Objectives:
  • Describe transparent and routed firewall modes for Cisco Secure Firewall.
  • Configuring Global Interfaces
  • Objectives:
  • Describe the Cisco Secure Firewall supported types of interfaces for management and network traffic
  • Configuring IPS Interfaces
  • Objectives:
  • Describe the role of IPS in the network and how IPS-only interfaces augment IPS deployments
  • Resilient and Scalable Design
  • Objectives:
  • Overview of resilience using Cisco high availability and clustering configuration options of Cisco Secure Firewall and high availability for the Cisco Secure Firewall Management Center

 

Section 3: Describing Cisco Secure Firewall Threat Defense Management Options

Objectives:

  • Describe management options for Cisco Secure Firewall Threat Defense

 

This lesson includes these topics:

  • Cisco Secure Firewall Threat Defense Management Overview
  • Objectives:
  • Provide an overview of management options for Cisco Firepower Threat Defense
  • Cisco Secure Firewall Management Center
  • Objectives:
  • Describe basic functionalities of Cisco Secure Firewall Management Center
  • Cisco Secure Firewall Threat Defense Device Manager
  • Objectives:
  • Describe basic functionalities of Cisco Secure Firewall Device Manager
  • Cisco Defense Orchestrator
  • Objectives:
  • Describe basic functionalities of Cisco Defense Orchestrator

 

Section 4: Configuring Basic Network Settings on Cisco Secure Firewall Threat Defense

Objectives:

  • Configure basic initial settings on Cisco Secure Firewall Threat Defense

 

This lesson includes these topics:

  • Initial Cisco Secure Firewall Threat Defense Setup
  • Objectives:
  • Perform basic Cisco Secure Firewall setup by using setup wizard
  • Cisco Secure Firewall Management Center Initial Setup
  • Objectives:
  • Perform basic network settings on Cisco Secure Firewall Management Center
  • Cisco Secure Firewall Threat Defense Registration with Cisco Secure Firewall Management Center
  • Objectives:
  • Perform registration of Cisco Secure Firewall Threat Defense device with Cisco Secure Firewall Management Center
  • Cisco Secure Firewall Threat Defense Device Management
  • Objectives:
  • Describe how to edit basic Cisco Secure Firewall Threat Defense device settings
  • Interfaces and Security Zones Configuration
  • Objectives:
  • Configure basic interface properties and assign interface to security zone
  • Static Routing Configuration
  • Objectives:
  • Configure static routing on Cisco Secure Firewall Threat Defense
  • Platform Settings Configuration
  • Objectives:
  • Configure platform settings on Cisco Secure Firewall Threat Defense
  • Health Policy
  • Objectives:
  • Explain how to monitor system health using health policy
  • Discovery 1: Perform Initial Device Setup
  • Objectives:
  • Configure initial Cisco Secure Firewall Threat Defense device setup.

 

Section 5: Configuring High Availability on Cisco Secure Firewall Threat Defense

Objectives:

  • Configure high availability on Cisco Secure Firewall Threat Defense

 

This lesson includes these topics:

  • Active/Standby Failover Overview
  • Objectives:
  • Provide an overview of active/standby high availability feature on Cisco Secure Firewall Threat Defense
  • Stateless and Stateful Failover
  • Objectives:
  • Explain difference between stateless and stateful failover configuration
  • Health Monitor Initiated Failover
  • Objectives:
  • Explain how Cisco Secure Firewall Threat Defense monitors overall health and interface health to trigger failover in high availability pair
  • Active/Standby Failover Configuration
  • Objectives:
  • Configure and verify Active/Standby failover on Cisco Secure Firewall Threat Defense
  • Verify and Troubleshoot Active/Standby High Availability
  • Objectives:
  • Monitor and troubleshoot Active/Standby failover on Cisco Secure Firewall Threat Defense
  • Discovery 2: Configure High Availability
  • Objectives:
  • Configure and verify Active/Standby failover on Cisco Secure Firewall Threat Defense.

Section 6: Managing Cisco Secure Firewall Threat Defense System

Objectives:

  • Perform basic management and system administration tasks on Cisco Secure Firewall Threat Defense.

 

This lesson includes these topics:

  • Update Management
  • Objectives:
  • Explain how to implement Cisco Secure Firewall Threat Defense system updates.
  • Describe and show the process for updating their system (firmware, database, virus signatures, etc.) from an air-gapped perspective (no internet access).
  • User Account Management
  • Objectives:
  • Describe the user management options and explain how to configure local user accounts.
  • Backup of the System
  • Objectives:
  • Explain how to perform backup of the Cisco Secure Firewall Threat Defense and Cisco Secure Firewall Management Center.
  • Configuration Export and Import
  • Objectives:
  • Explain how to copy configuration between different appliances.
  • Configuration Rollback
  • Objectives:
  • Explain the Cisco Secure Firewall Management Center configuration rollback feature.
  • Discovery 3: Manage Cisco Secure Firewall Threat Defense System
  • Objectives:
  • Perform basic management and system administration tasks on Cisco Secure Firewall Threat Defense.

 

Section 7: Troubleshooting Basic Traffic Flow

Objectives:

  • Perform basic traffic flow troubleshooting on Cisco Secure Firewall Threat Defense.

 

This lesson includes these topics:

  • Cisco Secure Firewall Threat Defense CLI
  • Objectives:
  • Explain basics of Cisco Secure Firewall Threat Defense command line interface.
  • Traffic Flow Troubleshooting Process and Tools
  • Objectives:
  • Provide an overview of traffic flow troubleshooting process and tools that can be used during this process.
  • Describe and configure the best practices for configuring event logging to the FMC event viewer.
  • Traffic Flow Troubleshooting Examples
  • Objectives:
  • Provide a complete traffic flow troubleshooting process on a sample traffic.
  • Discovery 4: Secure Firewall Troubleshooting Fundamentals
  • Objectives:
  • Perform basic traffic flow troubleshooting scenarios on Cisco Secure Firewall Threat Defense.

 

Section 8: Cisco Secure Firewall Threat Defense Device Manager

Objectives:

  • Manage Cisco Secure Firewall Threat Defense with Cisco Secure Firewall Threat Defense Manager.

 

This lesson includes these topics:

  • Cisco Secure Firewall Threat Defense Device Manager Initial Configuration
  • Objectives:
  • Configure initial network settings using Cisco Secure Firewall Threat Defense Manager.
  • Cisco Secure Firewall Threat Defense Device Manager Policies Overview
  • Objectives:
  • Provide an overview of policies available on Cisco Secure Firewall Threat Defense Device Manager.

Section 9: Describing Advanced Deployment Options on Cisco Secure Firewall Threat Defense

Objectives:

  • Describe advanced deployment options on Cisco Secure Firewall Threat Defense

 

This lesson includes these topics:

  • Cisco Secure Firewall Threat Defense Architecture
  • Objectives:
  • Describe Cisco Secure Firewall Threat Defense architecture.
  • FXOS and Secure Firewall Chassis Manager
  • Objectives:
  • Explain the role of FXOS and Firepower Chassis Manager.
  • Multi-Instance Deployment
  • Objectives:
  • Explain multi-instance Cisco Secure Firewall Threat Defense deployment.
  • Cluster Deployment
  • Objectives:
  • Explain cluster deployment of Cisco Secure Firewall Threat Defense.
  • Cluster Configuration
  • Objectives:
  • Explain cluster configuration of Cisco Secure Firewall Threat Defense

 

Section 10: Troubleshooting Advanced Traffic Flow on Cisco Secure Firewall Threat Defense

Objectives:

  • Troubleshoot advanced traffic flow on Cisco Secure Firewall Threat Defense.

 

This lesson includes these topics:

  • Traffic Flow Overview
  • Objectives:
  • Describe the traffic flow on Cisco Secure Firewall Threat Defense.
  • Troubleshooting Tools
  • Objectives:
  • Describe the available troubleshooting tools on Cisco Secure Firewall Threat Defense.
  • Troubleshooting Process
  • Objectives:
  • Describe the troubleshooting process on Cisco Secure Firewall Threat Defense.
  • Performance Troubleshooting
  • Objectives:
  • Describe the available tools and the process to determine performance related problems on Cisco Secure Firewall Threat Defense.
  • Discovery 5: Troubleshooting Cisco Secure Firewall Threat Defense
  • Objectives:
  • Advanced Troubleshooting topics