CST 269 - Cisco Security

1. Explain network threats, mitigation techniques, and the basics of securing a network.
   1. Describe the fundamental principles of securing a network.
   2. Describe the characteristics of worms, viruses, and Trojan horses and mitigation methods.
   3. Describe common network attack methodologies and mitigation techniques such as Reconnaissance, Access, Denial of Service, and DDoS.
2. Secure administrative access on Cisco routers.
   1. Configure secure administrative access and router resiliency.
   2. Configure command authorization using privilege levels and role-based CLI.
   3. Configure network devices for monitoring.
   4. Secure IOS-based routers using automated features.
3. Secure administrative access with AAA.
   1. Describe the purpose of AAA and the various implementation techniques.
   2. Identify and implement AAA methods using the local database.
   3. Use AAA to construct security solutions using TACACS+ and RADIUS protocols.
4. Identify and deploy firewall technologies to secure the network perimeter.
   1. Configure and assess ACLs.
   2. Describe the purpose and operation of firewall technologies.
   3. Integrate and analyze CBAC.
   4. Deploy zone-based policy Firewall using SDM and CLI.
5. Configure IPS to mitigate attacks on the network.
   1. Describe the purpose and operation of network-based and host-based Intrusion Prevention.
   2. Configure Cisco IOS IPS operations using SDM and CLI.
6. Describe LAN security considerations and implement endpoint and Layer 2 security features.
   1. Describe endpoint vulnerabilities and protection methods.
   2. Describe basic catalyst switch vulnerabilities such as VLAN attacks, STP manipulation, CAM table overflow attacks, and MAC address spoofing attacks.
   3. Describe the fundamentals of Wireless, VoIP, SANS, and the associated security considerations.
   4. Configure and verify switch security features including port security and storm control.
   5. Describe Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN).
7. Describe methods for implementing data confidentiality and integrity.
   1. Describe how different types of encryption, hashes, and digital signatures work together to provide confidentiality, integrity, and non-repudiation.
   2. Describe the mechanisms to ensure data integrity.
   3. Describe the mechanisms used to ensure data confidentiality.
8. Implement secure virtual private networks.
   1. Describe the purpose and operation of VPN types.
   2. Describe the component and operations of IPSec VPNs.
   3. Configure and verify a site-to-site IPSec VPN with pre-shared key authentication using SDM and CLI.
   4. Configure and verify a remote access VPN.
   5. Configure and verify SSL VPNs.
9. Given the security needs of an enterprise, create and implement a comprehensive security policy.
   1. Describe the secure network lifecycle.
   2. Describe the components of a self-defending network and business continuity plans.
   3. Establish a comprehensive security policy to meet the security needs of a given enterprise.