• Describe key concepts of NGIPS and NGFW technology and the Cisco Firepower Threat Defense system and identify deployment scenarios.
• Perform initial Cisco Firepower Threat Defense device configuration and setup tasks and Describe how to manage traffic and implement Quality of Service (QoS) using Cisco Firepower Threat Defense
• Describe how to implement NAT by using Cisco Firepower Threat Defense
• Perform an initial network discovery, using Cisco Firepower to identify hosts, applications, and services
• Describe the behavior, usage, and implementation procedure for access control policies
• Describe the concepts and procedures for implementing security intelligence features
• Implement and manage intrusion policies
• Describe the components and configuration of site-to-site VPN
• Implement and manage intrusion policies
• Describe the components of site-to-site VPN
• Describe SSL decryption capabilities and usage

This course is created to impart knowledge and skills related to network security fundamentals, network access, Firewall connectivity, Firewall services, security fundamentals and programmability.

• Cisco Firepower Threat Defense Overview

• • Examining Firewall and IPS Technology
  • Firepower Threat Defense Features and Components
  • Examining Firepower Platforms
  • Examining Firepower Threat Defense Licensing
  • Cisco Firepower Implementation Use Cases

• Cisco Firepower NGFW Device Configuration

• • Firepower Threat Defense Device Registration
  • FXOS and Firepower Device Manager
  • Initial Device Setup
  • Managing NGFW Devices
  • Examining Firepower Management Center Policies
  • Examining Objects
  • Examining System Configuration and Health Monitoring
  • Device Management
  • Examining Firepower High Availability
  • Configuring High Availability

• Cisco Firepower NGFW Traffic Control

• • Firepower Threat Defense Packet Processing
  • Implementing QoS
  • Bypassing Traffic

• Cisco Firepower NGFW Address Translation

• • NAT Basics
  • Implementing NAT
  • NAT Rule Examples
  • Implementing NAT

• Cisco Firepower Discovery

• • Examining Network Discovery
  • Configuring Network Discovery

• Implementing Access Control Policies

• • Examining Access Control Policies
  • Examining Access Control Policy Rules and Default Action
  • Implementing Further Inspection
  • Examining Connection Events
  • Access Control Policy Advanced Settings
  • Access Control Policy Considerations
  • Implementing an Access Control Policy

• Security Intelligence

• • Examining Security Intelligence
  • Examining Security Intelligence Objects
  • Security Intelligence Deployment and Logging
  • Implementing Security Intelligence

• File Control and Advanced Malware Protection

• • Examining Malware and File Policy
  • Examining Advanced Malware Protection

• Next-Generation Intrusion Prevention Systems

• • Examining Intrusion Prevention and Snort Rules
  • Examining Variables and Variable Sets
  • Examining Intrusion Policies

• Site-to-Site VPN

• • Examining IPsec
  • Site-to-Site VPN Configuration
  • Site-to-Site VPN Troubleshooting
  • Implementing Site-to-Site VPN

• Remote-Access VPN

• • Examining Remote-Access VPN
  • Examining Public-Key Cryptography and Certificates
  • Examining Certificate Enrollment
  • Remote-Access VPN Configuration
  • Implementing Remote-Access VPN

• SSL Decryption

• • Examining SSL Decryption
  • Configuring SSL Policies
  • SSL Decryption Best Practices and Monitoring

• Detailed Analysis Techniques

• • Examining Event Analysis
  • Examining Event Types
  • Examining Contextual Data
  • Examining Analysis Tools
  • Threat Analysis

• System Administration

• • Managing Updates
  • Examining User Account Management Features
  • Configuring User Accounts
  • System Administration

• Cisco Firepower Troubleshooting

• • Examining Common Misconfigurations
  • Examining Troubleshooting Commands
  • Firepower Troubleshooting

• Initial Device Setup
• Device Management
• Configuring High Availability
• Implementing NAT
• Configuring Network Discovery
• Implementing an Access Control Policy
• Implementing Security Intelligence
• Implementing Site-to-Site VPN
• Implementing Remote Access VPN
• Threat Analysis
• System Administration
• Firepower Troubleshooting

• Minimum batch size required for batch is 10 participants in the this course.
• The RST Forum reserves the right to cancel/postpone the class.
• Course schedule will be provided before commencement of the course.
• Certificate of participation will be awarded to participants with a minimum 90% attendance.
• All attendees are to observe the Copyright Law on intellectual properties such as software and courseware from respective vendors.
• The RST Forum reserves the right to include external participants in the program either for the entire course or individual courses.
• The RST Forum reserves the right to change/alter the sequence of courses. RST FORUM published Book would be given at 50% discounted rate to the forum students.