CCNP Security

Physical Devices:

Routers: 1841, 2801, 2811, 2911

Switches: 3550, 3750 and C3850-12S

Cisco Adaptive Security Appliance 5512x and 5515x

Cisco WLC 2504 and AP 1602E

Cisco IP Phone 7965

Virtual Devices:

Cisco ISE Server

Cisco WLC (Wireless Controller)

Cisco Web Security Appliance – WSA (IronPort S Series)

Cisco Email Security Appliance – ESA (IronPort C Series)

Cisco Firepower Management Centre (Virtual Appliance)

Cisco Firepower NGIPSv (Next-Generation Intrusion Prevention System – Virtual)

Cisco Firepower Threat Defense

Cisco Adaptive Security Virtual Appliance (ASAv)

Windows Server - AD/DNS/CERTIFICATE Services

1. Your daily class at Network Bulls starts with 2 hours of theoretical training inclusive of in-depth training on CCNP Security course. After completion of your theory class, practical sessions are conducted in our labs which are available 24x7, where you can practice and learn the actual working of the concepts learned for any number of hours you want to.
2. CCNP Security course training is given by CCIE Security (SCOR+written) or CCIE Security (lab) certified trainers with 5-15 years of industry experience.
3. CCNP Security lab of NB consists of course specific devices: routers and switches with highly updated equipments and other required devices.
4. 24x7 lab assistance while you are practicing in labs providing immediate solutions to problems occurring, ensuring uninterrupted high quality practical training.
5. Availability of Wi-Fi access to enhance your practical learning experience.
6. Remote access to labs and devices within institute premises.
7. Access to in house practical workbooks within no time.
8. Doubt sessions ensuring complete understanding of the course at each and every step.

CCNP Security certification offered by Network Bulls allows candidates to obtain professional level certification training in Security technologies. Training provided on Cisco Certified Network Professional Security at NB is beyond comparison as we believe in imparting 100% practical training to our students coming from different parts of the world. Having best pool of CCIE experts and World's Largest Cisco Labs, CCNP Security course training at Network Bulls is quite amazing as we carve the technical personalities of our students with our intense types of various classroom sessions.

1. The Core certification SCOR training covers knowledge of implementing and operating core security technologies like Network Security, Cloud Security, Content Security, Endpoint Protection & Detection, Secure Network Access, Visibility, and Enforcement.

2. The Concentration certifications course covers training on Network Security with Cisco Firepower, Email Security with Cisco Email Security Appliance and Web Security with Cisco Web Security Appliance. You also learn to Implement Secure Solutions with VPN, Cisco Identity Services Engine alongside taking automation and Programmability training for Cisco Security Solutions.

3. Implement Firewall (ASA or IOS) including ACLS, static/dynamic NAT/PAT, and object groups. Threat detection features and implement botnet traffic filtering. Describe and implement ASA security contexts, Layer 2 Security, dynamic ARP inspection, storm control, common layer 2 attacks and mitigation, and MACSec and configuring DHCP snooping, port security and IP source verification.

4. Troubleshoot, monitor (firewalls using analysis of packet tracer, capture and syslog).

5. Understand Threat Defense Architectures (Design a Firewall Solution, High-availability, Basic concepts of security zoning, Transparent & Routed Modes, Security Contexts, and Layer 2 Security Solutions). Implement defenses against MAC, ARP, VLAN hopping, STP, and DHCP rogue attacks

6. Understand and implement secure communications using VPN on routers and firewalls. Implement and troubleshoot AnyConnect IKEv2 VPN and AnyConnect SSLVPN on ASA and routers. Implement and troubleshoot FlexVPN (hub-Spoke on both IPV4 & IPV6) using local AAA and on routers. Implement and troubleshoot IPsec (with IKEv1 and IKEv2 for both IPV4 & IPV6) and DMVPN (hub-Spoke and spoke-spoke on both IPV4 & IPV6). Implement and troubleshoot clientless SSLVPN on ASA and routers.

7. Design VPN solutions and identify VPN technology considerations based on functional requirements and configuration output, and Identify functional components of GETVPN, FlexVPN, DMVPN, and IPsec.

8. Understand Cisco WSA (features and functionality, implement data security, WSA identity and authentication with transparent User identification). Describe web usage control, decryption policies traffic redirection and capture methods.

9. Understand Cisco ESA (features and functionality) and describe traffic redirection and capture. Implement email encryption, anti-spam policies, virus outbreak filter, DLP policies, anti-malware, inbound and outbound mail policies and authentication.

10. Understand Network IPS and implement traffic redirection and capture methods, network IPS deployment modes, event actions & overrides/filters, anomaly detection, risk ratings, and device hardening per best practices. Describe signatures engines and configure device hardening best practices.

11. Implementing TACACS+ and RADIUS and wired/wireless 802.1X ISE authentication/authorization policies, ISE endpoint identity configuration and Verify MAB Operation).