10 days CCIE Security Boot Camp

Enquire Now

+
Can't Read The Image? To Refresh

Visit Our Labs

All Courses

CISCO CCNA

CCNA

CISCO CCNP

CISCO CCIE

COMBO COURSES

MICROSOFT COURSES

MCSE Server Infrastructure

Career Kick Start Courses

Multi-Vendor Technology Expert ProgramCombo

CCIE ENTERPRISEINTEGRATED

CCIE SECURITY V6INTEGRATED

CCNA + CCNP ENTERPRISECOMBO

CCNA + CCNP ENTERPRISE + MCSE Server Infrastruture

CCIE Data CenterIntegrated

Testimonials

OVER 90% CCIE 1ST ATTEMPT SUCCESS RATE

CCNP(R&S)+CCIE(R&S) Written+Lab

South Africa

View More Testimonials

Why NB

WORLD'S LARGEST ITTRAINING LABS

24*7 LABFACILITY

NB INAWARDS

PHOTOGALLERY

9 AMAZING FACTS ABOUT NB

NB Facilities

CCIE Security
10 days CCIE Security Boot Camp

10 days CCIE Security Boot Camp (Technology Boot Camp + Lab Boot Camp)

Want to see your CCIE dream come true?

Wish to feel proud with the CCIE number for which you have been waiting for the last many years?

Now is the time to go for it, Network Bulls’ 10 Days CCIE Security Boot Camp is a perfect training program which ensures attendees get end to end understanding of technologies used in CCIE Security lab exam alongside thorough practical sessions to make sure that they achieve their CCIE Number.

This 10 days CCIE Security Boot camp consists of the 5 days training on CCIE Security Technology + 5 days Lab Boot camp. The entire program will be focused on covering the topics like Security Rack Overview, ASA Firewall, IOS Firewalls, VPNs, Content Security - IPS & WSA, Identity Management, Lab exam strategy, Lab practical, Mock lab exam preparation, and general open discussion.

Our CCIE Certified trainer will train you how to strategize for the lab, how to do the right configurations and which kind of questions you need to have understanding of, to get your CCIE number.

Note – It’s an intensive Boot Camp, It has been designed for people who have cleared their CCIE written exam and want to clear their CCIE lab exam in upcoming 1 or 2 months. Those who’re willing to attend this boot camp should have a sound understanding of CCIE Security V5 Written exam blueprint concepts. If candidates don’t have knowledge up to this level, one might face difficulties in understanding the lab exam boot camp.

What is covered in this Boot Camp
and breakup of the days:

The CCIE Security boot camp for 10 days has been created to offer the students a World Class training experience at Network Bulls keeping in mind the updated technologies and desired results on the completion of the boot camp. This Boot Camp is designed for candidates with sound knowledge of the technologies covered under CCIE Security v5 written exam blueprint. Attendees can expect a minimum of 7 hours for continuous lecture and practical sessions per day will be conducted. Later the same will be followed by a series of technology-specific labs, which are expected to stay up till three to four hours a day.

Please note that the Security Boot Camp will be focused on the most vital technologies that have been used in production environment and in the CCIE lab exam as well. Students are expected to spend time executing self-study before arriving at the lecture.

Trainer Profile

Our expert trainer, Praveen Kataria has vast experience in the teaching & has been training candidates for CCIE Security lab exam preparation. He himself is a CCIE Security Certified #43866, having thorough knowledge of all the concepts, he will make sure that you understand each technology that is covered in the CCIE lab exam blueprint.

Day 1 Plan

Session will start with the introduction of students and assessment of their strengths & weaknesses as per information provided. This helps the trainer to focus more on the relevant topics, which he thinks, should be focused more to address the technological weakness of attendees.

After the student and course introduction, the instructor will make sure that all students have access to their rack for the entire duration of the course. And training boot camp will kick off from Security Rack Overview. Day wise plan also be given to students so that they are clear what to expect in next 10 days.

Topics covered include:

1.1 ASA Firewalls Basics & Initialization

1.1.1 IPv4, IPv6
1.1.2 Security Levels
1.1.3 Default filtering behavior
1.1.4 Subinterfaces
1.1.5 Redundant ports
1.1.6 EtherChannels

1.2 Management & ACLs

1.2.1 In-Band & OOB management
1.2.2 ASDM
1.2.3 Different ACL types (IPv4, IP6, Global, etc.)
1.2.4 Objects & Object Groups

1.3 – Transparent Firewall

1.3.1 Transparent ASA behavior
1.3.2 ARP Inspection
1.3.3 CAM Protection
1.3.4 Transparent ASA NAT

1.4 Multiple Contexts

1.4.1 Virtual Firewall behavior
1.4.2 Traffic Classification
1.4.3 Resource Limits

1.5 Failover

1.5.1 Failover Link
1.5.2 Active Standby
1.5.3 Active/Active

1.6 Routing

1.6.1 ASA Routing Overview
1.6.2 Static routes
1.6.3 Route Monitoring
1.6.4 OSPF
1.6.5 EIGRP

1.7 NAT

1.7.1 NAT Overview
1.7.2 NAT Tables
1.7.3 NAT Considerations
1.7.4 Pre 8.3 NAT
1.7.5 Post 8.3 NAT (Auto & Manual/Twice)

1.8 Modular Policy Framework

1.8.1 MPF Overview
1.8.2 Order of operations
1.8.3 Inspection Overview
1.8.4 Other MPF features

Day 2 Plan

Topics covered include:

IOS Firewall

1.1 Access-Lists

1.1.1 Standard, Extended
1.1.2 IPv4, IPv6
1.1.3 Dynamic & Reflexive ACLs

1.2 – CBAC

1.2.1 Stateful firewall behavior
1.2.2 Generic vs Application inspection
1.2.3 Deployment scenarios
1.2.4 Tuning
1.2.5 PAM
1.2.6 IPv6 CBAC
1.2.7 VFR

1.3 - ZFW

1.3.1 Overview
1.3.2 Traffic control (zone policies)
1.3.3 Classification methods
1.3.4 Application-Layer inspection
1.3.5 Parameter Maps
1.3.6 IPv6 ZFW

1.4 - IOS NAT

1.4.1 Legacy
1.4.2 NVI-based
1.4.3 Configuration options

Virtual Private Networks (VPNs)

2.1 - Public Key Infrastructure

2.1.1 Digital Certificates
2.1.2 PKI Models
2.1.3 IOS CA Server
2.1.4 PKI Clients (IOS, ASA)
2.1.5 CRL

2.2 VPN Overview

2.2.1 IPSec Fundamentals
2.2.2 IKE, ISAKMP
2.2.3 AM/MM modes
2.2.4 AH, ESP
2.2.5 Tunnel/transport modes
2.2.6 Next-Generation Algorithms

2.3 - IPSec on IOS

2.3.1 NAT-T
2.3.2 VPN QoS

2.4 - IPSec on the ASA

2.4.1 Tunnel Groups
2.4.2 Group Policies
2.4.3 NAT-T, UDP/TCP encapsulation
2.4.4 VPN QoS

2.5 VRF-Aware IPSec

Day 3 Plan

Topics covered include:

Virtual Private Networks (VPNs)

1.1 Advanced VPN Solutions

1.1.1 Design considerations
1.1.2 GRE
1.1.3 SVTIs

1.2 DMVPN

1.2.1 Overview
1.2.2 Phase I, II and III
1.2.3 Dual-Hubs
1.2.4 IPv6 DMVPN

1.3 GETVPN

1.3.1 Overview
1.3.2 GMs, KS
1.3.3 GDOI
1.3.4 VRF-Aware GETVPN
1.3.5 IPv6 GETVPN

1.4 - Remote Access (IPSec)

1.4.1 Phase 1.5
1.4.2 XAUTH
1.4.3 RRI
1.4.4 Easy VPN Server
1.4.5 Easy VPN Client

1.5 - Remote Access (SSL)

1.5.1 SSL/TLS
1.5.2 Clientless
1.5.3 Plugins
1.5.4 Port Forwarding
1.5.5 Smart Tunnels
1.5.6 Full Client (AnyConnect)
1.5.7 IOS SSL VPN

1.6 - IKEv2

1.6.1 Overview
1.6.2 IKEv2 on ASA

1.7 Flex VPNs

1.7.1 Overview
1.7.2 Configuration components
1.7.3 Smart Defaults
1.7.4 IOS FlexVPNs

Day 4 Plan

Topics covered include:

Content Security - IPS

1.1 - Basics & Initialization

1.1.1 Users
1.1.2 Interface types
1.1.3 CLI
1.1.4 IPS Setup
1.1.5 Global Correlation
1.1.6 Reputation Filtering

1.2 SPAN & RSPAN

1.3 - Deployment Modes

1.3.1 Promiscuous
1.3.2 Inline
1.3.3 VLAN Groups

1.4 - Virtual Sensors

1.5 Signature Engines

1.5.1 AIC, Atomic, Flood, etc.

1.6 - Signature Actions

1.6.1 Inline vs Promiscuous
1.6.2 Event Summarization
1.6.3 Alert Summarization

1.7 - Risk Rating

1.7.1 RR Calculations

1.8 - Event Action Rules

1.8.1 Overrides
1.8.2 Filters

1.9 - IPS Blocking

1.10 - Anomaly Detection

1.10.1 Learning Modes
1.10.2 Zones

1.11 IOS IPS

1.12 IPS on the ASA

1.12.1 IPS Module

Content Security - WSA

2.1 WSA Overview & Features

2.1.1 URL Filtering, Web Usage Controls
2.1.2 AVC
2.1.3 Malware Scanning

2.2 Initialization

2.2.1 CLI
2.2.2 GUI Wizard

2.3 Deployment Modes

2.3.1 Web Proxy (Explicit and Transparent)
2.3.2 L4 Traffic Monitor

2.4 WSA Interfaces

2.5 - WCCP

2.6 - WSA Policies

2.6.1 Identities
2.6.2 Access Policy
2.6.3 Policy Actions
2.6.4 Order of operations

2.7 - Web Reputation

2.8 - Authentication

2.8.1 AD Integration

2.9 - HTTPS Decryption

2.10 - Proxy Bypass

Day 5 Plan

Topics covered include:

Identity Management

1.1 - AAA Fundamentals

1.1.1 Authentication
1.1.2 Authorization
1.1.3 Accounting

1.2 - RADIUS, TACACS+

1.3 - Attribute-Value (AV) Pairs

1.3.1 VSAs
1.3.2 Cisco AV Pair

1.4 - ACS

1.5 - Method Lists

1.5.1 Custom
1.5.2 Default
1.5.3 Fallback methods

1.6 - Proxy Authentication

1.6.1 Authentication Proxy
1.6.2 Cut-through Proxy

1.7 - TrustSec Overview & Features

1.8 - ISE

1.9 - ISE Deployment Overview

1.9.1 Personas
1.9.2 Deployment Types

1.10 - Profiling

1.10.1 The Process
1.10.2 Probes
1.10.3 Device Sensor

1.11 - Policies

1.11.1 Identity Stores
1.11.2 Authentication
1.11.3 Authorization
1.11.4 Dictionaries

1.12 - Change of Authorization (CoA)

1.13 - Central Web Authentication (CWA)

1.14 - Guest Services

1.15 - 802.1x Overview

1.15.1 Port Modes & Types
1.15.2 MAB
1.15.3 Flexible Authentication

1.16 - Wired 802.1x

1.17 - Wireless 802.1x

1.18 - 802.1x Deployment

1.18.1 Monitor Mode
1.18.2 Low Impact Mode
1.18.3 Closed Mode

Day 6 Plan

Day 7 Plan

Day 8 Plan

Day 9 Plan

Day 10 Plan

What is included in this Boot Camp (lab access etc)

Apart from the dedicated rack access that you will have during the entire CCIE Lab boot camp session, you will also get the complimentary rack access of additional 30 days.