SECURING ENTERPRISE DATA CENTER ARCHITECTURES (SEDCA)

Length: 5-day Workshop

Securing Enterprise Data Center Architectures is a lab-intensive course that allows students to integrate and test Cisco Systems® security products and security best practices that compose the Cisco® Enterprise Data Center Architecture. Students will implement and integrate the Cisco Catalyst® 6500 Series Firewall Services Module (FWSM); the Cisco Catalyst® 6500 Series Intrusion Detection System Module (IDSM-2); Cisco® Secure Monitoring, Analysis, and Response System (CS-MARS); and two Cisco® anomaly detection devices: Cisco® traffic anomaly detectors and Cisco® Guard distributed-denial-of-service (DDoS) mitigation appliances. Hands-on lab experience includes use of commonly available network test applications and scripts that students can use to verify that implemented security techniques are successful. Students will learn best practices for implementing Layer 2 and Layer 3 security, with hands-on practice in implementing features such as port security and private VLANs.

You will learn to:

• Identify and classify specific threats to which the data center is subject
• Analyze a given data center network topology and define and document a security hierarchy
• Outline security techniques available to minimize of security threats in the data center network
• Prioritize security events and implement appropriate measures to mitigate future events in the data center network
• Configure MARS monitoring devices to gather information from routers, switches, FWSMs, IDSMs, and Cisco Security Agent
• Configure a MARS global controller as a central reporting point for security events
• Configure, verify, and troubleshoot Layer 2 and Layer 3 security techniques
• Implement and troubleshoot the Cisco Catalyst® 6500 FWSM at the Internet edge and aggregation layers
• Implement IDS at the aggregation and access layers
• Configure Cisco® Security Agent to protect hosts
• Configure guards and detectors to identify and redirect attacks on the data center network

Recommended for:

This course is targeted toward data center managers and administrators, network administrators, security professionals, and engineers interested in deploying and securing Cisco® network data center solutions.

Prerequisites:

• Experience using the Cisco IOS® Software command line interface (CLI)
• Routing fundamentals and IP addressing
• Introduction to Cisco® Networking Devices (ICND)
• Knowledge and experience configuring Layer 2 and Layer 3 interfaces on Cisco® routers and switches
• Building Scalable Cisco® Internetworks (BSCI)
• Building Cisco® Multilayer Switch Networks (BCMSN)
• Basic knowledge of Cisco Catalyst® 6500 operation and modules
• Cisco Catalyst® 6500 Advanced Switched Networks (CACSN)
• An understanding of firewall and intrusion detection systems concepts and operations
• Securing Networks with Cisco Pix® and ASA (SNPA)
• Implementing Cisco® Intrusion Prevention System (IPS)

More Information

Training Policies • Classroom Environment • Training Locations