CCSP Certification

CCNP Security certification program is aligned specifically to the job role of the Cisco Network Security Engineer responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNs, and IDS/IPS solutions for their networking environments. The CCNP Security certification is the most efficient way to ensure Network Security Engineers have the practical skills needed to deploy, service, maintain, and support Cisco network security solutions. CCNP Security delivers the practical skills needed to enforce cybersecurity performance, gain high quality security service levels, and meet compliance mandates.

CCNP Security is an evolution of the CCSP certification  and is aligned specifically to the job role of the Cisco Network Security Engineer. Over the next year, CCNP Security will replace CCSP as Cisco’s professional level security certification for new candidates. CCSP will be recognized as a valid and relevant Cisco Security certification meeting all requirements by Cisco and its partner program for a full 3 year active period until 2014.

CCSP exams will remain available until April 2011 and individuals can still obtain a new CCSP certification until October 2011. New CCSP certifications will no longer be issued after October 2011. Cisco strongly encourages individuals to take the newer, relevant CCNP Security exams instead of the older CCSP exams.





Prerequisite :

Valid CCNA Security Certification.



Key Benefits :

This new certification program is for Cisco Network Security Engineers who are responsible for testing, deploying, configuring, and troubleshooting the core technologies that make up a Cisco secure network. The new CCNP Security curriculum assesses an engineer’s competency in using network-critical technologies and products, such as Cisco IOS security features in Cisco routers and switches, firewalls, VPNs, and intrusion prevention and detection systems.



Course Contents :

642-637 SECURE v1.0 (Secure v1.0 Securing Networks with Cisco Routers and Switches)

Module 1: Deploying Cisco IOS Software Network Foundation Protection Lesson

·         Deploying Network Foundation Protection Controls

·         Deploying Advanced Switched Data Plane Security Controls

·         Implementing Cisco Identity-Based Network Services

·         Deploying Basic 802.1X Features

·         Deploying Advanced Routed Data Plane Security Controls

·         Deploying Advanced Control Plane Security Controls

·         Deploying Advanced Management Plane Security Controls

Module 2: Deploying Cisco IOS Software Threat Control and Containment

·         Deploying Cisco IOS Software Network Address Translation

·         Deploying Basic Zone-Based Policy Firewalls

·         Deploying Advanced Zone-Based Policy Firewalls

·         Deploying Cisco IOS Software IPS

Module 3: Deploying Cisco IOS Software Site-to-Site Transmission Security

·         Site-to-Site VPN Architectures and Technologies

·         Deploying VTI-Based Site-to-Site IPsec VPNs

·         Deploying Scalable Authentication in Site-to-Site IPsec VPNs

·         Deploying DMVPNs

·         Deploying High Availability in Tunnel-Based IPsec VPNs

·         Deploying GET VPN

Module 4: Deploying Secure Remote Access with Cisco IOS Software

·         Remote Access VPN Architectures and Technologies

·         Deploying Remote Access Solutions Using SSL VPN

·         Deploying Remote Access Solutions Using Cisco Easy VPN

642-627 (IPS v7.0 Implementing Cisco Intrusion Prevention System v7.0)

·         Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices

·         Installing and Maintaining Cisco IPS Sensors

·         Applying Cisco IPS Security Policies

·         Adapting Traffic Analysis and Response to the Environment

·         Managing and Analyzing Events

·         Deploying Virtualization, High Availability, and High Performance Solutions

·         Configuring and Maintaining Specific Cisco IPS Hardware

642-617 FIREWALL v1.0 Deploying Cisco ASA Firewall Solutions

·         Introduction to the Cisco ASA Adaptive Security Appliance

·         Implementation of Basic Connectivity and Device Management

·         Deployment of Cisco ASA Adaptive Security Appliance Access Control Features

·         Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features

·         Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High-Availability Features

·         Integration of Cisco ASA Adaptive Security Appliance Security Service Modules

·         Configuring Routing on the Cisco ASA Adaptive Security Appliance

·         Lab (Optional): Configuring Dynamic Routing

642-647 VPN v1.0 Deploying Cisco ASA VPN Solutions

·         Evaluate the Cisco ASA adaptive security appliance VPN subsystem

·         Deploy Cisco ASA adaptive security appliance IPsec VPN solutions

·         Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions

·         Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions

·         Deploy advanced Cisco ASA adaptive security appliance VPN

---