CI-SECCLD
CI-SECCLD
Securing Cloud Deployments with Cisco Technologies
Price:
Duration:
USD 2,950 excl. VAT
4 Days
CLC's:
40
CE
32 Credits
Who Should Attend
This course is open to engineers, administrators, and securityminded users of public, private, and hybrid cloud infrastructures responsible for implementing security in cloud environments:
• Security architects
• Cloud architects
• Security engineers
• Cloud engineers
• System engineers
• Cisco integrators and partners
Prerequisites
To fully benefit from this course, you should have completed the following course or obtained the equivalent knowledge and skills:
• Knowledge of cloud computing and virtualization software basics
• Ability to perform basic UNIX-like OS commands
• Cisco CCNP® security knowledge or understanding of the following topic areas:
Topic areas – Available in these courses
• Cisco Adaptive Security Appliance (ASA) and Adaptive Security Virtual Appliance (ASAv) deployment, and Cisco IOS® Flexible NetFlow operations - Implementing Cisco Edge Network Security Solutions (SENSS)
• Cisco NGFW (Cisco Firepower Threat Defense [FTD]), Cisco Firepower, and Cisco Firepower Management Center (FMC) deployment - Implementing Cisco Threat Control Solutions (SITCS)
• Cisco Content Security operations including Cisco Web Security Appliance (WSA)/ Cisco Email Security Appliance (ESA)/Cisco Cloud Web Security (CWS) - Implementing Cisco Threat Control Solutions (SITCS)
• Cisco AMP for network and endpoints deployment - Implementing Cisco Threat Control Solutions (SITCS)
• Cisco ISE operations and Cisco TrustSec architecture - Implementing Cisco Secure Access Solutions (SISAS)
• VPN operation - Implementing Cisco Secure Mobility Solutions (SIMOS)
What you will Learn
The Securing Cloud Deployments with Cisco Technologies (SECCLD) v1.0 course shows you how to implement Cisco® cloud security solutions to secure access to the cloud, workloads in the cloud, and Software as a Service (SaaS) user accounts, applications, and data. Through expert instruction and hands-on labs, you’ll learn a comprehensive set of skills and technologies including: how to use key Cisco cloud security solutions; detect suspicious traffic flows,
policy violations, and compromised devices; implement security controls for cloud environments; and implement cloud security management. This course covers usage of Cisco Cloudlock, Cisco Umbrella™, Cisco Cloud Email Security, Cisco Advanced Malware Protection (AMP) for Endpoints, Cisco Stealthwatch® Cloud and Enterprise, Cisco Firepower® NGFW (next-generation firewall), and more.
Course Objectives
After taking this course, you should be able to:
o Contrast the various cloud service and deployment models
o Implement the Cisco Security Solution for SaaS using Cisco Cloudlock Micro Services
o Deploy cloud security solutions using Cisco AMP for Endpoints, Cisco
o Umbrella, and Cisco Cloud Email Security
o Define Cisco cloud security solutions for protection and visibility using Cisco virtual appliances and Cisco Stealthwatch Cloud
o Describe the network as a sensor and enforcer using Cisco Identity
o Services Engine (ISE), Cisco Stealthwatch Enterprise, and Cisco TrustSec®
o Implement Cisco Firepower NGFW Virtual (NGFWv) and Cisco
o Stealthwatch Cloud to provide protection and visibility in AWS environments
o Explain how to protect the cloud management infrastructure by using
o specific examples, defined best practices, and AWS reporting capabilities
Course Outline
• Introducing the Cloud and Cloud Security
o Describe the Evolution of Cloud Computing
o Explain the Cloud Service Models
o Explore the Security Responsibilities Within the Infrastructure as a Service (IaaS) Service Model
o Explore the Security Responsibilities Within the Platform as a Service (PaaS) Service Model
o Explore the Security Responsibilities Within the SaaS Service Model
o Describe Cloud Deployment Models
o Describe Cloud Security Basics
• Implementing the Cisco Security Solution for SaaS Access Control
o Explore Security Challenges for Customers Using SaaS
o Describe User and Entity Behavior Analytics, Data Loss Prevention (DLP), and Apps Firewall
o Describe Cloud Access Security Broker (CASB)
o Describe Cisco CloudLock as the CASB
o Describe OAuth and OAuth Attacks
• Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security
o Describe Cisco Cloud Security Solutions for Endpoints
o Describe AMP for Endpoints Architecture
o Describe Cisco Umbrella
o Describe Cisco Cloud Email Security
o Design Comprehensive Endpoint Security
• Introducing Cisco Security Solutions for Cloud Protection and Visibility
o Describe Network Function Virtualization (NFV)
o Describe Cisco Secure Architectures for Enterprises (Cisco SAFE)
o Describe Cisco NGFWv/Cisco Firepower Management Center Virtual (FMCv)/Cisco AMP for Networks
o Describe Cisco ASAv
o Describe Cisco Services Router 1000V (CSR1Kv)
o Describe Cisco Stealthwatch Cloud
o Describe Cisco Tetration Cloud Zero-Trust Model
• Describing the Network as the Sensor and Enforcer
o Describe Cisco Stealthwatch Enterprise
o Describe Cisco ISE Functions and Personas
o Describe Cisco TrustSec
o Describe Cisco Stealthwatch and Cisco ISE Integration
o Describe Cisco Encrypted Traffic Analytics (ETA)
• Implementing Cisco Security Solutions in AWS
o Explain AWS Security Offerings
o Describe AWS Elastic Compute Cloud (EC2) and Virtual Private Cloud (VPC)
o Discover Cisco Security Solutions in AWS
o Explain Cisco Stealthwatch Cloud in AWS
• Describing Cloud Security Management
o Describe Cloud Management and APIs
o Explain API Protection
o Illustrate an API Example: Integrate to ISE Using pxGrid
o Identify SecDevOps Best Practices
o Illustrate a Cisco Cloud Security Management Tool Example: Cisco Defense Orchestrator
o Illustrate a Cisco Cloud Security Management Tool Example: Cisco CloudCenter™
o Describe Cisco Application Centric Infrastructure (ACI)
o Describe AWS Reporting Tools
Further information
If you would like to know more about this course please contact us
