• Home
• Course Catalogue
• Certifications
• Onsite Training
• Scheduled Training
• E-Learning
• Managed Services
• Consulting
• Company
• Special Offers
• News
• Links
• Enquiry And Feedback Form

Training Course Outline

IT Vendor Courses   Cisco Security CCSP Training Courses

DPS: Designing Perimeter Security

View course dates

Course Duration: 5 days

Course Code: DPS

Course Description:

The DPS course is a three-day, leader-led course. This course teaches the knowledge and skills needed to design secure network perimeters. The focus is on providing connectivity and access control enforcement solutions on network boundaries. The course identifies, compares and explains NAT technologies (both basic and advanced) and advanced NAT design. It also describes the function, features and limitations of firewalls, and details best practice firewall design guidelines and architectures based on a defined security policy. Guidelines are provided on how to integrate an application with a particular firewall technology and how to design high availability and high performance firewall systems. Advanced ASA features are covered along with the advanced security features of Cisco IOS software when using it in a firewall system design.

 

This is a design course; it includes design exercises to apply security policies, design guidelines, and best-practices. Implementation and deployment of security designs is taught and practiced in the Cisco SAFE Implementation (CSI) course. Hands-on deployment labs and exercises are included as standard in the CSI course.
 
Objectives:

• Suggest improvements to an organization's perimeter security.
  
• Design a new solution based on an organization's requirements.
  
• Select an appropriate NAT technology for an organization's requirements.Design advanced NAT solutions for some common enterprise connectivity scenarios
  
• Explain the function of a firewall and to identify its benefits and limitations.
  
• Secure an IP Communications network.
  
• Select an appropriate firewall technology for an organization's application needs.

 

This course is recommended as additional training for those delegates studying for the Cisco Certified Security Professional. There is currently no exam recommended for this course.

Prerequisites:




- Building Cisco Multilayer Switched Networks (BCMSN)
- Building Scalable Cisco Internetworks (BSCI)
- Cisco Secure PIX Firewall Advanced (CSPFA)
- Securing Cisco IOS Networks (SECUR)



Target Audience:


- Engineers who support sales of Cisco VPN and security product solutions
- Cisco Channel Partners who design, sell, implement and maintain secure networks
- Cisco Customers who design, implement and maintain secure networks

This course includes the following modules:

Design Analysis

• Overview
• Researching an Organization's Requirements
• Identifying an organiszation's existing situation.

Nat Overview

• Design using a NAT/PAT solution

Firewall Function

• Firewall Definitions, Policies, Features and Limitations.
• Firewall Technologies
• Firewall ArchitecturesProtocol Handling in Firewalls

Firewall Design

• Firewall Design
• Firewall Design Solutions
• Firewall High Availability
• Firewall High Availability Solutions

Understanding Pix Firewall NAT

• Understanding Pix Firewall Security
• Cisco IOS Software Access Control Features
• Content Engines

 

To make an enquiry for this course to be run ONSITE at your location, click here or call Sales on +44 (0) 20 7620 0033.

Perpetual Solutions are a global provider of onsite training solutions throughout London, UK and the rest of the world. For scheduled training our UK partner network provides an unrivalled choice of courses.

Save as PDF

Print this course