Implementing Network Security (IANS)

 

Course Overview

This course covers intermediate security concepts and prepares you for the ACP - Network Security (ACP-NS) certification exam. This training will help administrators use the HPE Aruba Networking portfolio to implement a Zero Trust Security (ZTS) protection model for their networks. Attending the course will teach you how to:

  • Configure HPE Aruba Networking infrastructure with ClearPass solutions to authenticate/control both wired & wireless users, as well as remote users through Security Service Edge (SSE).
  • Collect contextual information with ClearPass Policy Manager (CPPM) & implement advanced role mapping as well as enforcement policies.
  • Use ClearPass Device Insight to enhance visibility.
  • Set up features such as the AOS-CX Network Analytics Engine (NAE), HPE Aruba Networking Wireless IDS/IPS (WIDS/WIPS), & gateway IDS/IPS.
  • Investigate alerts.

Course Content

  • HPE Aruba Networking Security Strategy and ClearPass Fundamentals
  • Deploy Trusted Certificates
  • Implement Certificate-Based 802.1X
  • Implement Advanced Policies on the Role-Based AOS Firewall
  • Evaluate Endpoint Posture
  • Implement a Trusted Network Infrastructure
  • Implement 802.1X and Role-Based Access Control on AOS-CX
  • Implement Dynamic Segmentation on AOS-CX Switches
  • Monitor with Network Analytics Engine (NAE)
  • Implement WIDS/WIPS
  • Use CPPM and Third-Party Integration to Mitigate Threats
  • Implement Device Profiling with CPPM
  • Device Profiling with HPE Aruba Networking
  • Deploy ClearPass Device Insight
  • Integrate Device Insight with CPPM
  • Use Packet Captures To Investigate Security Issues
  • Secure Remote and Branch Access
  • Configure HPE Aruba Networking Gateway IDS/IPS
  • Use HPE Aruba Networking Central Alerts

Who should attend

Typical candidates for this course are network engineers responsible for implementing security controls on enterprise networks. Learners can describe the network security stack (firewall, proxy, remote access, IDS/IPS, access control, NTA, UEBA).

Certifications

This course is part of the following Certifications:

Prerequisites

The following knowledge is recommended for this seminar:

Aruba recommends that the candidate has attended the Network Security Fundamentals (ANSF) course prior to attending this professional level course. Or have equivalent experience and knowledge of network security fundamentals.

Course Objectives

After you successfully complete this course, expect to be able to:

1. Protect and Defend
  • Define security terminologies
  • PKI
  • Zero Trust Security
  • WIPS & WIDS
  • Harden devices
  • Securing network infrastructure
  • Securing L2 & L3 protocols
  • Secure a WLAN
  • Deploy AAA with CPPM
  • Secure a wired LAN
  • Deploy AAA with CPPM
  • Deploy 802.1x
  • Deploy certificate based authentication for users & devices
  • Secure the WAN
  • Understand Aruba's SD-Branch for automating VPN deployment
  • Design and deploy VPN with Aruba's VIA client
  • Classify endpoints
  • Deploy endpoint classification to devices
  • Integrate ClearPass and CPDI
2. Analyze
  • Threat detection
  • Investigate Central alerts
  • Interpret packet captures Evaluate endpoint postures
  • Troubleshooting
  • Deploy and analyze results from NAE scripts
  • Endpoint classification
  • Analyze endpoint classification data to identify risks
  • Analyze endpoint classification data on CPDI
3. Investigate
  • Forensics
  • Explain CPDI capabilities of showing network conversations on supported Aruba devices

Outline: Implementing Network Security (IANS)

  • HPE Aruba Networking Security Strategy and ClearPass Fundamentals
  • Deploy Trusted Certificates
  • Implement Certificate-Based 802.1X
  • Implement Advanced Policies on the Role-Based AOS Firewall
  • Evaluate Endpoint Posture
  • Implement a Trusted Network Infrastructure
  • Implement 802.1X and Role-Based Access Control on AOS-CX
  • Implement Dynamic Segmentation on AOS-CX Switches
  • Monitor with Network Analytics Engine (NAE)
  • Implement WIDS/WIPS
  • Use CPPM and Third-Party Integration to Mitigate Threats
  • Implement Device Profiling with CPPM
  • Device Profiling with HPE Aruba Networking
  • Deploy ClearPass Device Insight
  • Integrate Device Insight with CPPM
  • Use Packet Captures To Investigate Security Issues
  • Secure Remote and Branch Access
  • Configure HPE Aruba Networking Gateway IDS/IPS
  • Use HPE Aruba Networking Central Alerts

Prices & Delivery methods

Online Training

Duration
5 days

Price
  • Online Training: CAD 5,280
  • Online Training: US $ 4,000
Classroom Training

Duration
5 days

Price
  • Canada: CAD 5,280

Click on town name or "Online Training" to book Schedule

Guaranteed date:   We will carry out all guaranteed training regardless of the number of attendees, exempt from force majeure or other unexpected events, like e.g. accidents or illness of the trainer, which prevent the course from being conducted.
This class will become guaranteed to run with one more student registration.
This is an Instructor-Led Classroom course
Instructor-led Online Training:   This computer icon in the schedule indicates that this date/time will be conducted as Instructor-Led Online Training.
This is a FLEX course, which is delivered both virtually and in the classroom.
*   This class is delivered by a vendor or third party partner.

United States

Online Training 09:00 Central Standard Time (CST) * Enroll
Online Training 09:00 Central Daylight Time (CDT) * Enroll
Online Training 10:00 Central Daylight Time (CDT) * Enroll