Securing Cloud Deployments with Cisco Technologies (SECCLD)

 

Résumé du cours

The Securing Cloud Deployments with Cisco Technologies (SECCLD) v1.0 course shows you how to implement Cisco® cloud security solutions to secure access to the cloud, workloads in the cloud, and software as a service (SaaS) user accounts, applications, and data. Through expert instruction and hands-on labs, you’ll learn a comprehensive set of skills and technologies including: how to use key Cisco cloud security solutions; detect suspicious traffic flows, policy violations, and compromised devices; implement security controls for cloud environments; and implement cloud security management. This course covers usage of Cisco Cloudlock, Cisco Umbrella™, Cisco Cloud Email Security, Cisco Advanced Malware Protection (AMP) for Endpoints, Cisco Stealthwatch® Cloud and Enterprise, Cisco Firepower® NGFW (next-generation firewall), and more.

Contenu

  • Introducing the Cloud and Cloud Security
  • Implementing the Cisco Security Solution for SaaS Access Control
  • Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security
  • Introducing Cisco Security Solutions for Cloud Protection and Visibility
  • Describing the Network as the Sensor and Enforcer
  • Implementing Cisco Security Solutions in AWS
  • Describing Cloud Security Management

A qui s'adresse cette formation

This course is open to engineers, administrators, and security-minded users of public, private, and hybrid cloud infrastructures responsible for implementing security in cloud environments:

  • Security architects
  • Cloud architects
  • Security engineers
  • Cloud engineers
  • System engineers
  • Cisco integrators and partners

Pré-requis

To fully benefit from this course, you should have completed the following course or obtained the equivalent knowledge and skills:

  • Knowledge of cloud computing and virtualization software basics
  • Ability to perform basic UNIX-like OS commands

Cisco CCNP® security knowledge or understanding of the following topic areas:

  • Cisco Adaptive Security Appliance (ASA) and Adaptive Security Virtual Appliance (ASAv) deployment
  • Cisco IOS Flexible NetFlow operations

Objectifs

  • Contrast the various cloud service and deployment models.
  • Implement the Cisco Security Solution for SaaS using Cisco Cloudlock Micro Services.
  • Deploy cloud security solutions using Cisco AMP for Endpoints, Cisco Umbrella, and Cisco Cloud Email Security.
  • Define Cisco cloud security solutions for protection and visibility using Cisco virtual appliances and Cisco Stealthwatch Cloud.
  • Describe the network as a sensor and enforcer using Cisco Identity Services Engine (ISE), Cisco Stealthwatch Enterprise and Cisco TrustSec®.
  • Implement Cisco Firepower NGFW Virtual (NGFWv) and Cisco Stealthwatch Cloud to provide protection and visibility in AWS environments.
  • Explain how to protect the cloud management infrastructure by using specific examples, defined best practices and AWS reporting capabilities.[/list\]

Outline: Securing Cloud Deployments with Cisco Technologies (SECCLD)

Introducing the Cloud and Cloud Security
  • Describe the Evolution of Cloud Computing
  • Explain the Cloud Service Models
  • Explore the Security Responsibilities Within the Infrastructure as a Service (IaaS) Service Model
  • Explore the Security Responsibilities Within the Platform as a Service (PaaS) Service Model
  • Explore the Security Responsibilities Within the SaaS Service Model
  • Describe Cloud Deployment Models
  • Describe Cloud Security Basics
Implementing the Cisco Security Solution for SaaS Access Control
  • Explore Security Challenges for Customers Using SaaS
  • Describe User and Entity Behavior Analytics, Data Loss Prevention (DLP), and Apps Firewall
  • Describe Cloud Access Security Broker (CASB)
  • Describe Cisco CloudLock as the CASB
  • Describe OAuth and OAuth Attacks
Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security
  • Describe Cisco Cloud Security Solutions for Endpoints
  • Describe AMP for Endpoints Architecture
  • Describe Cisco Umbrella
  • Describe Cisco Cloud Email Security
  • Design Comprehensive Endpoint Security
Introducing Cisco Security Solutions for Cloud Protection and Visibility
  • Describe Network Function Virtualization (NFV)
  • Describe Cisco Secure Architectures for Enterprises (Cisco SAFE)
  • Describe Cisco NGFWv/Cisco Firepower Management Center Virtual (FMCv)/Cisco AMP for Networks
  • Describe Cisco ASAv
  • Describe Cisco Services Router 1000V (CSR1Kv)
  • Describe Cisco Stealthwatch Cloud
  • Describe Cisco Tetration Cloud Zero-Trust Model
Describing the Network as the Sensor and Enforcer
  • Describe Cisco Stealthwatch Enterprise
  • Describe Cisco ISE Functions and Personas
  • Describe Cisco TrustSec
  • Describe Cisco Stealthwatch and Cisco ISE Integration
  • Describe Cisco Encrypted Traffic Analytics (ETA)
Implementing Cisco Security Solutions in AWS
  • Explain AWS Security Offerings
  • Describe AWS Elastic Compute Cloud (EC2) and Virtual Private Cloud (VPC)
  • Discover Cisco Security Solutions in AWS
  • Explain Cisco Stealthwatch Cloud in AWS
Describing Cloud Security Management
  • Describe Cloud Management and APIs
  • Explain API Protection
  • Illustrate an API Example: Integrate to ISE Using pxGrid
  • Identify SecDevOps Best Practices
  • Illustrate a Cisco Cloud Security Management Tool Example: Cisco Defense Orchestrator
  • Illustrate a Cisco Cloud Security Management Tool Example: Cisco CloudCenter™
  • Describe Cisco Application Centric Infrastructure (ACI)
  • Describe AWS Reporting Tools

Prix & Delivery methods

Formation en ligne

Durée
4 jours

Prix
  • Online Training : CAD 5 280,–
  • Online Training : US$ 4 000,–
  • Cisco Learning Credits : 40
Formation en salle équipée

Durée
4 jours

Prix
  • Canada : CAD 5 280,–
  • Cisco Learning Credits : 40
E-Learning

Subscription duration
180 jours

Prix
  • Canada : CAD 1 950,–

Cliquez sur le nom de la ville ou sur « Formation en ligne » pour réserver Agenda

This is an Instructor-Led Classroom course
Instructor-led Online Training :   Cours en ligne avec instructeur
Formation en mode FLEX, à la fois à distance et en présentiel. Tous nos cours FLEX sont aussi des ILO (Instructor-Led Online).

Europe

Allemagne

Berlin Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire
Francfort Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire
Hambourg Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire
Berlin Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire
Hambourg Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Berlin S'inscrire

Hongrie

Budapest Formation en mode FLEX. Langue : Anglais S'inscrire
Formation en ligne Fuseau horaire : Europe/Budapest S'inscrire

Pologne

Varsovie Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/Warsaw S'inscrire

Roumanie

Bucarest Formation en mode FLEX. Langue : Anglais S'inscrire
Formation en ligne Fuseau horaire : Europe/Bucharest S'inscrire

Royaume-Uni

Formation en ligne Fuseau horaire : Europe/London S'inscrire
London, City Formation en mode FLEX. S'inscrire
Formation en ligne Fuseau horaire : Europe/London S'inscrire

République Tchèque

Prague Formation en mode FLEX. Langue : Anglais S'inscrire
Formation en ligne Fuseau horaire : Europe/Prague S'inscrire

Slovénie

Ljubljana Formation en mode FLEX. Langue : Anglais S'inscrire
Formation en ligne Fuseau horaire : Europe/Ljubljana S'inscrire