The growing demands to extend network boundaries to the cloud result in great security risk to the network. To address this growing security risk, Cisco's SD-WAN solution includes a multi-layer suite of security tools that can protect the WAN edge at the branch for Internet access needs. The use cases that the security tools support include segmentation and the security requirements to meet compliance related needs such as Payment Card Industry (PCI) as well as Guest Access, Direct Cloud Access, and Direct Internet Access (DIA).
In this course, you learn from Cisco experts about four different Internet access use cases, their attack surface, and how each can be protected with targeted security tools including: Application Aware Firewall, Intrusion Protection Services (IPS), DNS Web Security, URL Filtering, and Advanced Malware Protection (AMP). The experts not only discuss how each use case is vulnerable and how to address this vulnerability, but also go though step by step configuration and verification demonstrations using the new vManage security wizard and monitoring tools. All along the way they share insights, best practices, and personal experiences.
Whether you focus on network or security design and implementation, this course is for you. It includes an introduction to security concepts and a refresher lecture and demonstration on deploying SD-WAN Internet access.

Objectives

Upon completion of this course, you should be able to:
Explain the business needs, the resulting attack surface, and the security tools used to protect the network for the following use cases: Compliance, Guest Access, Direct Cloud Access, and Direct Internet Access (DIA). Describe how Application Aware Firewall, Intrusion Prevention, URL Filtering, DNS Security, and Advanced Malware Protection (AMP) are integrated into the Cisco SD-WAN solution including what is a container and how it is used
Demonstrate where the security tools are provisioned and monitored in vManage, including the security wizard and security monitoring menu
Use the vManage security wizard to provision any combination of security tools to meet Internet access security requirements. Security tools include: Application Aware Firewall, Intrusion Prevention, URL Filtering, DNS Security, and Advanced Malware Protection (AMP) to meet DIA security requirements
Use vManage to verify and monitor security tool operations for SD-WAN Internet access implementations
Given a security policy that is configured and applied to a device template, describe Cisco's best practice for updating the security policy with adds, moves, deletes, or changes

Related Downloads :

{related-news}