Course Catalog
SSFIPS-Securing Networks with Cisco Firepower Next-Generation IPS v4.0
Code: SSFIPS 4.0
Duration: 5 Day
$4000 USD

OVERVIEW

This course gives you the knowledge and skills to use the NGIPS platform features and includes firewall security concepts, platform architecture and key features; in-depth event analysis including detection of network-based malware and file type, NGIPS tuning and configuration including application control, security intelligence, firewall, and network-based malware and file controls; Snort rules language; file and malware inspection, security intelligence, and network analysis policy configuration designed to detect traffic patterns; configuration and deployment of correlation policies to take action based on events detected; troubleshooting; system and user administration tasks.

This course is eligible for 32 Continuing Education Credits (ILT & ELT Modality).

DELIVERY FORMAT

This course is available in the following formats:

Virtual Classroom

Duration: 5 Day
Classroom

Duration: 5 Day

CLASS SCHEDULE

Delivery Format: Virtual Classroom
Date: May 13 2024 - May 17 2024 | 08:30 - 16:30 EDT
Location: Online
Course Length: 5 Day

$ 4000

Delivery Format: Virtual Classroom
Date: Jul 15 2024 - Jul 19 2024 | 08:30 - 16:30 EDT
Location: Online
Course Length: 5 Day

$ 4000

Delivery Format: Virtual Classroom
Date: Jul 22 2024 - Jul 26 2024 | 11:30 - 19:30 EDT
Location: Online
Course Length: 5 Day

$ 4000

Delivery Format: Virtual Classroom
Date: Sep 30 2024 - Oct 04 2024 | 08:30 - 16:30 EDT
Location: Online
Course Length: 5 Day

$ 4000

Delivery Format: Virtual Classroom
Date: Nov 11 2024 - Nov 15 2024 | 08:30 - 16:30 EST
Location: Online
Course Length: 5 Day

$ 4000

GOALS
  • Implement Cisco Firepower Next-Generation IPS to stop threats, address attacks, increase vulnerability prevention against suspicious files, and analyze for not-yet-identified threats
  • Gain leading-edge skills for high-demand responsibilities focused on security
  • Describe the components of Cisco Firepower Threat Defense and the managed device registration process
  • Detail Next-Generation Firewalls (NGFW) traffic control and configure the Cisco Firepower system for network discovery
  • Implement access control policies and describe access control policy advanced features
  • Configure security intelligences features and the Advanced Malware Protection (AMP) for Networks implementation procedure for file control and advanced malware protection
  • Implement and manage intrusion and network analysis policies for NGIPS inspection
  • Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
  • Integrate the Cisco Firepower Management Center with an external logging destination
  • Describe and demonstrate the external alerting options available to Cisco Firepower Management Center and configure a correlation policy
  • Describe key Cisco Firepower Management Center software update and user account management features
  • Identify commonly misconfigured settings within the Cisco Firepower Management Center and use basic commands to troubleshoot a Cisco Firepower Threat Defense device

 

This course helps you prepare to take the Securing Networks with Cisco Firepower (300-710 SNCF) exam , which leads to CCNP Security and Cisco Certified Specialist – Network Security Firepower certifications. The 300-710 SNCF exam has a second preparation course as well, SSNGFW - Securing Networks with Cisco Firepower Next Generation Firewall v1.0. You can take these courses in any order.

OUTLINE

  • Cisco Firepower Threat Defense Overview
  • Cisco Firepower NGFW Device Configuration
  • Cisco Firepower NGFW Traffic Control
  • Cisco Firepower Discovery
  • Implementing Access Control Policies
  • Security Intelligence
  • File Control and Advanced Malware Protection
  • Next-Generation Intrusion Prevention Systems
  • Network Analysis Policies
  • Detailed Analysis Techniques
  • Cisco Firepower Platform Integration
  • Alerting and Correlation Policies
  • System Administration
  • Cisco Firepower Troubleshooting
  • Cisco Firepower Threat Defense Overview
  • Cisco Firepower NGFW Device Configuration
  • Cisco Firepower NGFW Traffic Control
  • Cisco Firepower Discovery
  • Implementing Access Control Policies
  • Security Intelligence
  • File Control and Advanced Malware Protection
  • Next-Generation Intrusion Prevention Systems
  • Network Analysis Policies
  • Detailed Analysis Techniques
  • Cisco Firepower Platform Integration
  • Alerting and Correlation Policies
  • System Administration
  • Cisco Firepower Troubleshooting
LABS

  • Initial Device Setup
  • Device Management
  • Configuring Network Discovery
  • Implementing and Access Control Policy
  • Implementing Security Intelligence
  • File Control and Advanced Malware Protection
  • Implementing NGIPS
  • Customizing a Network Analysis Policy
  • Detailed Analysis
  • Configuring Cisco Firepower Platform Integration with Splunk
  • Configuring Alerting and Event Correlation
  • System Administration
  • Cisco Firepower Troubleshooting
  • Initial Device Setup
  • Device Management
  • Configuring Network Discovery
  • Implementing and Access Control Policy
  • Implementing Security Intelligence
  • File Control and Advanced Malware Protection
  • Implementing NGIPS
  • Customizing a Network Analysis Policy
  • Detailed Analysis
  • Configuring Cisco Firepower Platform Integration with Splunk
  • Configuring Alerting and Event Correlation
  • System Administration
  • Cisco Firepower Troubleshooting
WHO SHOULD ATTEND

This course is designed for technical professionals who need to know how to deploy and manage a Cisco Firepower NGIPS in their network environment.

  • Security administrators
  • Security consultants
  • Network administrators
  • System engineers
  • Technical support personnel
  • Channel partners and resellers
PREREQUISITES

To fully benefit from this course, you should have the following knowledge and skills:

  • Technical understanding of TCP/IP networking and network architecture.
  • Basic familiarity with the concepts of Intrusion Detection Systems (IDS) and IPS