Deployment

• Implement Secure Firewall modes
•  Routed mode
• . Transparent mode

Implement NGIPS modes

•  Passive
• Inline

Implement high availability options

•  Port channels
• Failover
•  Equal-Cost Multipath (ECMP) routing
•  Static route tracking
• Clustering

Describe virtual appliance on-premises and cloud deployment

• Configuration
• Configure system settings in Secure Firewall Management Center
• Configure policies in Secure Firewall Management Center
• Access control
• Intrusion
• Malware & File
•  DNS
• Identity
• Decryption
•  Prefilter

Configure these features using Secure Firewall Management Center

•  Network discovery
• Application detectors
• Correlation
• Encrypted visibility engine

Configure objects using Secure Firewall Management Center

• Object management
• Intrusion rules

Configure devices using Secure Firewall Management Center

• Device management
• NAT
• VPN
• QoS
• Platform settings
• Certificates
• Routing

Describe the use of Snort within Secure Firewall Threat Defense

Management and Troubleshooting​

• Troubleshoot with Secure Firewall Management Center GUI and device CLI
• Configure dashboards and reporting in Secure Firewall Management Center

• Troubleshoot using:

  packet capture procedures

   Packet Tracer

Analyze risk and standard reports

Describe device management tools

• Cisco Defense Orchestrator
• Cloud-delivered Firewall Management Center
• Secure Firewall Device Manager
• Secure Firewall Management Center

Integration

• Configure Cisco Secure Firewall Malware Defense (formerly AMP for Networks) in Secure Firewall Management Center
• Configure Cisco Secure Endpoint (formerly AMP for Endpoints) integration with Secure Firewall Management Center
• Implement Threat Intelligence Director for third-party security intelligence feeds
• Describe using Cisco SecureX for security investigations
• Describe Secure Firewall Management Center integration using pxGrid
• Describe Rapid Threat Containment (RTC) functionality within Secure Firewall Management Center
• Describe Cisco Security Analytics and Logging

 

دانش و مهارت استفاده از کامپیوتر و اینترنت