安全(Security CCIE)直通车 Security CCIE

Security CCIE直通车( 培训费：会员19800 RMB；非会员:27000;有效服务期限：12个月 )

适合群体：从零基础开始,一直到通过安全CCIE.希望将来从事网络安全工程师的工作.


学习过程: CCNA+CCNP+CCSP+CCIE,培训费已经包括书,实验,理论.但不含思科CCIE笔试和实验考试费(约13000人民币,另交思科) 注 意CCNA和CCNP为送的课程.如会员自己放弃不学CCNA和CCNP课程总价格不变.


学习周期:6个月左右(其中CCNA 4天+ CCNP 1轮的学习共1个半月+CCSP2轮学习共3个月+安全CCIE理论和实验+考前冲刺共2个月)



安全CCIE知识点:Lab Exam Blueprint2.0:
Firewall
PIX and ASA Firewall
Basic Initialization
Access Management
Address Translation
ACLs
IP Routing
Object Groups
VLANs
AAA
VPNs
Filtering
Failover
Layer 2 Transparent Firewall
Security Contexts (Virtual Firewall)
Modular Policy Framework
Application-Aware Inspection
High Availability Scenarios
QoS Policies
Other Advanced Features

IOS Firewall
CBAC
Audit
Auth Proxy
PAM
Access Control
Performance Tuning
Advanced Features


VPN
IPSec LAN-to-LAN
SSL VPN
DMVPN
CA (PKI)
Remote Access VPN
VPN3000 Concentrator
VPN3000 IP Routing
Unity Client
WebVPN
EzVPN Hardware Client
XAuth, Split-tunnel, RRI, NAT-T
High Availability
QoS for VPN
GRE, mGRE
L2TP
PPTP
Advanced VPN Features


Intrusion Prevention System (IPS)
IPS 4200 Series Sensor Appliance
Basic Initialization
Sensor Configuration
Sensor Management
Promiscuous and Inline Monitoring
Signature Tuning
Custom Signatures
Blocking
TCP Resets
Rate Limiting
Signature Engines
IDM
Event Action
Event Monitoring
IOS IPS
PIX IDS
SPAN, RSPAN
Advanced Features


Identity Management
Security Protocols (RADIUS and TACACS+)
Cisco Secure ACS Configuration
Access Management (Telnet, SSH, Pwds, Priv Levels)
Proxy Authentication
Service Authentication (FTP, Telnet, HTTP, other)
Network Admission Control (NAC Framework solution)
802.1x
Advanced Features


Advanced Security
Mitigation Techniques
Packet Marking Techniques
Security RFCs (RFC1918, RFC2827, RFC2401)
Service Provider Security
Black Holes, Sink Holes
RTBH Filtering (Remote Triggered Black Hole)
Traffic Filtering using Access-lists
NAT
TCP Intercept
uRPF
CAR
NBAR
NetFlow
Flooding
Spoofing
Policing
Fragmentation
Sniffer Traces
Catalyst Management and Security
Traffic Control and Congestion Management
Catalyst Features and Advanced Configuration
IOS Security Features


Network Attacks
Network Reconnaissance
IP Spoofing Attacks
MAC Spoofing Attacks
ARP Spoofing Attacks
Denial of Service (DoS)
Distributed Denial of Service (DDoS)
Man-in-the-Middle (MiM) Attacks
Port Redirection Attacks
DHCP Attacks
DNS Attacks
Fragment Attacks
Smurf Attacks
SYN Attacks
MAC Attacks
VLAN Hopping Attacks
Other Layer2 and Layer3 Attacks


Lab Equipment and Software


Cisco 2600 Series Routers
Cisco 3600 Series Routers
Cisco 3700 Series Routers
Cisco Catalyst 3550 Series Switches
Cisco PIX 500 Series Security Appliances
Cisco VPN 3000 Series Concentrators
Cisco IPS Series 4200 intrusion prevention system sensors
Cisco Secure Access Control Server for Windows
Certificate Authority Support
Cisco ASA 5500 Series Adaptive Security Appliances

The VPN Concentrator can be configured using CLI (Command Line Interface) or a GUI web interface. The IDS sensors can be configured using CLI and managed through the IDS Device Manager.

Software Versions
Cisco IOS Software Version 12.2T Enterprise/IPSec/FW/IDS feature set is used on all routers
Cisco PIX Security Appliance OS Software Version 7.x
Cisco Intrusion Detection System Release 5.x
Cisco VPN Client Software for Windows, Release 4.8.x
VPN 3000 Series Concentrator OS, Release 4.7.x
Cisco ASA 5500 Series Adaptive Security Appliances OS Software Version 7.x
Cisco Catalyst 3550 Series Switches run Cisco IOS Software Release 12.2SEE
Cisco Secure ACS for Windows version 4.x