Designing Perimeter Security (DPS)

• Engineers who support sales of Cisco VPN and security product solutions
• Cisco Channel Partners who design, sell, implement and maintain secure networks
• Cisco Customers who design, implement and maintain secure networks

Implementing Cisco IP Routing (ROUTE)
Implementing Cisco IP Switched Networks (SWITCH)
Deploying Cisco ASA Firewall Features (FIREWALL)

This course teaches the knowledge and skills needed to design secure network perimeters. The focus is on providing connectivity and access control enforcement solutions on network boundaries. The course identifies, compares and explains NAT technologies (both basic and advanced) and advanced NAT design. It also describes the function, features and limitations of firewalls, and details best practice firewall design guidelines and architectures based on a defined security policy. Guidelines are provided on how to integrate an application with a particular firewall technology and how to design high availability and high performance firewall systems. Advanced ASA features are covered along with the advanced security features of Cisco IOS software when using it in a firewall system design. After completing this course the student should be able to:

• Suggest improvements to an organization`s perimeter security.
• Design a new solution based on an organization’s requirements.
• Select an appropriate NAT technology for an organization`s requirements.
• Design advanced NAT solutions for some common enterprise connectivity scenarios.
• Explain the function of a firewall and to identify its benefits and limitations.
• Select an appropriate firewall technology for an organization`s application needs.

• Perimeter Security Analysis
• Network Address Translation (NAT) Solutions
• Firewall Functionality
• Perimeter Security Design
• Perimeter Security Products