1. Cisco CCNA Security Overview
Updated October 2012

2. Contents 1 2 3 4 Overview Course Design Instructor Training
For More Information

3. Overview

4. CCNA Security Course Goals
CCNA Security helps students:
Understand core security concepts and how to develop and implement security policies to mitigate risks
Acquire skills needed configure, monitor, and troubleshoot network security
Prepare for CCNA Security certification exam
Start or advance a career in network security
Differentiate themselves in the market with specialized skills and expertise to achieve success

5. CCNA Security v1.1: Key Competencies
Upon completion of this course, students will be able to:
Describe security threats facing modern network infrastructures
Secure network device access
Implement AAA on network devices
Mitigate threats to networks using ACLs
Implement secure network management and reporting
Mitigate common Layer 2 attacks
Implement the Cisco IOS firewall feature set
Implement an adaptive security appliance (ASA)
Implement the Cisco IOS Intrusion Prevention System (IPS) feature set
Implement site-to-site IP Sec VPNs
Administer effective security policies

6. New Features in Version 1.1
Aligns with updated CCNA Security certification exam (IINS )
Cisco Adaptive Security Appliances (ASA) content added in a new chapter (Chapter 10), including four ASA labs
Cisco Configuration Professional (CP) replaced Security Device Manager (SDM) throughout the course and labs
Expanded content scope, including the following:
Mitigating SNMP threats
IPv6 ACLs and object groups
Cisco IPS Global Correlation and Security Intelligence Operation (SIO)
Bridge Protocol Data Unit (BPDU) filtering
Cisco protected port feature (PVLAN edge)
Cisco SecureX Architecture
The Secure Copy (SCP) command

7. Course and Certification Exam Availability
End-of-Life Milestones for CCNA Security v1.0
End-of-Life Announcement
Last Class
Start Date
End Date
End-of-Support and
End-of-Availability
8-MAR-2012
31-May-2012
31-Aug-2012
Cisco IINS Certification Exam Availability
Course
Exam Name
Exam Number
Availability
CCNA Security v1.0
IINS
Available through 30-Sept-2012
CCNA Security v1.1
Available from 28-Feb-2012

8. CCNA Security Course Who Should Enroll?
College and university-level students seeking career-oriented, entry- level security specialist skills
IT professionals wishing to broaden or add specialized skills to their technology expertise
Current CCNA Certification holders who wish to build on their CCNA knowledge base
Prerequisites: CCNA-level networking knowledge and skills

9. Student Networking Knowledge and Skills
Curricula Portfolio
ROUTE: Implementing IP Routing
SWITCH: Implementing IP Switched Networks
TSHOOT: Troubleshooting and Maintaining IP Networks 
Networking for Home and Small Businesses
Working at a Small-to-Medium Business or ISP
Introducing Routing and Switching in the Enterprise
Designing and Supporting Computer Networks
Network Fundamentals
Routing Protocols and Concepts
LAN Switching and Wireless
Accessing the WAN
Network Professional
Cisco Packet Tracer
Network Specialist
Network Associate
CCNP
CCNA Security
CCNA Security
Network Technician
IT Essentials: PC Hardware and Software
CCNA Discovery
CCNA Exploration
IT Technician
IT Essentials
Student Networking Knowledge and Skills

10. Alignment to Industry Certifications
Courses Align with Globally Recognized Certifications
CCNA CCENT
CCNA
CCNA Security
CCNP
CompTIA A+
CCNP
IT Essentials
CCNA Security
CCNA Discovery
CCNA Exploration
Student Networking Knowledge and Skills

11. Cisco Security Certifications
Certification Name
Years of Experience
Job Role
Number of Exams
CCNA Security
1 – 3
Network Security Specialist, Security Administrator, Network Security Support Engineer 1
CCNP Security
3 – 5
Network Security Engineer 4
CCIE Security 7+ 2

12. CCNA Security Certification Meets Growing Demand
Verifies an individual’s skills in the following roles:
Network Security Specialist
Security Administrator
Network Security Support Engineer
Prerequisite for CCNP Security certification
Potential employers can feel confident that candidates have the skills needed to install, troubleshoot, and monitor Cisco security technologies.
The U.S. National Security Agency (NSA) and the Committee on National Security Systems (CNSS) recognizes that the Cisco CCNA Security courseware meets the CNSS 4011 training standard (learn more).

13. Course Design

14. CCNA Security v1.1 Course Design
Same GUI as CCNA Discovery and CCNA Exploration curricula
10 chapters and chapter exams
10 Cisco Packet Tracer activities
16 hands-on labs
One Packet Tracer Practice skills-based assessment
One final exam and one skills-based assessment
Balance of theory, hands-on practice, and application
Available in English only, no translated versions are planned
Enabled for both in-person and blended learning environments

15. CCNA Security v1.1 Equipment Requirements
Leverages CCNA Discovery/Exploration equipment bundle and topology and is identical to v1.0 equipment list with the addition of a Cisco ASA (Model 5505)
NDG NETLAB+ can be enabled for remote lab equipment operation.
The required Advanced IP Services feature set (ISR G1) and the Security (SEC) technology package license are available for academies that are part of Networking Academy Maintenance
Minimum System Requirements
Curriculum requirements: 1 Student PC per student 1 local curriculum server
Lab bundle requirements : 3 Cisco routers, 2 with the SEC technology package 3 two-port serial WAN interface cards 3 Cisco switches 1 Cisco Adaptive Security Appliance (ASA) Assorted Ethernet and Serial cables and hubs
Detailed equipment information is available in the Instructor Lab Manual and the CCNA Security Equipment List located in the CCNA Security resources folder on Cisco NetSpace and in the Equipment Information area on Academy Connection.

16. CCNA Security Course Outline
Course Chapters and Goals
Chapter 1
Modern Network Security Threats
Goal: Explain network threats, mitigation techniques, and the basics of securing a network.
Chapter 2
Securing Network Devices
Goal: Secure administrative access on Cisco routers.
Chapter 3
Authentication, Authorization and Accounting
Goal: Secure administrative access with AAA.
Chapter 4
Implementing Firewall Technologies
Goal: Implement firewall technologies to secure the network perimeter.
Chapter 5
Implementing Intrusion Prevention
Goal: Configure IPS to mitigate attacks on the network.
Chapter 6
Securing the Local Area Network
Goal: Describe LAN security considerations and implement endpoint and Layer 2 security features.
Chapter 7
Cryptographic Systems
Goal: Describe methods for protecting data confidentiality and integrity.
Chapter 8
Implementing Virtual Private Networks
Goal: Implement secure virtual private networks.
Chapter 9
Managing A Secure Network
Goal: Create and implement a comprehensive security policy to meet the security needs of an enterprise.
Chapter 10
Implementing the Cisco Adaptive Security Appliance (ASA)
Goal: Implement firewall technologies using the ASA to secure the network perimeter.

17. Instructor Training

18. CCNA Security Instructor Training
All instructors should have CCNA-level networking knowledge and skills
Instructor training is required for new CCNA Security instructors
Fast track option available with evidence of CCNA Security or higher certification or industry experience
Instructor training is delivered by Instructor Training Centers (ITCs)
40-hour training: in-person, blended, or remote delivery formats

19. CCNA Security Instructor Resource Site
The CCNA Security v1.1 Instructor Resource Site provides best practices, tips for classroom management and discussions, and teaching analogies index.php

20. For More Information

21. For More Information
Latest documents are posted in the CCNA Security resources area, which can be accessed through the Offerings menu on NetSpace, or in the Course Catalog on Academy Connection:
CCNA Security Scope and Sequence
CCNA Security FAQs
CCNA Security Datasheet
CCNA Security At-a-Glance
CCNA Security Overview Presentation
Visit the CCNA Security v1.1 Instructor Resource Site
Visit the CCNA Security certification page