Information Technology

Cisco® Securing Cloud Deployments with Cisco Technologies v1.0 (SECCLD)

Instructor-Led 7 Agenda

Description

This course shows you how to implement Cisco® cloud security solutions to secure access to the cloud, workloads in the cloud, and software as a service (SaaS) user accounts, applications, and data. Through expert instruction and hands-on labs, you’ll learn a comprehensive set of skills and technologies including: how to use key Cisco cloud security solutions; detect suspicious traffic flows, policy violations, and compromised devices; implement security controls for cloud environments; and implement cloud security management. This course covers usage of Cisco Cloudlock, Cisco Umbrella™, Cisco Cloud Email Security, Cisco Advanced Malware Protection (AMP) for Endpoints, Cisco Stealthwatch® Cloud and Enterprise, Cisco Firepower® NGFW (next-generation firewall), and more.

Course Overview

Course Objective

Upon completing this course, you will be able to meet these overall objectives: Contrast the various cloud service and deployment models. Implement the Cisco Security Solution for SaaS using Cisco Cloudlock Micro Services. Deploy cloud security solutions using Cisco AMP for Endpoints, Cisco Umbrella, and Cisco Cloud Email Security. Define Cisco cloud security solutions for protection and visibility using Cisco virtual appliances and Cisco Stealthwatch Cloud. Describe the network as a sensor and enforcer using Cisco Identity Services Engine (ISE), Cisco Stealthwatch Enterprise, and Cisco TrustSec®. Implement Cisco Firepower NGFW Virtual (NGFWv) and Cisco Stealthwatch Cloud to provide protection and visibility in AWS environments. Explain how to protect the cloud management infrastructure by using specific examples, defined best practices, and AWS reporting capabilities. Course Outline

Who Should Attend

The primary audience for this course is as follows: Engineers, administrators, and security-minded users of public, private, and hybrid cloud infrastructures responsible for implementing security in cloud environments Security architects Cloud architects Security engineers Cloud engineers System engineers Cisco integrators and partners

Introducing the Cloud and Cloud Security Lesson Id 1

Introducing the Cloud and Cloud Security

Implementing the Cisco Security Solution for SaaS Access Control Lesson Id 2

Implementing the Cisco Security Solution for SaaS Access Control

Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security Lesson Id 3

Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security

Introducing Cisco Security Solutions for Cloud Protection and Visibility Lesson Id 4

Introducing Cisco Security Solutions for Cloud Protection and Visibility

Describing the Network as the Sensor and Enforcer Lesson Id 5

Describing the Network as the Sensor and Enforcer

Implementing Cisco Security Solutions in AWS Lesson Id 6

Implementing Cisco Security Solutions in AWS

Describing Cloud Security Management Lesson Id 7

Describing Cloud Security Management

Lesson Id	Title	Description
1	Introducing the Cloud and Cloud Security	Describe the Evolution of Cloud Computing<br />Explain the Cloud Service Models<br />Explore the Security Responsibilities Within the Infrastructure as a Service (IaaS) Service Model<br />Explore the Security Responsibilities Within the Platform as a Service (PaaS) Service Model<br />Explore the Security Responsibilities Within the SaaS Service Model<br />Describe Cloud Deployment Models<br />Describe Cloud Security Basics
2	Implementing the Cisco Security Solution for SaaS Access Control	Explore Security Challenges for Customers Using SaaS<br />Describe User and Entity Behavior Analytics, Data Loss Prevention (DLP), and Apps Firewall<br />Describe Cloud Access Security Broker (CASB)<br />Describe Cisco CloudLock as the CASB<br />Describe OAuth and OAuth Attacks
3	Deploying Cisco Cloud-Based Security Solutions for Endpoints and Content Security	Describe Cisco Cloud Security Solutions for Endpoints<br />Describe AMP for Endpoints Architecture<br />Describe Cisco Umbrella<br />Describe Cisco Cloud Email Security<br />Design Comprehensive Endpoint Security
4	Introducing Cisco Security Solutions for Cloud Protection and Visibility	Describe Network Function Virtualization (NFV)<br />Describe Cisco Secure Architectures for Enterprises (Cisco SAFE)<br />Describe Cisco NGFWv/Cisco Firepower Management Center Virtual<br />Describe Cisco ASAv<br />Describe Cisco Services Router 1000V<br />Describe Cisco Stealthwatch Cloud<br />Describe Cisco Tetration Cloud Zero-Trust Model
5	Describing the Network as the Sensor and Enforcer	Describe Cisco Stealthwatch Enterprise<br />Describe Cisco ISE Functions and Personas<br />Describe Cisco TrustSec<br />Describe Cisco Stealthwatch and Cisco ISE Integration<br />Describe Cisco Encrypted Traffic Analytics (ETA)
6	Implementing Cisco Security Solutions in AWS	Explain AWS Security Offerings<br />Describe AWS Elastic Compute Cloud (EC2) and Virtual Private Cloud (VPC)<br />Discover Cisco Security Solutions in AWS<br />Explain Cisco Stealthwatch Cloud in AWS
7	Describing Cloud Security Management	Describe Cloud Management and APIs<br />Explain API Protection<br />Illustrate an API Example: Integrate to ISE Using pxGrid<br />Identify SecDevOps Best Practices<br />Illustrate a Cisco Cloud Security Management Tool Example: Cisco Defense Orchestrator<br />Illustrate a Cisco Cloud Security Management Tool Example: Cisco CloudCenter™<br />Describe Cisco Application Centric Infrastructure (ACI)<br />Describe AWS Reporting Tools