The following information provides general guidelines for the content likely to be included on the Managing Cisco Network Security exam. However, other related topics may also appear on any specific delivery of the exam.
Evaluating Network Security Threats
| What is a security policy? |
| Reasons for creating a security policy |
| Why do we have security issues? |
Introduction to AAA Security for Cisco Routers
| AAA secures Network Access |
| NAS AAA configuration process |
| Configuring and testing AAA security |
Configuring Cisco Secure ACS and TACACS+
| Product overview: Cisco Secure ACS for Windows NT or Windows 2000 |
| Installing Cisco Secure ACS 3.0 for Windows NT or Windows 2000 |
| Administering and troubleshooting Cisco Secure ACS for Windows NT or Windows 2000 |
| Cisco Secure ACS 2.3 for UNIX (Solaris) |
| TACACS+ overview and configuration |
Configuring a Cisco Perimeter Router
| Perimeter security problems and solutions |
| Problems-eavesdropping and session replay |
| Problems-unauthorized access, data manipulation, and malicious destruction |
| Problem-lack of legal IP addresses |
| Problem-rerouting attacks |
| Problem-Denial of Service attacks |
Control IOS Firewall Context-Based Access Control Configuration
| Introduction to the Cisco IOS Firewall |
| Context-Based Access Control |
| Global timeouts and thresholds |
| Port-to-Application Mapping |
| Inspection rules and ACLs applied to router interfaces |
Cisco IOS Firewall Authentication Proxy Configuration
| Introduction to the Cisco IOS Firewall authentication proxy |
| Authentication proxy configuration |
| Test and verify configuration |
Cisco IOS Firewall Intrusion Detection System Configuration
| Cisco IOS Firewall IDS introduction |
| Initializing Cisco IOS Firewall IDS |
| Configuring, disabling, and excluding signatures |
| Creating and applying audit rules |
Understanding Cisco IOS IPSec Support
| Cisco IOS IPSec technologies |
| Cisco IOS Cryptosystem overview |
| IPSec support in Cisco systems products |
Configure Cisco IOS IPSec for Pre-Shared Keys Site-to-Site
| Configure IPSec encryption tasks |
| Task 1-Prepare for IKE and IPSec |
| Step 1-Configure transform set suites |
| Step 2-Configure global IPSec Security Association lifetimes |
| Step 3-Create crypto ACLs |
| Step 4-Create crypto maps |
| Step 5-Apply crypto maps to interfaces |
| Task 4-Test and verify IPSec |
| Overview of configuring IPSec manually |
| Overview of configuring IPSec for RSA encrypted nonces |
Configure Cisco IOS IPSec Certificate Authority Support Site-to-Site
| Configure CA support tasks |
| Task 1-Prepare for IKE and IPSec |
| Task 2-Configure CA support |
| Task 5-Test and verify IPSec |
Configuring IOS Remote Access Using Cisco Easy VPN
| Introduction to Cisco Easy VPN |
| Overview of the Cisco VPN 3.5 Client |
| Easy VPN server configuration tasks |
Pre-Configuring the Cisco VPN 3.5 Client |
