Search results

HMF Design Clinic - AI Security

Discussion about AI security and Cisco design proposals

FTD 10 Test Lab (Mon)

This lab covers the key tasks required to bring a newly installed FMC and FTD to an operational state. It is intended to walk the user through the various tasks required to ensure you have a functional and secure firewall.

There are a number of scenarios available which are outlined below. Users should start at the beginning which will take you through initial setup of the FMC, device registration, zone and interface setup, routing and NAT policies. You can then proceed to configuring threat protection such as Discovery policy, Intrusion policy using Snort 3, Malware & File policy, Security Intelligence, Decryption policy and finally Access Control rules and advanced settings.

To accomplish these labs, we will use the dCloud lab environment. There are a number of VMs deployed including Firewall Management Center (FMC), FTD devices, as well as Windows Domain Controllers and other Windows and Linux hosts. There are also CSR routers to simulate various internal network segments in a typical organization.

List of Lab Scenarios

• Initial Configuration
  • FMC configuration
  • Network Object creation and Variable Set
  • Security Zones
  • Basic Access Control
  • Device registration
  • Platform settings
• Network Configuration
  • Interface, Routes and NAT
• Threat Configuration
  • Network Discovery policy
  • Malware & File policy
  • Decryption policy
  • Intrusion/Network Analysis policy
• Access Control
  • Access Control Policy Settings
  • Rules
  • Encrypted Visibility Engine

Advanced FW TD 10.0.0 - Alefnula - Mon

Overview

The dCloud lab pods support capabilities beyond the lab exercises presented in the lab guides. As a lab pod user, you should consider the lab pod as a generic testing environment. To take full advantage of this environment, it is important for you to know the capabilities of the lab.

List of Lab Scenarios

• CSDAC in FMC
• Zero Trust Access (ZTA)
• Secure Firewall with SD-WAN Capabilities
• PBR with SGT/User Identity
• VRF Support for DVTI using SD-WAN Wizard
• SD-WAN Summary Dashboard
• Site to Site VPN Dashboard
• Packet-Tracer in Firewall Threat Defense
• Remote Access VPN Dashboard
• Threat Features in 10.0

• • AI Assistant & Policy Analyzer and Optimizer

dcloud resources are the same as for the foundation lab:

https://dcloud2-lon.cisco.com/event/400964/access

Advanced FW TD 10.0.0 - Alefnula - Wed

Overview

The dCloud lab pods support capabilities beyond the lab exercises presented in the lab guides. As a lab pod user, you should consider the lab pod as a generic testing environment. To take full advantage of this environment, it is important for you to know the capabilities of the lab.

List of Lab Scenarios

• CSDAC in FMC
• Zero Trust Access (ZTA)
• Secure Firewall with SD-WAN Capabilities
• PBR with SGT/User Identity
• VRF Support for DVTI using SD-WAN Wizard
• SD-WAN Summary Dashboard
• Site to Site VPN Dashboard
• Packet-Tracer in Firewall Threat Defense
• Remote Access VPN Dashboard
• Threat Features in 10.0

• • AI Assistant & Policy Analyzer and Optimizer

dcloud resources are the same as for the foundation lab:

https://dcloud2-lon.cisco.com/event/400964/access

CSA-ZTA-NTT

Course Title:
Designing and Deploying Zero Trust Access with Cisco Secure Access

Course Description:
Step into the role of a network security administrator in this guided, hands-on workshop. You’ll learn how to design, deploy, and validate a modern Zero Trust Access solution using Cisco Secure Access. Acting as the administrator for the fictional organization PseudoCo, you will configure secure connectivity between remote users and private applications hosted in a secure data center.

You’ll have full administrative access to a dedicated virtual data center environment in Cisco’s dCloud, pre-provisioned for Secure Access integration. Each participant also receives a unique Secure Access organization, enabling you to configure and test infrastructure in any Secure Access region, with recommendations to align settings with your specific dCloud Data Center location.

Workshop Highlights

• Real-World Zero Trust Scenarios: Configure secure connectivity for remote users and private applications.
• Hands-On Labs: Access to a fully provisioned virtual data center and unique Secure Access organization.
• End-to-End Deployment: Learn to set up VPNs, IP pools, and tunnels for seamless, secure access.
• Expert Guidance: Step-by-step lab exercises and access to proctors for support.

Key Takeaways

• Practical experience deploying Zero Trust Access solutions using Cisco Secure Access.
• Skills to configure and validate secure connections between distributed users and applications.
• Understanding of best practices for aligning Secure Access configurations with data center regions.

Who Should Attend

• IT and network administrators responsible for securing enterprise access.
• Security engineers and architects interested in Zero Trust methodologies.
• Anyone preparing to deploy Cisco Secure Access solutions in their organization.

Workshop Format

• Hands-On Labs: Interactive, guided exercises in a live dCloud virtual environment.
• Instructor Support: Direct assistance from proctors and subject matter experts.
• Individual Access: Each attendee receives their own Secure Access organization and isolated lab environment.

Prerequisites

• Familiarity with basic networking and security concepts.
• Prior experience with remote access technologies or Cisco solutions is helpful but not required.
• Access to a Cisco dCloud account (provided as part of the course).

Why Attend?

This workshop offers a unique, practical opportunity to master Zero Trust Access with Cisco Secure Access in a risk-free, fully supported lab environment. You’ll leave with the confidence and know-how to implement secure, modern access solutions tailored to your organization’s needs.

Foundation FW TD 10.0.0 - Alefnula

This lab covers the key tasks required to bring a newly installed FMC and FTD to an operational state. It is intended to walk the user through the various tasks required to ensure you have a functional and secure firewall.

There are a number of scenarios available which are outlined below. Users should start at the beginning which will take you through initial setup of the FMC, device registration, zone and interface setup, routing and NAT policies. You can then proceed to configuring threat protection such as Discovery policy, Intrusion policy using Snort 3, Malware & File policy, Security Intelligence, Decryption policy and finally Access Control rules and advanced settings.

To accomplish these labs, we will use the dCloud lab environment. There are a number of VMs deployed including Firewall Management Center (FMC), FTD devices, as well as Windows Domain Controllers and other Windows and Linux hosts. There are also CSR routers to simulate various internal network segments in a typical organization.

List of Lab Scenarios

• Initial Configuration
  • FMC configuration
  • Network Object creation and Variable Set
  • Security Zones
  • Basic Access Control
  • Device registration
  • Platform settings
• Network Configuration
  • Interface, Routes and NAT
• Threat Configuration
  • Network Discovery policy
  • Malware & File policy
  • Decryption policy
  • Intrusion/Network Analysis policy
• Access Control
  • Access Control Policy Settings
  • Rules
  • Encrypted Visibility Engine

Advanced FW TD 10.0.0 - Alefnula

Overview

The dCloud lab pods support capabilities beyond the lab exercises presented in the lab guides. As a lab pod user, you should consider the lab pod as a generic testing environment. To take full advantage of this environment, it is important for you to know the capabilities of the lab.

List of Lab Scenarios

• CSDAC in FMC
• Zero Trust Access (ZTA)
• Secure Firewall with SD-WAN Capabilities
• PBR with SGT/User Identity
• VRF Support for DVTI using SD-WAN Wizard
• SD-WAN Summary Dashboard
• Site to Site VPN Dashboard
• Packet-Tracer in Firewall Threat Defense
• Remote Access VPN Dashboard
• Threat Features in 10.0

• • AI Assistant & Policy Analyzer and Optimizer

dcloud resources are the same as for the foundation lab:

https://dcloud2-lon.cisco.com/event/400964/access

HMF-Meteor-PRG

V tomto labu budete mít možnost pracovat v simulovaném projektu modernizace firewallů s názvem „Meteor“, abyste nakonfigurovali a nasadili nové řešení Hybrid-Mesh Firewall.

Projdete fázemi:

Fáze 1: Segmentace sítě založená na zónách a DC Edge: Přihlaste se do Cisco Security Cloud Control, zaregistrujte (onboardujte) fyzické firewally, vytvořte pravidla pro identifikaci aplikací, zjednodušte konektivitu poboček a nakonfigurujte směrování založené na pravidlech (Policy Based Routing).

Fáze 2: Cloud Edge: Přihlaste se do Cisco Security Cloud Control, povolte viditelnost cloudu, shromažďujte protokoly o DNS tocích (DNS flow logs), spravujte sdílené objekty a nastavte tagování.

Fáze 3: Makro/mikro segmentace: Přihlaste se do Cisco Security Cloud Control a nakonfigurujte pravidla pro ochranu aplikačních zátěží (workloadů).

HMF-Meteor-BLA

V tomto labu budete mít možnost pracovat v simulovaném projektu modernizace firewallů s názvem „Meteor“, abyste nakonfigurovali a nasadili nové řešení Hybrid-Mesh Firewall.

Projdete fázemi:

Fáze 1: Segmentace sítě založená na zónách a DC Edge: Přihlaste se do Cisco Security Cloud Control, zaregistrujte (onboardujte) fyzické firewally, vytvořte pravidla pro identifikaci aplikací, zjednodušte konektivitu poboček a nakonfigurujte směrování založené na pravidlech (Policy Based Routing).

Fáze 2: Cloud Edge: Přihlaste se do Cisco Security Cloud Control, povolte viditelnost cloudu, shromažďujte protokoly o DNS tocích (DNS flow logs), spravujte sdílené objekty a nastavte tagování.

Fáze 3: Makro/mikro segmentace: Přihlaste se do Cisco Security Cloud Control a nakonfigurujte pravidla pro ochranu aplikačních zátěží (workloadů).

CSA-ZTA-PRG

V tomto praktickém kurzu s průvodcem prozkoumáte, jak navrhovat, nasazovat a ověřovat moderní řešení Zero Trust Access pomocí Cisco Secure Access. Během cvičení se ujmete role administrátora fiktivní organizace PseudoCo a budete konfigurovat zabezpečené připojení mezi vzdálenými uživateli a soukromými aplikacemi hostovanými v zabezpečeném datovém centru.

Účastníci budou mít plný administrátorský přístup k prostředí virtuálního datového centra nasazeného v jedné z lokalit Cisco dCloud Data Center, které obsahuje veškerou infrastrukturu potřebnou pro integraci se Secure Access.

Každý účastník bude mít také plný přístup k unikátní organizaci Secure Access. Tyto organizace (Orgs) jsou plně připraveny pro konfiguraci infrastruktury.

CSA-ZTA-BLA

V tomto praktickém kurzu s průvodcem prozkoumáte, jak navrhovat, nasazovat a ověřovat moderní řešení Zero Trust Access pomocí Cisco Secure Access. Během cvičení se ujmete role administrátora fiktivní organizace PseudoCo a budete konfigurovat zabezpečené připojení mezi vzdálenými uživateli a soukromými aplikacemi hostovanými v zabezpečeném datovém centru.

Účastníci budou mít plný administrátorský přístup k prostředí virtuálního datového centra nasazeného v jedné z lokalit Cisco dCloud Data Center, které obsahuje veškerou infrastrukturu potřebnou pro integraci se Secure Access.

Každý účastník bude mít také plný přístup k unikátní organizaci Secure Access. Tyto organizace (Orgs) jsou plně připraveny pro konfiguraci infrastruktury.