Attack. Detect. Remediate. — All in One Lab.

Switch from attacker to defender in this instructor-led lab. Use a preconfigured pod to launch phishing-based intrusions mapped to MITRE TTPs, then pivot to blue-team work with Secure Firewall, Secure Network Analytics, Secure Email, and Cisco XDR. You’ll experience the full purple-team loop—attack, detect, investigate, and remediate—building hands-on skills that strengthen defenses where it counts.

Push Your Firewall Further.

Take Cisco Secure Firewall beyond the basics in this advanced hands-on lab. Explore Zero Trust Access, policy-based routing with user identity, and SD-WAN integration with VRF and dynamic tunnels. Test dashboards for VPNs, run packet tracing, and dive into threat labs with tools like AttackIQ and Caldera. You’ll finish with the skills to design and operate a firewall strategy that’s smarter, stronger, and ready for modern threats.

One Platform. Any User. Anywhere.

See how Cisco Secure Access delivers modern Security Service Edge with a seamless user experience. In this guided lab, you’ll walk through real-world scenarios as an end user, experiencing frictionless access to apps and data from any device.

Explore capabilities like Zero Trust Network Access, VPN as a Service, secure web filtering, malware defense, and data protection—all managed from a single cloud-based console. With read-only access, you’ll see how Secure Access simplifies IT operations while enforcing consistent, cloud-delivered security at scale.

Evolve Security for the Cloud Era.

See how Cisco Secure Access simplifies protection for users, devices, and applications through a unified, cloud-delivered architecture. In this guided lab, you’ll explore zero trust innovations that reduce risk with granular controls while ensuring a seamless user experience. Walk away with clear insight into how IT can centralize security, improve visibility, and operate with greater efficiency in the hybrid world.

Deploy with Skill. Demonstrate with Confidence.

This hands-on lab gives you the skills and methodology to install, configure, and integrate Cisco XDR in a controlled environment. Working through guided scenarios, you’ll connect data sources, configure the console, and set up supporting devices to mirror real-world requirements. By the end, you’ll be ready to deliver XDR implementations, Proof-of-Concepts, and customer demos with confidence—well-prepared before stepping into a production environment.

Build Your Firewall from the Ground Up.

Get hands-on with Cisco Secure Firewall basics in this guided lab. Configure FMC, create objects and security zones, register devices, and define policies for malware protection, decryption, and intrusion prevention. Step through access control rules and visibility features to see how each piece fits together. These fundamentals prepare you for advanced labs and give you the core skills to design and manage deployments with confidence.

Automate Security. Accelerate Results.

In this hands-on workshop, you’ll learn how to bring automation into Cisco Security using APIs and tools like REST, Ansible, and Python. Start with API fundamentals, then move into real integrations with Meraki, CDO, and ISE to streamline configuration and policy management. Along the way, you’ll practice building repeatable playbooks and automating tasks that save time and reduce errors. By the end, you’ll have the skills to make security faster, more consistent, and ready to scale.

Go from Zero to SASE.

In this hands-on workshop, you’ll build a full Secure Access Service Edge solution using Cisco’s security and networking portfolio. Work directly with Cisco Umbrella, Secure Endpoint, AnyConnect Secure Mobility Client, SD-WAN powered by Viptela and Meraki, and ThousandEyes to see how cloud-delivered security and connectivity come together. By the end, you’ll understand how to design, deploy, and operate SASE in practice—uniting protection, performance, and visibility in one architecture.

Go from Zero to SASE—Updated Experience.

This updated version of the SASE Workshop reflects the latest UI and feature changes, but the mission remains the same: build a complete Secure Access Service Edge solution with Cisco’s portfolio. You’ll get hands-on with Cisco Umbrella, Secure Endpoint, AnyConnect Secure Mobility Client, SD-WAN powered by Viptela and Meraki, and ThousandEyes to see how cloud-delivered security and connectivity align. The scenarios are refreshed, but the goal is unchanged—design, deploy, and operate SASE with confidence.

Segment Smarter. Secure Everywhere.

See how Cisco Secure Workload (formerly Tetration) brings zero-trust microsegmentation to any environment from a single console. In this lab, you’ll protect a live invoice application (SIWAPP), using agents to automatically discover traffic flows, suggest segmentation policies, and expose vulnerabilities in workloads and containers. Walk away with hands-on experience applying microsegmentation to reduce risk and strengthen application security.

Rediscover. Reinforce. Reignite.

This lab brings you back to the core of Hybrid Mesh Firewall while layering in modern capabilities. You’ll register devices, run threat assessments with Caldera, and test encrypted visibility without decryption. Dive into SD-WAN with simplified branch-to-hub tunnels and policy-based routing, then explore AI-driven assistants for policy analysis and optimization. Finally, integrate segmentation across firewall and workload for unified control. Walk away with refreshed skills and new insights to strengthen firewall strategy in today’s evolving networks.

Stay Ahead of Attackers 

Cyber threats move fast—can you respond even faster? Join our Rapid Incident Response Workshop and master the art of detecting and neutralizing threats in minutes, not weeks. Get hands-on with Cisco XDR, tackle live threat scenarios, sharpen your threat triage skills, and connect with cybersecurity experts. Whether you're in IT, security operations, or threat hunting, this workshop will arm you with the tools and insights to stay ahead of cyber adversaries. Don't just react—hunt threats with confidence! 

Modernize the Firewall. Secure the Enterprise.

Lead PseudoCo’s Project Meteor, a hands-on modernization effort powered by Cisco’s Hybrid Mesh Firewall. Across three phases, you’ll onboard firewalls, simplify branch connectivity, integrate cloud policies, and configure segmentation for workloads and apps. By the end, you’ll see how Hybrid Mesh Firewall unifies security across data center, cloud, and campus—giving you practical experience in protecting a global enterprise at scale.

Zero Trust in Action.

Step into the role of administrator at PseudoCo and design a modern Secure Service Edge with Cisco Secure Access. Configure secure connectivity between remote users and private apps, integrate identity services like Active Directory and Duo, and enable SAML-based authentication. Along the way, you’ll validate tunnels, monitor performance with ThousandEyes, and test access end-to-end—leaving with the confidence to deliver Zero Trust access seamlessly and securely.

Present with Impact.

Learn how to deliver seamless, engaging demos with Demostack in this guided training. You’ll build the skills to set up environments, run customer-ready scenarios, and showcase Cisco solutions with confidence. Along the way, you’ll sharpen your ability to connect with audiences and create demo experiences that resonate and inspire.

Facilitate with Impact.
Get ready to deliver the Hybrid Mesh Firewall Design Clinic. This Train the Trainer equips you with the resources, expectations, and logistics needed to run your own customer sessions. By the end, you’ll understand how to guide discussions, highlight benefits, and confidently lead design clinics that help customers map their firewall strategy with Cisco.

Guide with Confidence.
Get ready to deliver the Secure Access SSE Experience workshop. This Train the Trainer equips you with the logistics, resources, and proctor rights you’ll need to run the lab. Learn how to guide participants through end-user scenarios, highlight Zero Trust capabilities, and answer common questions with ease—so you can confidently lead others through the SSE journey.

Teach the Cloud Era.
Prepare to deliver the Secure Access Advanced Lab with confidence. In this Train the Trainer, you’ll review the course flow, explore instructor resources, and gain proctor access for managing participants. Learn how to highlight cloud-delivered Zero Trust concepts, track student progress, and address logistics so you can run engaging, effective Advanced Lab sessions.

Run Umbrella Studio with Ease.
Take this Train the Trainer to prepare for Umbrella Studio delivery. Watch the recorded Webex, review supporting content, and learn the logistics required to host your own session. Once complete, you’ll gain proctor access—so you can confidently guide participants through Studio scenarios and deliver a seamless Umbrella training experience.

Lead Firewall Labs with Confidence.
This Train the Trainer familiarizes you with the Secure Firewall Test Drive workshop. You’ll explore course content, review setup requirements, and understand the logistics for running events successfully. Completion grants you proctor rights, enabling you to deliver Secure Firewall Test Drive sessions and help participants gain hands-on experience with Cisco’s firewall solutions.

Teach Email Security.
Stay up to date and ready to deliver the Secure Email Threat Defense (ETD) Workshop. This Train the Trainer ensures you understand the course content, event logistics, and delivery flow. Once complete, you’ll receive proctor rights—so you can run ETD sessions that empower participants to detect and defend against email-borne threats.

Automate. Educate. Enable.
Prepare to deliver the DevNet Ignite Security Workshop by mastering both the content and the logistics. This Train the Trainer gives you the resources, proctor access, and guidance to lead sessions on API fundamentals, automation workflows, and integrations with Cisco Security. By the end, you’ll be ready to confidently teach others how to scale security through automation.

Lead the Hunt. Teach with Confidence.

Ready to deliver your own Rapid Incident Response Workshop? This Train the Trainer equips you with proctor access, resources, and step-by-step guidance to run RIR events with impact. Learn how to manage logistics, guide participants through labs, and answer questions like a pro. By the end, you’ll be prepared to deliver engaging sessions that empower others to hunt threats with confidence.

Step into your first Cisco ISE deployment in a guided dCloud lab. Recommended for beginner to intermediate post-sales engineers, this course covers planning, design, implementation, and basic operations. Completion of the Stage 2 prerequisite quiz is required. By the end, you’ll gain practical experience to deliver ISE deployments with confidence and a strong foundation for secure access.

Secure Access with Duo.

In this two-day, hands-on course, advanced SEs and FEs will complete their first Cisco Secure Access by Duo deployment in a dCloud lab. Through lectures and labs you’ll learn to enroll users, configure authentication and MFA, enable SSO, establish device trust, and protect every application. Walk away ready to deliver Duo deployments that balance strong security with user simplicity.

Turn Knowledge into Conversations.

This Stage 3 workshop builds on earlier FireJumper learning to help you engage customers directly. Across two days, you’ll learn to connect Cisco Security to customer environments, processes, and gaps, then map solutions into tailored workflows. The session includes the Stage 3 validation assessment—so bring your laptop and charger—and prepares you to move from product knowledge to meaningful customer conversations.

Advance Your ISE Expertise.

For intermediate to advanced post-sales engineers, this course takes you beyond the basics of Cisco ISE. With ISE 301 or equivalent experience as a prerequisite, you’ll use a dCloud lab to tackle advanced planning, configuration, integrations, and troubleshooting. By the end, you’ll sharpen your expertise to design, deploy, and support distributed ISE environments with confidence.

Automate Security. Accelerate Response.

In this hands-on workshop, you’ll explore how automation strengthens security operations across hybrid environments. Through five tracks—Intro to Security Automation, Network Security, Breach Protection, User Protection, and Cloud Protection—you’ll practice real-world use cases using Cisco tools and APIs. Walk away with the skills to detect faster, respond smarter, and reduce manual workload with consistent, automated defenses.

Automate Networking. Accelerate Results.

This hands-on workshop gives you the skills to streamline networking operations with Cisco automation tools. You’ll explore REST APIs, Catalyst Center, Meraki Dashboard, Python, Ansible, and ThousandEyes—learning how to implement, orchestrate, and optimize across hybrid environments. Walk away with practical strategies to reduce manual work, ensure consistent deployments, and boost speed, accuracy, and resilience.

Unify Control. Simplify Security.

In this interactive design workshop, Cisco experts work with your team to map your current firewall landscape and explore how Hybrid Mesh Firewall can bring it all together. Through discussion and whiteboarding, you’ll identify integration opportunities, improve visibility, and outline a roadmap toward unified management. The result: stronger security, simplified operations, and reduced complexity across your network.

Deploy with Confidence. Validate with Precision.

This hands-on lab introduces the Cisco N9300 Smart Switch and Hypershield in a guided dCloud environment. You’ll learn how to configure and deploy Hypershield, gaining the skills and methodology needed for real-world customer implementations, Proof-of-Value installations, and demonstrations. By the end, you’ll be prepared to showcase Hypershield with confidence in any engagement.

Unify Identity. Strengthen Security.

Cisco Identity Intelligence connects the dots between your identity providers, devices, and apps to stop attackers who exploit weak or stolen credentials. In this hands-on lab, you’ll learn how to ingest identity signals, detect anomalies, and enforce consistent policies across the Cisco Security Cloud. Walk away with the skills to reduce identity risk and boost visibility across your hybrid environment.

Deploy. Demonstrate. Lead.

Get ready to deliver the XDR Ignite Workshop with confidence. This Train the Trainer equips you with the logistics, resources, and proctor access you’ll need to guide participants through SCC setup, data source integrations, and XDR configuration. By the end, you’ll be prepared to run Ignite sessions end to end—helping others gain the skills to deploy, demonstrate, and operationalize Cisco XDR.

Build. Share. Enable.

This workshop introduces you to Moodle, the Learning Management System (LMS) powering Cisco Security training. You’ll learn how the platform is maintained by volunteers, hosted in AWS, and used by TMEs and SEs to design and deliver courses. By the end, you’ll understand how to create, manage, and maintain your own workshops—contributing to a growing community of shared learning and enablement.

Unify Networking and Security.

Explore Cisco Secure Connect, the turnkey SASE solution built for speed and simplicity. In this guided lab, you’ll configure secure connectivity for users, branches, and applications while enforcing policies through a single cloud-managed console. See how Secure Connect combines networking, security, and visibility into one platform—reducing complexity and costs while delivering a seamless, secure hybrid work experience.

Teach Microsegmentation with Confidence.

Get ready to deliver the Secure Workload Workshop. This Train the Trainer equips you with the resources, logistics, and proctor access you need to run sessions effectively. You’ll learn how to guide participants through hands-on labs, explain Zero Trust microsegmentation concepts, and answer common questions with ease. By the end, you’ll be prepared to lead Secure Workload workshops that help others segment smarter and secure everywhere.

Detect Threats Across Cloud and Premises.

In this guided lab, you’ll explore Cisco Secure Cloud Analytics, a SaaS-based NDR solution for both on-premises and public cloud networks. Using the dCloud instant demo, you’ll investigate visibility and detections powered by network telemetry, then dive into cloud-specific analytics. By the end, you’ll see how Secure Cloud Analytics helps uncover threats and anomalies no matter where your workloads reside.

See the Threats Hiding in Your Network.

Spot the anomalies in your traffic with this hands-on Secure Network Analytics Test Drive. Investigate insider threats, exfiltration, and botnet activity in real time. With Cisco’s Network Detection and Response, your network becomes a sensor that reveals what attackers want to hide. You’ll generate traffic, trace suspicious patterns, and see how Secure Network Analytics empowers you to detect more, know more, and stop threats faster.

From Email to Exploit. Investigate with XDR.

In this hands-on lab, you’ll trace a spear phishing attack from initial email through remote access trojan infection, using Cisco XDR to follow the breadcrumbs. Learn to investigate, analyze, and validate findings in the console while uncovering the tactics of threat actors like Blind Eagle, who use commodity RATs and encrypted payloads to target global industries. Gain the skills to detect, investigate, and stop phishing-born breaches.

Connect. Secure. Simplify.

In this hands-on workshop, you’ll explore how Cisco Secure Access delivers Zero Trust Access across users, devices, and applications. Learn to configure secure private access, browser- and client-based connectivity, and VPNaaS, then extend protection with DNS Security, Secure Web Gateway, CASB, Firewall-as-a-Service, and DEM. By the end, you’ll see how Zero Trust reduces risk, simplifies operations, and creates a seamless user experience.

Investigate Faster. Respond Smarter.

Take the proven scenarios from our Rapid Incident Response Workshop and see them through a new lens with Splunk ES and Splunk SOAR. In this hands-on session, you’ll explore how Splunk integrates with Cisco Security, investigate incidents end to end, and compare detection and response workflows across Splunk and Cisco XDR. Walk away with a clear view of how each platform handles the fight—and the insight to choose the right tool for the mission.

Learn to emulate realistic adversaries and validate detection/response across XDR and integrated tools. Using Caldera, this lab covers the basics of adversary emulation, setting up attack operations, observing telemetry, and running intermediate attacks. Advanced module (creating custom operations) is in progress. Ideal for red/blue teams and ops staff wanting practical, repeatable validation of defenses.

Deploy with Confidence. Respond with Precision.

Ready to get the most out of Cisco Secure Endpoint? In this three-hour course, you’ll learn how to configure the right policies, roll out agents at scale, and investigate incidents with speed and accuracy. From deployment strategies to advanced response actions, you’ll walk away knowing how to tune Secure Endpoint for maximum protection and minimum noise—so your team can stop threats without slowing down.

Build. Test. Deploy with Confidence.

Get hands-on with Cisco CML, pyATS, Ansible, Docker, and GitLab CI/CD to automate network operations end to end. You’ll build configurations, validate them in test environments, and apply changes seamlessly into production. By the end, you’ll understand how automation streamlines management, reduces errors, and ensures consistency across infrastructure—whether you’re new to coding or advancing existing skills.