Back to Search Results

Training Course Summary:

The DPS course is a three-day, leader-led course. The DPS course is designed for delivery by Cisco Learning Partners (CLPs). This course teaches the knowledge and skills needed to design secure network perimeters. The focus is on providing connectivity and access control enforcement solutions on network boundaries. The course identifies, compares and explains NAT technologies (both basic and advanced) and advanced NAT design. It also describes the function, features and limitations of firewalls, and details best practice firewall design guidelines and architectures based on a defined security policy. Guidelines are provided on how to integrate an application with a particular firewall technology and how to design high availability and high performance firewall systems. Advanced ASA features are covered along with the advanced security features of Cisco IOS software when using it in a firewall system design.

This is a design course; it includes design exercises to apply security policies, design guidelines, and best-practices. Hands-on labs and exercises to test and deploy these designs may be included in the DPS course, at the option of the CLP offering the course. Implementation and deployment of security designs is taught and practiced in the Cisco SAFE Implementation (CSI) course. Hands-on deployment labs and exercises are included as standard in the CSI course.

Course Objectives


Suggest improvements to an organization's perimeter security.
Design a new solution based on an organization?s requirements.
Select an appropriate NAT technology for an organization's requirements.
Design advanced NAT solutions for some common enterprise connectivity scenarios.
Explain the function of a firewall and to identify its benefits and limitations.
Select an appropriate firewall technology for an organization's application needs.

Pre-Requisites:

To fully benefit from the Designing Perimeter Security course, students should alrady possess certain prerequisite skills achieved by attending all of the follwing courses:

Building Cisco Multilayer Switched Networks (BCMSN)
Building Scalable Cisco Internetworks (BSCI)
Cisco Secure PIX Firewall Advanced (CSPFA)
Securing Cisco IOS Networks (SECUR, formerly MCNS)

Who Should Attend:

Engineers who support sales of Cisco VPN and security product solutions
Cisco Channel Partners who design, sell, implement and maintain secure networks
Cisco Customers who design, implement and maintain secure networks.

Training Course Overview/Content:

Perimeter Security Analysis

Network Address Translation (NAT) Solutions

Firewall Functionality

Perimeter Security Design

Perimeter Security Products