Back to Search Results

Training Course Summary:

Designing VPN Security (DVS) is a four-day leader-led course offered by Cisco Certified Learning Partners (CLP?s). This task-oriented course teaches the knowledge and skills needed to design a secure Cisco VPN network for an enterprise.

This is a design course; it includes design exercises to apply security policies, design guidelines, and best-practices. Hands-on labs and exercises to test and deploy these designs may be included in the DPS course, at the option of the CLP offering the course. Implementation and deployment of security designs is taught and practiced in the Cisco SAFE Implementation (CSI) course. Hands-on deployment labs and exercises are included as standard in the CSI course

Course Objectives


Recognize the services offered by cryptography and recommend those services to an organization to address their specific needs
Describe various encryption, hashing, and signing algorithms and select the best algorithm in a design situation
Explain the role of key management in cryptography
Explain specific guidelines which need to be considered when deploying cryptographic systems
Select the best practices of key management in a design situation
Describe the standards and procedures used with the PKI
Explain the limitations of PKI technologies in various security designs
Design secure VPN?s using various VPN technologies.
Identify the benefits and drawbacks of each VPN technology
Implement basic IPSec using all currently supported encryption and authentication mechanisms
Deploy IKE to increase the scalability of IPSec solutions.
Design and implement site-to-site VPNs using IPSec
Design and implement remote access VPNs using IPSec
List the software products used to form the management of IPSec devices and solutions
Design and implement secure wireless networks

Pre-Requisites:

To fully benefit from the Designing VPN Security course, students should alrady possess certain prerequisite skills achieved by attending all of the follwing courses:

Building Cisco Multilayer Switched Networks (BCMSN)
Building Scalable Cisco Internetworks (BSCI)
Cisco Secure PIX Firewall Advanced (CSPFA)
Cisco Secure Virtual Private Networks (CSVPN)
Securing Cisco IOS Networks (SECUR, formerly MCNS)

Who Should Attend:

Engineers who support sales of Cisco VPN and security product solutions
Cisco Channel Partners who design, sell, implement and maintain VPN networks
Cisco Customers who design, implement and maintain VPN networks.

Training Course Overview/Content:

Course Introduction

Cryptographic Services

Key Management

Public Key Infrastructure (PKI)

Secure Dial Connectivity

VPN Technologies

IPSec VPN Technology

Internet Key Exchange (IKE)

Site-to-Site VPN Design

Remote Access VPN Design

VPN Management

Secure Wireless Connectivity