Description

The Implementing Advanced Cisco Unified Wireless Security (IAUWS) is a 5 day ILT course, designed to help students prepare for the CCNP-Wireless certification, a professional level certification specializing in the wireless field.

The goal of the IAUWS v1.0 is to provide network professional with information to prepare them to secure the wireless network from security threats via appropriate security policies and best practices, as well as ensure the proper implementation of security standards and proper configuration of security components. The IAUWS reinforces the instruction by providing students with hand-on labs to ensure students thoroughly understand how to secure a wireless network.

Laptops are provided to participate in the hands-on labs. If you desire to use your own laptop, please bring a laptop computer with an available 32-bit CardBus slot and an Ethernet port as well as an internal wireless NIC, 802.11a/b/g. The laptop’s operating systems must be either MS Windows 2000 (SP4) or XP. The laptop should also have a 9-pin serial port or USB to serial adapter. IN ADDITION, you will need administrator rights to the laptop to install drivers for the wireless client used in class.

Objectives

• Describe organizational and regulatory Security Policies
• Describe how to segment enterprise and quest WLAN traffic
• Configure administration and security on a WLAN controller
• Configure administration and security on a WLAN controller using TACACS+
• Secure client devices using EAP authentication
• Configure Cisco Secure Services Client
• Design and implement guest services on a WLAN controller.
• Configure the WLAN controller for Cisco NAC
• Configure Local authentication on the WLAN controller
• Configure Management Frame Protection (MFP) on the WLAN controller
• Implement Access Control Lists (ACL) on a WLAN controller
• Describe WLAN controller based Intrusion Detection Signatures (IDS)
• Configure the WLAN controller to integrate with IPS and IDS appliances

Prerequisites

• Cisco Certified Networking Associate – CCNA
• Cisco Certified Networking Associate Wireless – CCNA Wireless

Who Should Attend

Target candidate and roles for this course is: wireless network professionals with 3-5 years experience in the networking field who will be required to define the security requirements for various deployment models. The target audience for the course is: wireless network engineer, mid-level wireless support engineer, wireless test engineer, wireless network designer. The CUWSS class is also targeted at individuals wishing to attain the CCNP-Wireless certification.

• Module 1 – Organizational and Regulatory Security Policies
  • Describing Regulatory Compliance
  • Segmenting Traffic
  • Configuring Administrative Security
  • Managing WLAN Controller and Cisco WCS Alarms
  • Identifying Security Audit Tools
• Module 2 – Secure Client Devices
  • Configuring EAP Authentication
  • Describing the Impact of Security on Application and Roaming
  • Configuring Cisco Secure Services Client
  • Troubleshooting Wireless Connectivity
• Module 3 – Design and Implement Guest Access Services
  • Describing Guest Access Architecture
  • Configuring the WLAN to Support Guest Access
  • Configuring Guest Access Accounts
  • Troubleshooting Guest Access
• Module 4 – Design and Integrate Wireless Network with NAC
  • Introducing the Cisco NAC Appliance Solution
  • Configuring the Controller for Cisco NAC Out-of- Band Operations
• Module 5 – Implement Secure Wireless Connectivity Services
  • Configuring Authentication for the WLAN Infrastructure
  • Configuring Management Frame Protection
  • Configuring Certificate Services
  • Implementing Access Control Lists
  • Configuring Identity Based Networking on the Controller
  • Troubleshooting Secure Wireless Connectivity
• Module 6 – Internal and Integrated External Security Mitigations
  • Mitigating Wireless Vulnerabilities
  • Using Controller-Based IDS
  • Understanding Cisco’s End-to-End Security Solutions
  • Integrating Cisco WCS with Wireless IPS