Description

The Course Name: DSACI – Deploying Security in Cisco ACI

The Duration:4 Days

The Overview:

The purpose of this course is to introduce participants how to implement the secure Cisco Application Centric Infrastructure (ACI) operation, as well as to integration of security services with the Cisco ACI Fabric.

What You Will Learn:

  •     How to Introduce tenant security
  •     How to deploy security domains
  •     How to configure secure fabric operation
  •     How to integrate authentication, authorization, and accounting (AAA)
  •     How to recognize micro segmentation
  •     How to understand L4–L7 service graphs
  •     How to deploy function profiles
  •     How to integrate external ASA device
  •     How to integrate ASAv appliance
  •     How to implement Cisco Firepower Next-Generation Intrusion Prevention System (NGIPS) integration

The Course Index:

  •     Basics of Cisco ACI
  •     Cisco APIC Architecture and Operation
  •     Cisco ACI Logical Elements
  •     Security Built-in to Cisco ACI
  •     Inherent Cisco ACI Security Mechanisms
  •     Securing the Cisco ACI Environment from Threats
  •     Security Services in Cisco ACI
  •     L4–L7 Services Key Concepts
  •     Security Appliances in Cisco ACI
  •     Deploying Cisco ASA in Cisco ACI
  •     Deploying Cisco ASAv in Cisco ACI
  •     Deploying Cisco FirePOWER NGIPS in Cisco ACI

Labs:

Lab 1: Exploring the Cisco ACI Fabric

Lab 2: Exploring the Cisco APIC

Lab 3: Configuring Cisco Secure Access Control System (ACS) Terminal Access Controller Access Control System+ (TACACS+) Integration

Lab 4: Configuring Cisco ACI L4–L7 Service Insertion

Lab 5: Configuring a Firewall High-Availability Pair

Lab 6: Configuring and Inserting a Firewall High-Availability Pair in Routed Mode

Lab 7: Configuring and Inserting an ASAv in Transparent Mode

Lab 8: Configuring and Inserting a Virtual Cisco Firepower NGIPS in Inline Mode