Implementing Cisco SD-WAN Security and Cloud Solutions [SDWSCS]

OVERVIEW

The Implementing Cisco SD-WAN Security and Cloud Solutions (SDWSCS) course is an advanced training course focused on Cisco SD-WAN security and cloud services. Through a series of labs and lectures you will learn about on-box security services, including application aware enterprise firewall, intrusion prevention, URL filtering, malware protection, and TLS or SSL decryption. Cloud integration with multiple cloud services providers and across multiple use-cases is also covered.

The labs will allow you to configure and deploy local security services and cloud security services with the Cisco Umbrella Secure Internet Gateway (SIG), as well as integrate the Cisco SD-WAN fabric with a cloud service provider using the Cisco vManage automated workflows.

This course is worth 24 Continuing Education (CE) Credits.

OBJECTIVES

• Describe Cisco SD-WAN security functions and deployment options
• Understand how to deploy on-premises threat prevention
• Describe content filtering options
• Implement secure Direct Internet Access (DIA)
• Explain and implement service chaining
• Explore Secure Access Service Edge (SASE) and identify use cases
• Describe Umbrella Secure Internet Gateway (SIG) and deployment options
• Implement Cisco Umbrella SIG and DNS policies
• Explore and implement Cloud Access Security Broker (CASB) and identify use cases (including Microsoft 365)
• Discover how to use Cisco ThousandEyes to monitor cloud services
• Configure Cisco ThousandEyes to monitor Microsoft 365 applications
• Examine how to protect and optimize access to the software as a service (SaaS) application with Cisco SD-WAN Cloud OnRamp
• Discover and deploy Cloud OnRamp for multi-cloud, including interconnect and collocation use cases
• Examine Cisco SD-WAN monitoring capabilities and features with vManage and vAnalytics.

AUDIENCE

Anyone involved in the deployment of a Cisco SD-WAN Security solution.

CERTIFICATION

Reommended as preparation for the following exams:

• There are no exams currently aligned to this course.

CONTENT

Introducing Cisco SD-WAN Security

• Cisco SD-WAN Security Overview
• Cisco SD-WAN Platform
• Cisco SD-WAN Security Types

Deploying On-Premises Threat Prevention

• Cisco SD-WAN Integrated Security Overview
• Deploying Application Aware Firewall
• Deploying Intrusion Prevention

Examining Content Filtering

• Cisco SD-WAN Content Filtering
• Implementing Web Security Functionalities
• Implementing Cisco SD-WAN SSL and TLS Proxy
• Implementing File Security
• Secure Direct Internet Access
• Implementing Unified Security Policies

Exploring Cisco SD-WAN Dedicated Security Options

• Integrating Cisco SD-WAN with Dedicated Security
• Service Chaining Deep Dive
• Deploying Service Chaining
• Troubleshooting Service Chaining
• Deploying TrustSec On Cisco SD-WAN

Examining Cisco SASE

• Introducing Cisco SASE Architecture
• Cisco Security Vision - Cisco SASE
• Implementing Cisco SASE

Exploring Cisco Umbrella SIG

• SIG Overview
• Integrating SIG and Cisco SD-WAN
• Umbrella DNS Deep DIve
• Cisco Umbrella CDFW and IPS
• Umbrella Secure Web Gateway

Securing Cloud Applications with Cisco Umbrella SIG

• Cloud Application Security Overview
• Implementing Cisco Umbrella CASB

Exploring Cisco SD-Wan ThousandEyes

• Cisco ThousandEyes Overview
• Deploying Cisco ThousandEyes with Cisco SD-WAN

Optimizing SaaS Applications

• SaaS Application Challenges in a Modern WAN
• Cloud OnRamp for SaaS Deep Dive
• Cloud OnRamp for SaaS via SIG
• Cloud OnRamp for SaaS and Microsoft 365

Connecting Cisco SD-WAN to Public Cloud

• Public Cloud Overview
• Deploying Cisco SD-WAN Edge Devices in a Public Cloud
• Cisco Cloud OnRamp for Multicloud
• Deploying Cisco Cloud OnRamp for Multicloud

Examining Cloud Interconnect Solutions

• Cloud Interconnect Overview
• Cisco SD-WAN Cloud Interconnect

Exploring Cisco Cloud OnRamp for Colocation

• Colocation Overview
• Cloud OnRamp for Colocation Overview
• Deploy Cloud OnRamp for Colocation

Monitoring Cisco SD-WAN Cloud and Security Solutions

• Monitoring Tools Available in vManage
• Cisco vAnalytics Monitoring Overview

Labs

• Discovery Lab 1: Configure Threat Prevention
• Discovery Lab 2 :Implement Web Security
• Discovery Lab 3: Deploy DIA Security with Unified Security Policy
• Discovery Lab 4: Deploy Service Chaining
• Discovery Lab 5: Configure Cisco Umbrella DNS Policies
• Discovery Lab 6 :Deploy Cisco Umbrella Secure Internet Gateway
• Discovery Lab 7: Implement CASB Security
• Discovery Lab 8: Microsoft 365 SaaS Testing by Using Cisco ThousandEyes
• Discovery Lab 9: Configure Cisco OnRamp for SaaS
• Discovery Lab 10: Deploy Cisco SD-WAN Multicloud Gateways
• Discovery Lab 11 :Cisco vAnalytics Overview