Cisco SECURE 1.0: Deploying Advanced Zone-Based Policy Firewalls

Overview/Description
Deploying access control based on Open Systems Interconnection (OSI) Layer 3 and 4 parameters establishes a minimal connectivity policy for network applications. However, such filtering alone cannot provide protection to exposed applications, user awareness in dynamic environments, and control over access to specific types of content on the Internet. The Cisco IOS Zone-Based Policy Firewall provides advanced application layer (OSI Layer 5 to 7) filtering, user-based controls, and content filtering controls to address these scenarios when risk assessment demands them. This course enables you to configure and verify these advanced controls of the Zone-Based Policy Firewall feature set.

Target Audience
Network professionals responsible for securing and managing their network infrastructures, who have CCNA certification, CCNA Security certification (IINS), and a working knowledge of Microsoft Windows operating systems.

Expected Duration (hours)
2.0

Lesson Objectives

Cisco SECURE 1.0: Deploying Advanced Zone-Based Policy Firewalls

recognize the parameters necessary to plan the deployment of Cisco IOS Software management plane security controls

recognize how to use regular expressions to customize application-layer access policies

recognize how to configure Zone-Based Policy Firewall application-layer policies

configure Zone-Based Policy Firewall application-layer policies

configure application-layer filtering on the Zone Based Policy Firewall

sequence the steps to configure and verify Zone-Based Policy Firewall user-based policies

configure Zone-Based Policy Firewall user-based policies

sequence the steps to configure Zone-Based Policy Firewall URL filtering

configure Zone-Based Policy Firewall URL filtering

configure URL filtering