Cisco SECURE 1.0: Deploying Basic Zone-Based Policy Firewalls

Overview/Description
The Cisco IOS Zone-Based Policy Firewall represents the latest generation of Cisco IOS Software firewall functions. Designed as a replacement technology for Cisco IOS Classic firewalls, also known as Context-Based Access Control (CBAC) firewalls, Zone-Based Policy Firewalls change the firewall from the older interface-based model to a more easily understood zone-based model. In this course, you will learn to configure, verify, and troubleshoot Open Systems Interconnection (OSI) Layer 3 and 4 access control features of the Zone-Based Policy Firewall.

Target Audience
Network professionals responsible for securing and managing their network infrastructures, who have CCNA certification, CCNA Security certification (IINS), and a working knowledge of Microsoft Windows operating systems

Expected Duration (hours)
3.0

Lesson Objectives

Cisco SECURE 1.0: Deploying Basic Zone-Based Policy Firewalls

identify the considerations for deploying a basic Zone-Based Policy Firewall

recognize how to configure Zone-Based Policy Firewall zones and zone pairs

configure zones

recognize how to configure a basic OSI Layer 3 and 4 interzone access policy

recognize how to configure basic OSI Layer 3 and 4 interzone and intrazone access policies

configure access control between zones

recognize how the self zone works

identify the guidelines for implementing self zone access control

configure inspection of local traffic

recognize how to tune Zone-Based Policy Firewall stateful engine and connection settings

recognize how to configure Zone-Based Policy Firewall transparent mode

recognize how to troubleshoot the operation of basic Zone-Based Policy Firewall functions