Implementing Cisco NAC Appliance (CANAC)



Overview

This 4-day course is a "shrink-wrapped" network admission control solution that recognizes users, their devices and roles; evaluates the security posture of the endpoint and scans for vulnerabilities; and enforces policy in the network. In particular, prior to allowing users onto the network, the NAC Appliance (Cisco Clean Access) solution allows administrators to authenticate, authorise, interrogate and remediate users and their machines enforcing policy based access control on the network. 

Who Should Attend

  • Customer 
  • Channel Partner 
  • Reseller 
  • Employee

Cisco Career Certifications

This course is part of the following Certifications:

  • CCSP (Cisco Certified Security Professional)

Course Outline

This 3-day course is geared towards obtaining hands-on experience only; therefore, there is no exam.

  • Course Introduction
  • Cisco NAC Endpoint Security Solutions
  • Cisco NAC Appliance Common Elements Configuration
  • Cisco NAC Appliance Implementation
  • Cisco NAC Appliance Implementation Options
  • Cisco NAC Appliance Monitoring and Administration
  • Lab Guide

Course Objectives

After completing this course the delegate will be able to:

  • Given client network security requirements, explain how a NAC Appliance (Cisco Clean Access) deployment scenario will meet or exceed network security requirements 
  • Configure the common elements of a NAC Appliance (Cisco Clean Access) solution 
  • Configure the NAC Appliance (Cisco Clean Access) in-band and out-of-band implementation options 
  • Implement a highly available NAC Appliance (Cisco Clean Access) solution to mitigate network threats and facilitate network access for those users that meet corporate security requirements 
  • Maintain a highly available NAC Appliance (Cisco Clean Access) deployment in medium and enterprise network environments

Prerequisites

Certification as a CCSP or the equivalent knowledge
Basic knowledge of the Microsoft Windows operating system
Familiarity with networking and security terminology and concepts
Fundamental knowledge of implementing network security or CCSP or Cisco Security CSQ
Security CSQ 
BCMSN or working knowledge of VLANs
SNRS or working knowledge of digital certificates
BCSI or working knowledge of HSRP