This module dives into configuring and deploying Cisco ASA and FTD firewalls in various modes like routed, transparent, single, multi-context, and multi-instance. It covers firewall capabilities such as NAT, application inspection, policy-based routing, identity firewall, and integration with service modules. You'll explore IOS and IOS XE security features like zone-based firewalling and NAT. It also addresses FMC’s alerting, logging, and reporting capabilities. Topics include deploying Cisco’s NGIPS (inline, passive, and TAP), using advanced NGFW features like SSL inspection, user identity, AVC, and geo-based filtering. You’ll also learn to detect and mitigate attacks (DDoS, spoofing, MITM, botnets), implement clustering and high availability, and enforce routing security. The section concludes with traffic policies, device connectivity, and correlation/remediation using FMC.

This module focuses on securing communication via VPN technologies including AnyConnect for remote access, and site-to-site VPNs like FlexVPN, DMVPN, and IPsec tunnels on ASA, FTD, and routers. You’ll explore high availability for VPNs through ASA clustering and dual-hub DMVPN. The segment also explains segmentation techniques using VLANs, PVLANs, GRE, and VRF-Lite. Cisco TrustSec implementation for microsegmentation is highlighted, using Security Group Tags (SGTs) and SXP to control traffic flows securely and efficiently within large environments.

Here you learn to harden devices and protect control, data, and management planes using methods like CoPP, iACLs, uRPF, and RTBH. You'll cover CPU/memory protection, securing device access, and monitoring health thresholds. This includes in-depth Layer 2 security (DAI, IPDT, STP guard, port security, RA guard, DHCP snooping) and wireless security protocols (WPA2/3, TKIP, AES). Monitoring via SNMP, NetFlow, Syslog, eStreamer, and RMON is also covered. You'll understand compliance with policies like ISO 27001, PCI-DSS, and BCP 38, and use the Cisco SAFE model to assess security. Lastly, the module explores interacting with network devices using REST APIs and Python for automation, data encoding formats (JSON, XML, YAML), and Cisco DNA Center’s northbound APIs.

This module focuses on managing identities and access using Cisco ISE. You’ll configure ISE personas for scalability, and integrate Cisco switches, WLCs, ASA for network and admin access. You’ll learn 802.1X, MAB, guest access, and BYOD onboarding. ISE's integration with LDAP, AD, RADIUS, and MDM for posture checks is emphasized. You’ll explore AnyConnect provisioning, certificate-based authentication, identity mapping, pxGrid integration, and multifactor authentication with Duo. Also covered: SSO, Cisco IBNS 2.0 for dynamic policy enforcement, and detailed authentication techniques like EAP chaining and MAR.

This module addresses advanced malware defense using Cisco AMP for Networks, Endpoints, and Content Security. You’ll learn how to detect, analyze, and mitigate threats using tools like Wireshark, tcpdump, and ERSPAN. Cloud security configurations through Cisco Umbrella, including DNS policies, RBI, CASB, and DLP, are covered in depth. The module includes web filtering, AVC, and user ID control on Cisco WSA and FTD. Email security features (spam filtering, DLP, encryption, quarantine) are covered using Cisco ESA. HTTP decryption is practiced across Cisco Umbrella, WSA, and FTD. You’ll also explore centralized security management via SMA and the integration of threat solutions like Stealthwatch, AMP, FMC, CTA, Threat Grid, and SecureX.

Designs, implements, and maintains advanced security infrastructure to protect organizational networks from cyber threats and ensure compliance with security policies.

Oversees the team responsible for continuous monitoring, detection, analysis, and response to cybersecurity threats across an organization's IT infrastructure.

Designs complex enterprise-grade security infrastructures using Cisco technologies like ASA, FTD, ISE, Umbrella, and more.

Leads the cybersecurity team, oversees implementation of network and data security strategies, ensures compliance, and manages tools like Cisco Firepower, ISE, Umbrella, and SecureX.

Advises companies on designing secure network architectures and selecting Cisco security solutions based on business needs.

Drives the vision and execution of IT security policies across the organization, aligns technology with business goals, and makes strategic investments in security architecture.

Builds and deploys automated scripts (using Python, APIs, Ansible) to simplify and speed up security tasks and policy enforcement.

Upon passing the CCIE Security lab exam, the candidate is awarded the CCIE Security certification, which is valid for a specific period (typically three years). To maintain the certification, individuals must recertify before the expiration date, often by passing another exam or accumulating continuing education credits.