Implementing Security Service Edge with Cisco Secure Access

This class is intended for the following participants:

- Security Engineers

- Security Administrators

- Network Security Engineers

- Cloud Security Engineers

- Security Architects

- Security Consultants

- Systems Engineers

- Infrastructure Engineers

- SOC Analysts

- Zero Trust Security Specialists

• Describe the SASE frameworks, the SSE cloud-based security services it includes, and the SD-WAN concepts and Cisco SD-WAN edge device on-box security capabilities that complete the SASE architecture.
• Describe the Cisco Secure Access platform architecture and primary use cases.
• Describe the Cisco Secure Access management options and the Admin Portal.
• Describe the building blocks of the Cisco Secure Access initial configuration workflow.
• Describe the user-side traffic acquisition methods and private-application backhaul methods available in Cisco Secure Access.
• Additional Course Objectives
• Configure Cisco Secure Access user provisioning and SAML-based SSO authentication.
• Configure the common Cisco Secure Access components required for Secure Private Access, including app-side connectivity, private resource definition, and access policy.
• Configure Zero Trust Access in Cisco Secure Access using client-based and browser-based methods.
• Configure VPNaaS and Branch IPsec in Cisco Secure Access for Secure Private Access.
• Configure Endpoint Posture, Security, and IPS Profiles in Cisco Secure Access for Secure Private Access.
• Configure the common Cisco Secure Access components required for Secure Internet Access.
• Describe the access methods dedicated to Secure Internet Access in Cisco Secure Access.
• Configure threat and content defense capabilities in Cisco Secure Access for Secure Internet Access.
• Configure Data Loss Prevention (DLP) in Cisco Secure Access.
• Verify Cisco Secure Access user experience using Experience Insights.
• Integrate Cisco Secure Access with Cisco XDR and Splunk Enterprise to enhance SOC operations.

Course Outline

• SASE and SSE Architecture
• Cisco Secure Access Platform and Use Cases
• Cisco Secure Access Management
• Initial Configuration Workflow
• Cisco Secure Access Connectivity Methods
• User Provisioning and SSO Configuration
• Common Secure Private Access Configuration
• Zero Trust Access Configuration
• VPN-Based Configuration
• SPA Security Controls Configuration
• Common Secure Internet Access Configuration
• Dedicated Secure Internet Access Methods Overview
• Threat and Content Defense Configuration
• Data Loss Prevention Configuration
• Cisco Secure Access Experience Insights
• Cisco Secure Access Integrations

Lab Outline

• Explore Cisco Secure Access Admin Portal
• End User Experience
• Secure Private Access
• Implement Secure Internet Access
• Explore Cisco Secure Access Experience Insights

Recommended Prerequisites

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

• 2+ years of experience in network security or security administration
• Basic understanding of enterprise routing and switching
• Basic understanding of WAN networking concepts
• Basic understanding of VPN technologies (IPsec, SSL/TLS)
• Basic understanding of DNS, HTTP/HTTPS, and web security concepts
• Basic understanding of Zero Trust principles
• Familiarity with cloud-based security services

Relevant Cisco Learning Offerings

These skills can be found in the following Cisco Learning Offerings:

• SCOR - Implementing and Operating Cisco Security Core Technologies
• CCNA - Implementing and Administering Cisco Solutions
• SDWFND - Cisco Catalyst SD-WAN Operation and Deployment
• ENSDWI - Implementing Cisco Catalyst SD-WAN Solutions

• None

•  None recommended