SWSACICiscoCI-SWSA3.1<p>The Securing the Web with Cisco Web Security Appliance (SWSA) v3.0 course shows you how to implement, use, and maintain Cisco&reg; Web Security Appliance (WSA), powered by Cisco Talos, to provide advanced protection for business email and control against web security threats. Through a combination of expert instruction and hands-on practice, you&rsquo;ll learn how to deploy proxy services, use authentication, implement policies to control HTTPS traffic and access, implement use control settings and policies, use the solution&rsquo;s anti-malware features, implement data security and data loss prevention, perform administration of Cisco WSA solution, and more.</p> <p>This class will help you:</p> <ul> <li>Implement Cisco WSA to secure web gateways, provide malware protection, and use policy controls to address the challenges of securing and controlling web traffic</li><li>Gain valuable hands-on skills for high-demand responsibilities focused on web security</li></ul><p>After taking this course, you should be able to:</p> <ul> <li>Describe Cisco WSA</li><li>Deploy proxy services</li><li>Utilize authentication</li><li>Describe decryption policies to control HTTPS traffic</li><li>Understand differentiated traffic access policies and identification profiles</li><li>Enforce acceptable use control settings</li><li>Defend against malware</li><li>Describe data security and data loss prevention</li><li>Perform administration and troubleshooting</li></ul><p>To fully benefit from this course, you should have knowledge of these topics:</p> <ul> <li>TCP/IP services, including Domain Name System (DNS), Secure Shell (SSH), FTP, Simple Network Management Protocol (SNMP), HTTP, and HTTPS</li><li>IP routing</li></ul><p>You are expected to have one or more of the following basic technical competencies or equivalent knowledge:</p> <ul> <li>Cisco certification (CCENT certification or higher)</li><li>Relevant industry certification [International Information System Security Certification Consortium (ISC2), Computing Technology Industry Association (CompTIA) Security+, International Council of Electronic Commerce Consultants (EC-Council), Global Information Assurance Certification (GIAC), ISACA]</li><li>Cisco Networking Academy letter of completion (CCNA 1 and CCNA 2)</li><li>Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Solutions Expert (MCSE)], CompTIA (A+, Network+, Server+)</li></ul><p> <br/></p> <p> <strong>Certification</strong>: (300-725 SWSA), which leads to CCNP&reg; Security and the Cisco Certified Specialist - Web Content Security certifications.</p><ul> <li>Security architects</li><li>System designers</li><li>Network administrators</li><li>Operations engineers</li><li>Network managers, network or security technicians, and security engineers and managers responsible for web security</li><li>Cisco integrators and partners</li></ul><ul> <li>Describing Cisco WSA</li><li>Deploying Proxy Services</li><li>Utilizing Authentication</li><li>Creating Decryption Policies to Control HTTPS Traffic</li><li>Understanding Differentiated Traffic Access Policies and Identification Profiles</li><li>Defending Against Malware</li><li>Enforcing Acceptable Use Control Settings</li><li>Data Security and Data Loss Prevention</li><li>Performing Administration and Troubleshooting</li><li>References</li></ul><h5>Describing Cisco WSA</h5><ul> <li>Technology Use Case</li><li>Cisco WSA Solution</li><li>Cisco WSA Features</li><li>Cisco WSA Architecture</li><li>Proxy Service</li><li>Integrated Layer 4 Traffic Monitor</li><li>Data Loss Prevention</li><li>Cisco Cognitive Intelligence</li><li>Management Tools</li><li>Cisco Advanced Web Security Reporting (AWSR) and Third-Party Integration</li><li>Cisco Content Security Management Appliance (SMA)</li></ul><h5>Deploying Proxy Services</h5><ul> <li>Explicit Forward Mode vs. Transparent Mode</li><li>Transparent Mode Traffic Redirection</li><li>Web Cache Control Protocol</li><li>Web Cache Communication Protocol (WCCP) Upstream and Downstream Flow</li><li>Proxy Bypass</li><li>Proxy Caching</li><li>Proxy Auto-Config (PAC) Files</li><li>FTP Proxy</li><li>Socket Secure (SOCKS) Proxy</li><li>Proxy Access Log and HTTP Headers</li><li>Customizing Error Notifications with End User Notification (EUN) Pages</li></ul><h5>Utilizing Authentication</h5><ul> <li>Authentication Protocols</li><li>Authentication Realms</li><li>Tracking User Credentials</li><li>Explicit (Forward) and Transparent Proxy Mode</li><li>Bypassing Authentication with Problematic Agents</li><li>Reporting and Authentication</li><li>Re-Authentication</li><li>FTP Proxy Authentication</li><li>Troubleshooting Joining Domains and Test Authentication</li><li>Integration with Cisco Identity Services Engine (ISE)</li></ul><h5>Creating Decryption Policies to Control HTTPS Traffic</h5><ul> <li>Transport Layer Security (TLS)/Secure Sockets Layer (SSL) Inspection Overview</li><li>Certificate Overview</li><li>Overview of HTTPS Decryption Policies</li><li>Activating HTTPS Proxy Function</li><li>Access Control List (ACL) Tags for HTTPS Inspection</li><li>Access Log Examples</li></ul><h5>Understanding Differentiated Traffic Access Policies and Identification Profiles</h5><ul> <li>Overview of Access Policies</li><li>Access Policy Groups</li><li>Overview of Identification Profiles</li><li>Identification Profiles and Authentication</li><li>Access Policy and Identification Profiles Processing Order</li><li>Other Policy Types</li><li>Access Log Examples</li><li>ACL Decision Tags and Policy Groups</li><li>Enforcing Time-Based and Traffic Volume Acceptable Use Policies, and End User Notifications</li></ul><h5>Defending Against Malware</h5><ul> <li>Web Reputation Filters</li><li>Anti-Malware Scanning</li><li>Scanning Outbound Traffic</li><li>Anti-Malware and Reputation in Policies</li><li>File Reputation Filtering and File Analysis</li><li>Cisco Advanced Malware Protection</li><li>File Reputation and Analysis Features</li><li>Integration with Cisco Cognitive Intelligence</li></ul><h5>Enforcing Acceptable Use Control Settings</h5><ul> <li>Controlling Web Usage</li><li>URL Filtering</li><li>URL Category Solutions</li><li>Dynamic Content Analysis Engine</li><li>Web Application Visibility and Control</li><li>Enforcing Media Bandwidth Limits</li><li>Software as a Service (SaaS) Access Control</li><li>Filtering Adult Content</li></ul><h5>Data Security and Data Loss Prevention</h5><ul> <li>Data Security</li><li>Cisco Data Security Solution</li><li>Data Security Policy Definitions</li><li>Data Security Logs</li></ul><h5>Performing Administration and Troubleshooting</h5><ul> <li>Monitor the Cisco Web Security Appliance</li><li>Cisco WSA Reports</li><li>Monitoring System Activity Through Logs</li><li>System Administration Tasks</li><li>Troubleshooting</li><li>Command Line Interface</li></ul><h5>References</h5><ul> <li>Comparing Cisco WSA Models</li><li>Comparing Cisco SMA Models</li><li>Overview of Connect, Install, and Configure</li><li>Deploying the Cisco Web Security Appliance Open Virtualization Format (OVF) Template</li><li>Mapping Cisco Web Security Appliance Virtual Machine (VM) Ports to Correct Networks</li><li>Connecting to the Cisco Web Security Virtual Appliance</li><li>Enabling Layer 4 Traffic Monitor (L4TM)</li><li>Accessing and Running the System Setup Wizard</li><li>Reconnecting to the Cisco Web Security Appliance</li><li>High Availability Overview</li><li>Hardware Redundancy</li><li>Introducing Common Address Redundancy Protocol (CARP)</li><li>Configuring Failover Groups for High Availability</li><li>Feature Comparison Across Traffic Redirection Options</li><li>Architecture Scenarios When Deploying Cisco AnyConnect&reg; Secure Mobility</li></ul><h5>Lab outline</h5><ul> <li>Configure the Cisco Web Security Appliance</li><li>Deploy Proxy Services</li><li>Configure Proxy Authentication</li><li>Configure HTTPS Inspection</li><li>Create and Enforce a Time/Date-Based Acceptable Use Policy</li><li>Configure Advanced Malware Protection</li><li>Configure Referrer Header Exceptions</li><li>Utilize Third-Party Security Feeds and MS Office 365 External Feed</li><li>Validate an Intermediate Certificate</li><li>View Reporting Services and Web Tracking</li><li>Perform Centralized Cisco AsyncOS Software Upgrade Using Cisco SMA</li></ul>The Securing the Web with Cisco Web Security Appliance (SWSA) v3.0 course shows you how to implement, use, and maintain Cisco® Web Security Appliance (WSA), powered by Cisco Talos, to provide advanced protection for business email and control against web security threats. Through a combination of expert instruction and hands-on practice, you’ll learn how to deploy proxy services, use authentication, implement policies to control HTTPS traffic and access, implement use control settings and policies, use the solution’s anti-malware features, implement data security and data loss prevention, perform administration of Cisco WSA solution, and more. This class will help you: - Implement Cisco WSA to secure web gateways, provide malware protection, and use policy controls to address the challenges of securing and controlling web traffic - Gain valuable hands-on skills for high-demand responsibilities focused on web security After taking this course, you should be able to: - Describe Cisco WSA - Deploy proxy services - Utilize authentication - Describe decryption policies to control HTTPS traffic - Understand differentiated traffic access policies and identification profiles - Enforce acceptable use control settings - Defend against malware - Describe data security and data loss prevention - Perform administration and troubleshootingTo fully benefit from this course, you should have knowledge of these topics: - TCP/IP services, including Domain Name System (DNS), Secure Shell (SSH), FTP, Simple Network Management Protocol (SNMP), HTTP, and HTTPS - IP routing You are expected to have one or more of the following basic technical competencies or equivalent knowledge: - Cisco certification (CCENT certification or higher) - Relevant industry certification [International Information System Security Certification Consortium (ISC2), Computing Technology Industry Association (CompTIA) Security+, International Council of Electronic Commerce Consultants (EC-Council), Global Information Assurance Certification (GIAC), ISACA] - Cisco Networking Academy letter of completion (CCNA 1 and CCNA 2) - Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Solutions Expert (MCSE)], CompTIA (A+, Network+, Server+) Certification: (300-725 SWSA), which leads to CCNP® Security and the Cisco Certified Specialist - Web Content Security certifications.- Security architects - System designers - Network administrators - Operations engineers - Network managers, network or security technicians, and security engineers and managers responsible for web security - Cisco integrators and partners- Describing Cisco WSA - Deploying Proxy Services - Utilizing Authentication - Creating Decryption Policies to Control HTTPS Traffic - Understanding Differentiated Traffic Access Policies and Identification Profiles - Defending Against Malware - Enforcing Acceptable Use Control Settings - Data Security and Data Loss Prevention - Performing Administration and Troubleshooting - ReferencesDescribing Cisco WSA - Technology Use Case - Cisco WSA Solution - Cisco WSA Features - Cisco WSA Architecture - Proxy Service - Integrated Layer 4 Traffic Monitor - Data Loss Prevention - Cisco Cognitive Intelligence - Management Tools - Cisco Advanced Web Security Reporting (AWSR) and Third-Party Integration - Cisco Content Security Management Appliance (SMA) Deploying Proxy Services - Explicit Forward Mode vs. Transparent Mode - Transparent Mode Traffic Redirection - Web Cache Control Protocol - Web Cache Communication Protocol (WCCP) Upstream and Downstream Flow - Proxy Bypass - Proxy Caching - Proxy Auto-Config (PAC) Files - FTP Proxy - Socket Secure (SOCKS) Proxy - Proxy Access Log and HTTP Headers - Customizing Error Notifications with End User Notification (EUN) Pages Utilizing Authentication - Authentication Protocols - Authentication Realms - Tracking User Credentials - Explicit (Forward) and Transparent Proxy Mode - Bypassing Authentication with Problematic Agents - Reporting and Authentication - Re-Authentication - FTP Proxy Authentication - Troubleshooting Joining Domains and Test Authentication - Integration with Cisco Identity Services Engine (ISE) Creating Decryption Policies to Control HTTPS Traffic - Transport Layer Security (TLS)/Secure Sockets Layer (SSL) Inspection Overview - Certificate Overview - Overview of HTTPS Decryption Policies - Activating HTTPS Proxy Function - Access Control List (ACL) Tags for HTTPS Inspection - Access Log Examples Understanding Differentiated Traffic Access Policies and Identification Profiles - Overview of Access Policies - Access Policy Groups - Overview of Identification Profiles - Identification Profiles and Authentication - Access Policy and Identification Profiles Processing Order - Other Policy Types - Access Log Examples - ACL Decision Tags and Policy Groups - Enforcing Time-Based and Traffic Volume Acceptable Use Policies, and End User Notifications Defending Against Malware - Web Reputation Filters - Anti-Malware Scanning - Scanning Outbound Traffic - Anti-Malware and Reputation in Policies - File Reputation Filtering and File Analysis - Cisco Advanced Malware Protection - File Reputation and Analysis Features - Integration with Cisco Cognitive Intelligence Enforcing Acceptable Use Control Settings - Controlling Web Usage - URL Filtering - URL Category Solutions - Dynamic Content Analysis Engine - Web Application Visibility and Control - Enforcing Media Bandwidth Limits - Software as a Service (SaaS) Access Control - Filtering Adult Content Data Security and Data Loss Prevention - Data Security - Cisco Data Security Solution - Data Security Policy Definitions - Data Security Logs Performing Administration and Troubleshooting - Monitor the Cisco Web Security Appliance - Cisco WSA Reports - Monitoring System Activity Through Logs - System Administration Tasks - Troubleshooting - Command Line Interface References - Comparing Cisco WSA Models - Comparing Cisco SMA Models - Overview of Connect, Install, and Configure - Deploying the Cisco Web Security Appliance Open Virtualization Format (OVF) Template - Mapping Cisco Web Security Appliance Virtual Machine (VM) Ports to Correct Networks - Connecting to the Cisco Web Security Virtual Appliance - Enabling Layer 4 Traffic Monitor (L4TM) - Accessing and Running the System Setup Wizard - Reconnecting to the Cisco Web Security Appliance - High Availability Overview - Hardware Redundancy - Introducing Common Address Redundancy Protocol (CARP) - Configuring Failover Groups for High Availability - Feature Comparison Across Traffic Redirection Options - Architecture Scenarios When Deploying Cisco AnyConnect® Secure Mobility Lab outline - Configure the Cisco Web Security Appliance - Deploy Proxy Services - Configure Proxy Authentication - Configure HTTPS Inspection - Create and Enforce a Time/Date-Based Acceptable Use Policy - Configure Advanced Malware Protection - Configure Referrer Header Exceptions - Utilize Third-Party Security Feeds and MS Office 365 External Feed - Validate an Intermediate Certificate - View Reporting Services and Web Tracking - Perform Centralized Cisco AsyncOS Software Upgrade Using Cisco SMA2 days1495.001495.001500.00240000.001995.002394.001500.001500.001500.001500.001495.001490.002200.002200.001125.001125.001550.001695.001695.001695.001695.001695.001695.001695.001695.001695.002070.002000.001050.001500.005520.001050.001050.001050.002040.002000.001600.001200.001790.001995.001995.00110000.002760.001995.001995.0015.0015.0015.0015.0015.0015.0021.0029.0021.0017.0017.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.0020.00