Securing Email with Cisco Email Security Appliance

Securing Email with Cisco Email Security ApplianceSESACICiscoCI-SESA3.2After taking this course, you should be able to: <ul> <li>Describe and administer the Cisco Email Security Appliance (ESA)</li><li>Control sender and recipient domains</li><li>Control spam with Talos SenderBase and anti-spam</li><li>Use anti-virus and outbreak filters</li><li>Use mail policies</li><li>Use content filters</li><li>Use message filters to enforce email policies</li><li>Prevent data loss</li><li>Perform LDAP queries</li><li>Authenticate Simple Mail Transfer Protocol (SMTP) sessions</li><li>Authenticate email</li><li>Encrypt email</li><li>Use system quarantines and delivery methods</li><li>Perform centralized management using clusters</li><li>Test and troubleshoot</li></ul>Course Benefits This class will help you: <ul> <li>Deploy high-availability email protection against the dynamic, rapidly changing threats affecting your organization</li><li>Gain leading-edge career skills focused on enterprise security</li><li>Earn 24 Cisco CE credits toward recertification</li></ul>What to expect in the exam The 300-720 SESA exam certifies your knowledge of Cisco Email Security Appliance, including administration, spam control and anti-spam, message filters, data loss prevention, Lightweight Directory Access Protocol (LDAP), email authentication and encryption, and system quarantines and delivery methods. After you pass 300-720 SESA: <ul> <li>You earn the Cisco Certified Specialist - Email Content Security certification.</li><li>You will have satisfied the concentration exam requirement for the new CCNP Security certification. To complete your CCNP Security certification, pass the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) exam or its equivalent.</li></ul>To fully benefit from this course, you should have one or more of the following basic technical competencies: <ul> <li>Cisco certification (Cisco CCENT® certification or higher)</li><li>Relevant industry certification, such as ISC2, CompTIA Security+, EC-Council, Global Information Assurance Certification (GIAC), and ISACA</li><li>Cisco Networking Academy letter of completion (CCNA® 1 and CCNA 2)</li><li>Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Systems Engineer (MCSE)], CompTIA (A+, Network+, Server+)</li></ul> The knowledge and skills that a student must have before attending this course are: <ul> <li>TCP/IP services, including Domain Name System (DNS), Secure Shell (SSH), FTP, Simple Network Management Protocol (SNMP), HTTP, and HTTPS</li><li>Experience with IP routing</li></ul><ul> <li>Security engineers</li><li>Security administrators</li><li>Security architects</li><li>Operations engineers</li><li>Network engineers</li><li>Network administrators</li><li>Network or security technicians</li><li>Network managers</li><li>System designers</li><li>Cisco integrators and partners</li></ul>Describing the Cisco Email Security Appliance <ul> <li>Cisco Email Security Appliance Overview</li><li>Technology Use Case</li><li>Cisco Email Security Appliance Data Sheet</li><li>SMTP Overview</li><li>Email Pipeline Overview</li><li>Installation Scenarios</li><li>Initial Cisco Email Security Appliance Configuration</li><li>Centralizing Services on a Cisco Content Security Management Appliance (SMA)</li><li>Release Notes for AsyncOS 11.x</li></ul>Administering the Cisco Email Security Appliance <ul> <li>Distributing Administrative Tasks</li><li>System Administration</li><li>Managing and Monitoring Using the Command Line Interface (CLI)</li><li>Other Tasks in the GUI</li><li>Advanced Network Configuration</li><li>Using Email Security Monitor</li><li>Tracking Messages</li><li>Logging</li></ul>Controlling Sender and Recipient Domains <ul> <li>Public and Private Listeners</li><li>Configuring the Gateway to Receive Email</li><li>Host Access Table Overview</li><li>Recipient Access Table Overview</li><li>Configuring Routing and Delivery Features</li></ul>Controlling Spam with Talos SenderBase and Anti-Spam <ul> <li>SenderBase Overview</li><li>Anti-Spam</li><li>Managing Graymail</li><li>Protecting Against Malicious or Undesirable URLs</li><li>File Reputation Filtering and File Analysis</li><li>Bounce Verification</li></ul>Using Anti-Virus and Outbreak Filters <ul> <li>Anti-Virus Scanning Overview</li><li>Sophos Anti-Virus Filtering</li><li>McAfee Anti-Virus Filtering</li><li>Configuring the Appliance to Scan for Viruses</li><li>Outbreak Filters</li><li>How the Outbreak Filters Feature Works</li><li>Managing Outbreak Filters</li></ul>Using Mail Policies <ul> <li>Email Security Manager Overview</li><li>Mail Policies Overview</li><li>Handling Incoming and Outgoing Messages Differently</li><li>Matching Users to a Mail Policy</li><li>Message Splintering</li><li>Configuring Mail Policies</li></ul>Using Content Filters <ul> <li>Content Filters Overview</li><li>Content Filter Conditions</li><li>Content Filter Actions</li><li>Filter Messages Based on Content</li><li>Text Resources Overview</li><li>Using and Testing the Content Dictionaries Filter Rules</li><li>Understanding Text Resources</li><li>Text Resource Management</li><li>Using Text Resources</li></ul>Using Message Filters to Enforce Email Policies <ul> <li>Message Filters Overview</li><li>Components of a Message Filter</li><li>Message Filter Processing</li><li>Message Filter Rules</li><li>Message Filter Actions</li><li>Attachment Scanning</li><li>Examples of Attachment Scanning Message Filters</li><li>Using the CLI to Manage Message Filters</li><li>Message Filter Examples</li><li>Configuring Scan Behavior</li></ul>Preventing Data Loss <ul> <li>Overview of the Data Loss Prevention (DLP) Scanning Process</li><li>Setting Up Data Loss Prevention</li><li>Policies for Data Loss Prevention</li><li>Message Actions</li><li>Updating the DLP Engine and Content Matching Classifiers</li></ul>Using LDAP <ul> <li>Overview of LDAP</li><li>Working with LDAP</li><li>Using LDAP Queries</li><li>Authenticating End-Users of the Spam Quarantine</li><li>Configuring External LDAP Authentication for Users</li><li>Testing Servers and Queries</li><li>Using LDAP for Directory Harvest Attack Prevention</li><li>Spam Quarantine Alias Consolidation Queries</li><li>Validating Recipients Using an SMTP Server</li></ul>SMTP Session Authentication <ul> <li>Configuring AsyncOS for SMTP Authentication</li><li>Authenticating SMTP Sessions Using Client Certificates</li><li>Checking the Validity of a Client Certificate</li><li>Authenticating User Using LDAP Directory</li><li>Authenticating SMTP Connection Over Transport Layer Security (TLS) Using a Client Certificate</li><li>Establishing a TLS Connection from the Appliance</li><li>Updating a List of Revoked Certificates</li></ul>Email Authentication <ul> <li>Email Authentication Overview</li><li>Configuring DomainKeys and DomainKeys Identified Mail (DKIM) Signing</li><li>Verifying Incoming Messages Using DKIM</li><li>Overview of Sender Policy Framework (SPF) and SIDF Verification</li><li>Domain-based Message Authentication Reporting and Conformance (DMARC) Verification</li><li>Forged Email Detection</li></ul>Email Encryption <ul> <li>Overview of Cisco Email Encryption</li><li>Encrypting Messages</li><li>Determining Which Messages to Encrypt</li><li>Inserting Encryption Headers into Messages</li><li>Encrypting Communication with Other Message Transfer Agents (MTAs)</li><li>Working with Certificates</li><li>Managing Lists of Certificate Authorities</li><li>Enabling TLS on a Listener’s Host Access Table (HAT)</li><li>Enabling TLS and Certificate Verification on Delivery</li><li>Secure/Multipurpose Internet Mail Extensions (S/MIME) Security Services</li></ul>Using System Quarantines and Delivery Methods <ul> <li>Describing Quarantines</li><li>Spam Quarantine</li><li>Setting Up the Centralized Spam Quarantine</li><li>Using Safelists and Blocklists to Control Email Delivery Based on Sender</li><li>Configuring Spam Management Features for End Users</li><li>Managing Messages in the Spam Quarantine</li><li>Policy, Virus, and Outbreak Quarantines</li><li>Managing Policy, Virus, and Outbreak Quarantines</li><li>Working with Messages in Policy, Virus, or Outbreak Quarantines</li><li>Delivery Methods</li></ul>Centralized Management Using Clusters <ul> <li>Overview of Centralized Management Using Clusters</li><li>Cluster Organization</li><li>Creating and Joining a Cluster</li><li>Managing Clusters</li><li>Cluster Communication</li><li>Loading a Configuration in Clustered Appliances</li><li>Best Practices</li></ul>Testing and Troubleshooting <ul> <li>Debugging Mail Flow Using Test Messages: Trace</li><li>Using the Listener to Test the Appliance</li><li>Troubleshooting the Network</li><li>Troubleshooting the Listener</li><li>Troubleshooting Email Delivery</li><li>Troubleshooting Performance</li><li>Web Interface Appearance and Rendering Issues</li><li>Responding to Alerts</li><li>Troubleshooting Hardware Issues</li><li>Working with Technical Support</li></ul>References <ul> <li>Model Specifications for Large Enterprises</li><li>Model Specifications for Midsize Enterprises and Small-to-Midsize Enterprises or Branch Offices</li><li>Cisco Email Security Appliance Model Specifications for Virtual Appliances</li><li>Packages and Licenses</li></ul>After taking this course, you should be able to: - Describe and administer the Cisco Email Security Appliance (ESA) - Control sender and recipient domains - Control spam with Talos SenderBase and anti-spam - Use anti-virus and outbreak filters - Use mail policies - Use content filters - Use message filters to enforce email policies - Prevent data loss - Perform LDAP queries - Authenticate Simple Mail Transfer Protocol (SMTP) sessions - Authenticate email - Encrypt email - Use system quarantines and delivery methods - Perform centralized management using clusters - Test and troubleshoot Course Benefits This class will help you: - Deploy high-availability email protection against the dynamic, rapidly changing threats affecting your organization - Gain leading-edge career skills focused on enterprise security - Earn 24 Cisco CE credits toward recertification What to expect in the exam The 300-720 SESA exam certifies your knowledge of Cisco Email Security Appliance, including administration, spam control and anti-spam, message filters, data loss prevention, Lightweight Directory Access Protocol (LDAP), email authentication and encryption, and system quarantines and delivery methods. After you pass 300-720 SESA: - You earn the Cisco Certified Specialist - Email Content Security certification. - You will have satisfied the concentration exam requirement for the new CCNP Security certification. To complete your CCNP Security certification, pass the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) exam or its equivalent.To fully benefit from this course, you should have one or more of the following basic technical competencies: - Cisco certification (Cisco CCENT® certification or higher) - Relevant industry certification, such as ISC2, CompTIA Security+, EC-Council, Global Information Assurance Certification (GIAC), and ISACA - Cisco Networking Academy letter of completion (CCNA® 1 and CCNA 2) - Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Systems Engineer (MCSE)], CompTIA (A+, Network+, Server+) The knowledge and skills that a student must have before attending this course are: - TCP/IP services, including Domain Name System (DNS), Secure Shell (SSH), FTP, Simple Network Management Protocol (SNMP), HTTP, and HTTPS - Experience with IP routing- Security engineers - Security administrators - Security architects - Operations engineers - Network engineers - Network administrators - Network or security technicians - Network managers - System designers - Cisco integrators and partnersDescribing the Cisco Email Security Appliance - Cisco Email Security Appliance Overview - Technology Use Case - Cisco Email Security Appliance Data Sheet - SMTP Overview - Email Pipeline Overview - Installation Scenarios - Initial Cisco Email Security Appliance Configuration - Centralizing Services on a Cisco Content Security Management Appliance (SMA) - Release Notes for AsyncOS 11.x Administering the Cisco Email Security Appliance - Distributing Administrative Tasks - System Administration - Managing and Monitoring Using the Command Line Interface (CLI) - Other Tasks in the GUI - Advanced Network Configuration - Using Email Security Monitor - Tracking Messages - Logging Controlling Sender and Recipient Domains - Public and Private Listeners - Configuring the Gateway to Receive Email - Host Access Table Overview - Recipient Access Table Overview - Configuring Routing and Delivery Features Controlling Spam with Talos SenderBase and Anti-Spam - SenderBase Overview - Anti-Spam - Managing Graymail - Protecting Against Malicious or Undesirable URLs - File Reputation Filtering and File Analysis - Bounce Verification Using Anti-Virus and Outbreak Filters - Anti-Virus Scanning Overview - Sophos Anti-Virus Filtering - McAfee Anti-Virus Filtering - Configuring the Appliance to Scan for Viruses - Outbreak Filters - How the Outbreak Filters Feature Works - Managing Outbreak Filters Using Mail Policies - Email Security Manager Overview - Mail Policies Overview - Handling Incoming and Outgoing Messages Differently - Matching Users to a Mail Policy - Message Splintering - Configuring Mail Policies Using Content Filters - Content Filters Overview - Content Filter Conditions - Content Filter Actions - Filter Messages Based on Content - Text Resources Overview - Using and Testing the Content Dictionaries Filter Rules - Understanding Text Resources - Text Resource Management - Using Text Resources Using Message Filters to Enforce Email Policies - Message Filters Overview - Components of a Message Filter - Message Filter Processing - Message Filter Rules - Message Filter Actions - Attachment Scanning - Examples of Attachment Scanning Message Filters - Using the CLI to Manage Message Filters - Message Filter Examples - Configuring Scan Behavior Preventing Data Loss - Overview of the Data Loss Prevention (DLP) Scanning Process - Setting Up Data Loss Prevention - Policies for Data Loss Prevention - Message Actions - Updating the DLP Engine and Content Matching Classifiers Using LDAP - Overview of LDAP - Working with LDAP - Using LDAP Queries - Authenticating End-Users of the Spam Quarantine - Configuring External LDAP Authentication for Users - Testing Servers and Queries - Using LDAP for Directory Harvest Attack Prevention - Spam Quarantine Alias Consolidation Queries - Validating Recipients Using an SMTP Server SMTP Session Authentication - Configuring AsyncOS for SMTP Authentication - Authenticating SMTP Sessions Using Client Certificates - Checking the Validity of a Client Certificate - Authenticating User Using LDAP Directory - Authenticating SMTP Connection Over Transport Layer Security (TLS) Using a Client Certificate - Establishing a TLS Connection from the Appliance - Updating a List of Revoked Certificates Email Authentication - Email Authentication Overview - Configuring DomainKeys and DomainKeys Identified Mail (DKIM) Signing - Verifying Incoming Messages Using DKIM - Overview of Sender Policy Framework (SPF) and SIDF Verification - Domain-based Message Authentication Reporting and Conformance (DMARC) Verification - Forged Email Detection Email Encryption - Overview of Cisco Email Encryption - Encrypting Messages - Determining Which Messages to Encrypt - Inserting Encryption Headers into Messages - Encrypting Communication with Other Message Transfer Agents (MTAs) - Working with Certificates - Managing Lists of Certificate Authorities - Enabling TLS on a Listener’s Host Access Table (HAT) - Enabling TLS and Certificate Verification on Delivery - Secure/Multipurpose Internet Mail Extensions (S/MIME) Security Services Using System Quarantines and Delivery Methods - Describing Quarantines - Spam Quarantine - Setting Up the Centralized Spam Quarantine - Using Safelists and Blocklists to Control Email Delivery Based on Sender - Configuring Spam Management Features for End Users - Managing Messages in the Spam Quarantine - Policy, Virus, and Outbreak Quarantines - Managing Policy, Virus, and Outbreak Quarantines - Working with Messages in Policy, Virus, or Outbreak Quarantines - Delivery Methods Centralized Management Using Clusters - Overview of Centralized Management Using Clusters - Cluster Organization - Creating and Joining a Cluster - Managing Clusters - Cluster Communication - Loading a Configuration in Clustered Appliances - Best Practices Testing and Troubleshooting - Debugging Mail Flow Using Test Messages: Trace - Using the Listener to Test the Appliance - Troubleshooting the Network - Troubleshooting the Listener - Troubleshooting Email Delivery - Troubleshooting Performance - Web Interface Appearance and Rendering Issues - Responding to Alerts - Troubleshooting Hardware Issues - Working with Technical Support References - Model Specifications for Large Enterprises - Model Specifications for Midsize Enterprises and Small-to-Midsize Enterprises or Branch Offices - Cisco Email Security Appliance Model Specifications for Virtual Appliances - Packages and Licenses4 dagen2250.001995.002250.002000.002800.002800.003300.001690.001690.002100.001850.001995.001995.001995.001995.001995.001995.001995.001995.001995.002990.003630.003600.009680.002100.002100.002100.002595.003560.002400.003600.002880.002160.003195.003195.003195.00223900.004970.002425.0031.0020.0020.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.0036.00