Corso SDWSCS – Implementing Cisco SD-WAN Security and Cloud Solutions

Obiettivi | Certificazione | Contenuti | Tipologia | Prerequisiti | Durata e Frequenza | Docenti | Modalità di Iscrizione | Calendario

Il Corso SDWSCS – Implementing Cisco SD-WAN Security and Cloud Solutions fornisce ai Partecipanti competenze avanzate sulle funzionalità di Cisco SD-WAN security e sui servizi cloud integrati nelle architetture WAN moderne. Il corso approfondisce l’utilizzo dei servizi di sicurezza distribuiti e cloud-based per proteggere il traffico aziendale, ottimizzare l’accesso alle applicazioni SaaS e integrare la fabric Cisco SD-WAN con ambienti cloud pubblici, privati e multicloud. Durante il corso vengono trattate tecnologie e funzionalità come Cisco SD-WAN, Cisco vManage, vAnalytics, Direct Internet Access (DIA), application-aware enterprise firewall, intrusion prevention, URL filtering, malware protection, TLS/SSL decryption, on-premises threat prevention, content filtering, service chaining e Secure Access Service Edge (SASE). Il programma include inoltre l’utilizzo di Cisco Umbrella Secure Internet Gateway (SIG), Umbrella DNS policies, cloud security services, CASB, protezione delle applicazioni Microsoft 365 e integrazione con servizi cloud. Il percorso approfondisce anche il monitoraggio e l’ottimizzazione delle applicazioni cloud tramite Cisco ThousandEyes, l’uso di Cisco SD-WAN Cloud OnRamp per SaaS, public cloud e multicloud, oltre agli scenari di cloud interconnect e colocation. Ampio spazio è dedicato alla configurazione di security policies, deployment di servizi cloud security, monitoraggio delle performance, analisi della user experience e gestione operativa delle soluzioni SD-WAN security e cloud. Il Corso contribuisce alla preparazione delle competenze richieste nei percorsi di Certificazione Cisco Enterprise Networking e Cisco SD-WAN, con focus specifico su Cisco SD-WAN security, cloud services, SASE, Cisco Umbrella SIG, ThousandEyes, Cloud OnRamp, DIA security, CASB, service chaining, vManage e vAnalytics.

.

Obiettivi del corso

Di seguito una sintesi degli obiettivi principali del Corso SDWSCS – Implementing Cisco SD-WAN Security and Cloud Solutions:

• Implementare funzionalità di Cisco SD-WAN security, incluse on-premises threat prevention, enterprise firewall, intrusion prevention e URL filtering.
• Configurare Direct Internet Access (DIA), service chaining, security policies e servizi di protezione cloud-based.
• Integrare Cisco Umbrella Secure Internet Gateway (SIG), Umbrella DNS policies e CASB per la protezione di applicazioni SaaS e cloud.
• Utilizzare Cisco ThousandEyes per monitorare cloud services, user experience e applicazioni come Microsoft 365.

Certificazione del corso

Questo corso tratta contenuti trasversali a diverse Certificazioni Cisco Security

Contenuti del corso

Introducing Cisco SD-WAN Security

• Overview of Cisco SD-WAN security architecture and deployment options
• Role of integrated security services in Cisco SD-WAN environments
• Security use cases for branch, cloud, and remote access scenarios
• Relationship between SD-WAN fabric, security policies, and traffic protection
• Key components used to secure enterprise WAN connectivity

Deploying On-Premises Threat Prevention

• Deployment of on-premises threat prevention in Cisco SD-WAN
• Use of application-aware enterprise firewall capabilities
• Implementation of intrusion prevention features
• Protection against malware and malicious traffic
• Policy-based inspection and enforcement for WAN traffic

Examining Content Filtering

• Overview of content filtering options in Cisco SD-WAN
• Use of URL filtering to control web access
• Integration of malware protection and web security services
• Policy design for acceptable use and threat reduction
• Operational considerations for secure Internet traffic filtering

Exploring Cisco SD-WAN Dedicated Security Options

• Implementation of secure Direct Internet Access (DIA)
• Deployment of unified security policies for DIA scenarios
• Use of TLS/SSL decryption for encrypted traffic inspection
• Security policy enforcement at branch and edge locations
• Design considerations for distributed security services

Examining Cisco SASE

• Core concepts of Secure Access Service Edge (SASE)
• Relationship between SD-WAN and cloud-delivered security
• Use cases for secure access to Internet, SaaS, and cloud services
• Benefits of converging networking and security functions
• Architectural considerations for SASE-enabled deployments

Exploring Cisco Umbrella SIG

• Overview of Cisco Umbrella Secure Internet Gateway (SIG)
• Deployment options for cloud-based security services
• Role of Umbrella SIG in protecting Internet and SaaS access
• Integration of Umbrella SIG with Cisco SD-WAN environments
• Security benefits of DNS-layer and cloud-delivered protection

Securing Cloud Applications with Cisco Umbrella SIG

• Configuration of Cisco Umbrella DNS policies
• Deployment of Umbrella SIG for cloud application protection
• Use of CASB capabilities for SaaS security
• Protection of applications such as Microsoft 365
• Policy enforcement for users, branches, and cloud access

Exploring Cisco SD-WAN ThousandEyes

• Overview of Cisco ThousandEyes for cloud and SaaS monitoring
• Monitoring of cloud services and application reachability
• Visibility into network paths, performance, and user experience
• Use of ThousandEyes to monitor Microsoft 365 applications
• Operational analysis of cloud service availability and degradation

Optimizing SaaS Applications

• Use of Cisco SD-WAN Cloud OnRamp for SaaS
• Optimization of access to SaaS applications
• Application-aware path selection for improved user experience
• Monitoring and validation of SaaS performance
• Operational considerations for cloud application optimization

Connecting Cisco SD-WAN to Public Cloud

• Integration of Cisco SD-WAN with public cloud environments
• Deployment of Cisco SD-WAN Multicloud Gateways
• Connectivity models for public cloud access
• Use of automated workflows through Cisco vManage
• Design considerations for secure and scalable cloud connectivity

Examining Cloud Interconnect Solutions

• Overview of cloud interconnect use cases
• Connectivity options between SD-WAN fabric and cloud providers
• Design considerations for performance, resiliency, and security
• Integration of cloud interconnect into enterprise WAN architectures
• Support for hybrid cloud and multicloud networking scenarios

Exploring Cisco Cloud OnRamp for Colocation

• Concepts of Cisco Cloud OnRamp for Colocation
• Deployment scenarios for colocation-based cloud access
• Integration of security and networking services in colocation environments
• Use cases for distributed enterprise and cloud connectivity
• Operational benefits of centralized cloud access points

Monitoring Cisco SD-WAN Cloud and Security Solutions

• Monitoring capabilities available through Cisco vManage
• Use of vAnalytics for SD-WAN visibility and insights
• Monitoring of security services, cloud connectivity, and application performance
• Troubleshooting of SD-WAN cloud and security deployments
• Operational reporting for performance, availability, and policy effectiveness

Attività Laboratoriali

• Configure Threat Prevention
• Implement Web Security
• Deploy DIA Security with Unified Security Policy
• Deploy Service Chaining
• Configure Cisco Umbrella DNS Policies
• Deploy Cisco Umbrella Secure Internet Gateway
• Implement CASB Security
• Microsoft 365 SaaS Testing by Using Cisco ThousandEyes
• Configure Cisco OnRamp for SaaS
• Deploy Cisco SD-WAN Multicloud Gateways
• Cisco vAnalytics Overview

Tipologia

Corso di Formazione con Docente

Docenti

I docenti sono Istruttori accreditati CISCO e certificati in altre tecnologie IT, con anni di esperienza pratica nel settore e nella Formazione.

Infrastruttura laboratoriale

Per tutte le tipologie di erogazione, il Corsista può accedere alle attrezzature e ai sistemi reali Cisco presenti nei Nostri laboratori o direttamente presso i data center Cisco in modalità remota. Ogni partecipante dispone di un accesso per implementare le varie configurazioni avendo così un riscontro pratico e immediato della teoria affrontata. Ecco di seguito alcune topologie di rete dei Laboratori Cisco Disponibili:

Dettagli del corso

Prerequisiti

Si consiglia la partecipazione al Corso Cisco CCNA.

Durata del corso

• Durata Intensiva 3gg;

Frequenza

Varie tipologie di Frequenza Estensiva ed Intensiva.

Date del corso

• Corso Cisco SDWSCS (Formula Intensiva) – Su richiesta – 9:00 – 17:00

Le iscrizioni sono a numero chiuso per garantire ai tutti i partecipanti un servizio eccellente.
L’iscrizione avviene richiedendo di essere contattati dal seguente Link, o contattando la sede al numero verde 800-177596 o inviando una richiesta all’email [email protected].