Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention

In this Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention course shows you how to deploy and configure Cisco Secure Firewall Threat Defense system and its features as a data center network firewall or as an Internet Edge firewall with Virtual Private Network (VPN) support. You will learn how to configure identity-based policies, Secure Sockets Layer (SSL) decryption, remote-access VPN, and site-to-site VPN before moving on to advanced Intrusion Prevention System (IPS) configuration and event management, integrations with other systems, and advanced troubleshooting. You will also learn how to automate configuration and operations of Cisco Secure Firewall Threat Defense system using programmability and Application Programming Interfaces (APIs) and how to migrate configuration from Cisco Secure Firewall Adaptive Security Appliances (ASA). 

Cisco Hybrid Firewall Deployment, Configuration, and Troubleshooting Overview
This course provides a comprehensive, practical introduction to deploying and operating Cisco Hybrid Firewall solutions across modern enterprise and hybrid cloud environments. It focuses on integrating on-premises Cisco Secure Firewall platforms with cloud-delivered security services to deliver consistent policy enforcement, centralized visibility, and scalable threat protection for users, applications, and data regardless of location. Learners gain a clear understanding of hybrid firewall architecture, design considerations, and real-world use cases that address today's distributed workforce and multi-cloud connectivity requirements.

The course guides students through planning and deploying hybrid firewall architectures, configuring secure connectivity between on-premises and cloud security components, and implementing consistent access control, intrusion prevention, malware protection, and encrypted traffic inspection policies. Strong emphasis is placed on identity-based policy enforcement, VPN integration, and secure traffic steering to ensure inspection and protection remain effective as traffic patterns evolve across campus, branch, data center, and cloud environments.

Operational readiness is reinforced through in-depth coverage of monitoring, analytics, and advanced troubleshooting techniques tailored to hybrid deployments. Students learn how to analyze end-to-end traffic flows, correlate events across on-premises and cloud inspection points, resolve connectivity and policy issues, and apply automation and best practices for ongoing operations. By the end of the course, learners are equipped with the skills required to design, deploy, manage, and troubleshoot Cisco Hybrid Firewall solutions in real-world enterprise environments with confidence.

How You'll Benefit

This training will help you: 

• Attain advanced knowledge of Cisco Secure Firewall Threat Defense technology
• Gain competency and skills required to implement and manage a Cisco Secure Firewall Threat Defense system regardless of platform
• Learn detailed information on policy management, traffic flow through the system, and the system architecture
• Deploy and manage many of the advanced features available in the Cisco Secure Firewall Threat Defense system
• Gain knowledge for protocols, solutions, and designs to acquire professional-level and expert-level data center roles
• Earn 40 CE credits toward recertification

• Describe Cisco Secure Firewall Threat Defense
• Describe advanced deployment options on Cisco Secure Firewall Threat Defense
• Describe advanced device settings for Cisco Secure Firewall Threat Defense device
• Configure dynamic routing on Cisco Secure Firewall Threat Defense
• Configure advanced network address translation on Cisco Secure Firewall Threat Defense
• Configure SSL decryption policy on Cisco Secure Firewall Threat Defense
• Deploy Remote Access VPN on Cisco Secure Firewall Threat Defense
• Deploy identity-based policies on Cisco Secure Firewall Threat Defense
• Deploy site-to-site IPsec-based VPN on Cisco Secure Firewall Threat Defense
• Deploy advanced access control settings on Cisco Secure Firewall Threat Defense
• Describe advanced event management on Cisco Secure Firewall Threat Defense
• Describe available integrations with Cisco Secure Firewall Threat Defense
• Troubleshoot traffic flow using advanced options on Cisco Secure Firewall Threat Defense
• Describe benefits of automating configuration and operations of Cisco Secure Firewall Threat Defense
• Describe configuration migration to Cisco Secure Firewall Threat Defense

What to Expect in the Exam

300-710 SNCF: Securing Networks with Cisco Firepower is a 90-minute exam associated with the Cisco Certified Specialist – Network Security Firepower certification and satisfies the concentration exam requirement for the CCNP Security certification. 

The multiple-choice format tests your knowledge of Cisco Firepower Threat Defense and Firepower 7000 and 8000 Series virtual appliances, including: 

• Policy configurations
• Integrations
• Deployments
• Management and troubleshooting

• System Installers
• System Integrators
• System Administrators
• Network Administrators
• Solutions Designers

The knowledge and skills you are expected to have before attending this training are: 

• Knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP)
• Basic knowledge of routing protocols
• Familiarity with the content explained in the Securing Internet Edge with Cisco Secure Firewall Threat Defense training

These skills can be found in the following Cisco Learning Offerings:  

• Implementing and Administering Cisco Solutions 2.0
• Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention 1.0

OUTLINE
MODULE 1: Introducing Cisco Secure Firewall Threat Defense 

MODULE 2: Describing Advanced Deployment Options on Cisco Secure Firewall Threat Defense  

MODULE 3: Configuring Advanced Device Settings on Cisco Secure Firewall Threat Defense 

MODULE 4: Configuring Dynamic Routing on Cisco Secure Firewall Threat Defense 

MODULE 5: Configuring Advanced NAT on Cisco Secure Firewall Threat Defense 

MODULE 6: Configuring SSL Policy on Cisco Secure Firewall Threat Defense 

MODULE 7: Deploying Remote Access VPN on Cisco Secure Firewall Threat Defense 

MODULE 8: Deploying Identity-Based Policies on Cisco Secure Firewall Threat Defense 

MODULE 9: Deploying Site-to-Site VPN on Cisco Secure Firewall Threat Defense 

MODULE 10: Configuring Snort Rules and Network Analysis Policies 

MODULE 11: Describing Advanced Event Management Cisco Secure Firewall Threat Defense 

MODULE 12: Describing Integrations on Cisco Secure Firewall Threat Defense 

MODULE 13: Troubleshooting Advanced Traffic Flow on Cisco Secure Firewall Threat Defense 

MODULE 14: Automating Cisco Secure Firewall Threat Defense 

MODULE 15: Migrating to Cisco Secure Firewall Threat Defense 

LAB OUTLINE

• Deploy Advanced Connection Settings
• Configure Dynamic Routing
• Configure SSL Policy
• Configure Remote Access VPN
• Configure Site-to-Site VPN
• Customize IPS and NAP Policies
• Configure Cisco Secure Firewall Threat Defense Integrations
• Troubleshoot Cisco Secure Firewall Threat Defense
• Migrate Configuration from Cisco Secure Firewall ASA