Cisco Security Cloud Control, cdFMC/FMC, Firewall, XDR, and Splunk

This 5-day course covers Cisco Security Cloud Control (SCC), cloud-delivered Firewall Management Center (cdFMC), and Cisco Secure Firewall Version 10 across deployment, administration, policy, connectivity, monitoring, automation, and troubleshooting. The 20-module curriculum also examines related Cisco integrations, Splunk event analysis, and Cisco XDR workflows.

Learners progress from Cloud Control Provisioning and Firewall Onboarding through policy creation, NAT, threat inspection, logging, SIEM integration, XDR correlation, AI-Assisted analysis, change control, troubleshooting, and a final capstone.

Why Attend with Current Technologies CLC

• Our Instructors are in the top 10% rated by Cisco
• Our Lab has a dedicated 1 Gig Fiber Connection for our Labs
• Our Labs run up to Date Code for all our courses

The primary audience for this course is as follows:

• Network Engineers
• Security Engineers
• Firewall Administrators
• Security Operations Analysts
• Infrastructure Architects
• Technical leads responsible for planning, deploying, managing, or supporting Cisco firewall environments.

Prerequisites

• Familiarity with IP networking, routing, basic firewall policy, and VPN concepts will help participants follow the curriculum.
• Experience administering Cisco firewalls is useful for advanced operational topics.

OUTLINE

Module 1: Introduction to Cisco Security Cloud Control                                                                                                                                                                                                      Establish the role of SCC and identify the products and initial steps involved in cloud security management.

• Lesson 1: Security Cloud Control Overview
• Lesson 2: Security Cloud Control Managed Products
• Lesson 3: Cisco Cloud Control
• Lesson 4: Getting Started with Security Cloud Control

Module 2: Configuring Authentication in Cisco Security Cloud Control                                                                                                                                                                    Explore SCC architecture, platform administration, organization management, subscriptions, and licensing.

• Lesson 1: Security Cloud Control Architecture
• Lesson 2: First-Time Administrator Login Process
• Lesson 3: Security Cloud Control Dashboard
• Lesson 4: SCC Platform Management
• Lesson 5: SCC Organizational Management
• Lesson 6: SCC Subscription Claim Process
• Lesson 7: Multitenant Organization Management
• Lesson 8: Licensing

Module 3: Configuring Authentication in Cisco SCC                                                                                                                                                                                                         Examine administrative access and identity integration, including identity providers, MFA, and Microsoft Entra ID.

• Lesson 1: User Management
• Lesson 2: Administrative Access in SCC
• Lesson 3: SCC Authentication Architecture
• Lesson 4: Domain Verification
• Lesson 5: Integrating an Identity Provider
• Lesson 6: Cisco Duo Authentication and MFA
• Lesson 7: Managing Duo in Cisco Security Cloud Control
• Lesson 8: Configuring Microsoft Entra ID Authentication
• Lesson 9: Cisco Identity Intelligence

Module 4: Security Cloud Control Integrations                                                                                                                                                                                                                     Explore how SCC connects with the Cisco security and networking portfolio and Splunk to support broader operations.

• Lesson 1: Integrating Cisco ISE with SCC
• Lesson 2: Cisco AI Defense
• Lesson 3: Cisco Secure Access
• Lesson 4: Cisco Multicloud Defense
• Lesson 5: Cisco Secure Workload
• Lesson 6: Cisco Catalyst SD-WAN
• Lesson 7: Cisco Meraki
• Lesson 8: Cisco Hypershield Integration
• Lesson 9: Splunk Integration
• Lesson 10: Cisco Secure Firewall Integration
• Lesson 11: Cisco XDR Integration

Module 5: Cisco Secure Firewall Platform Overview                                                                                                                                                                                                 Examine Secure Firewall architecture, platform choices, deployment options, management interfaces, and routing segmentation.

• Lesson 1: Cisco Secure Firewall Architecture
• Lesson 2: Secure Firewall Platforms
• Lesson 3: SCC FTD Deployments
• Lesson 4: SCC FTD Deployment in a Cloud Environment
• Lesson 5: SCC FTD Deployment Across Multiple Regions
• Lesson 6: FTD Command-Line Interface
• Lesson 7: Firewall Device Manager (FDM)
• Lesson 8: Secure Firewall Deployment
• Lesson 9: Virtual Routing and Forwarding (VRF)

Module 6: Cisco Secure Firewall High Availability                                                                                                                                                                                                                   Evaluate redundancy designs and operational practices for high availability, multi-tenancy, and clustering.

• Lesson 1: Secure Firewall Redundancy Overview
• Lesson 2: Choosing the Right Redundancy Design
• Lesson 3: Secure Firewall Multi-Tenancy Mode
• Lesson 4: Secure Firewall High Availability
• Lesson 5: Secure Firewall HA Best Practices
• Lesson 6: Secure Firewall High Availability Troubleshooting
• Lesson 7: Secure Firewall Clustering
• Lesson 8: Secure Firewall Cluster Troubleshooting
• Lesson 9: Secure Firewall Redundancy Best Practices
• Lesson 10: Secure Firewall Redundancy Design

Module 7: SCC and Cloud Delivered FMC Architecture                                                                                                                                                                                                       Explore cdFMC provisioning, integration with on-premises FMC, device onboarding, configuration templates, and cloud migration.

• Lesson 1: Cloud Management
• Lesson 2: Cloud-Delivered FMC Overview
• Lesson 3: Provisioning Cloud-Delivered FMC
• Lesson 4: Cloud-Delivered FMC Interface
• Lesson 5: On-Premises FMC Integration with Security Cloud Control
• Lesson 6: SCC Device Onboarding
• Lesson 7: Secure Firewall Device Onboarding
• Lesson 8: SCC Secure Firewall Configuration Templates
• Lesson 9: Migrating Devices to the Cloud

Module 8: Security Cloud Control Hybrid Mesh Firewall                                                                                                                                                                                               Examine multi-platform firewall management and the integration of SD-WAN, Meraki MX, Secure Access, and dynamic attributes.

• Lesson 1: Multi-Platform Management Overview
• Lesson 2: Security Cloud Control for Hybrid Mesh
• Lesson 3: Managing Cisco SD-WAN Firewalls
• Lesson 4: Managing Meraki MX Firewalls
• Lesson 5: Unified Secure SD-WAN Experience
• Lesson 6: SCC Integrations with SD-WAN
• Lesson 7: Integrating Secure Access with SCC
• Lesson 8: Dynamic Attributes Connector

Module 9: Software Upgrades                                                                                                                                                                                                                                                           Review the upgrade lifecycle for FMC and Threat Defense, including planning, downloads, and content updates.

• Lesson 1: Software Upgrade Overview
• Lesson 2: Software Upgrade Planner
• Lesson 3: Software Downloads
• Lesson 4: Firewall Management Center Upgrade
• Lesson 5: Content Updates
• Lesson 6: Threat Defense Upgrade

Module 10: Object Management                                                                                                                                                                                                                                                     Develop a structured approach to creating, reusing, governing, and troubleshooting firewall objects at scale.

• Lesson 1: Object Introduction
• Lesson 2: Core Object Types
• Lesson 3: Operating Objects at Scale
• Lesson 4: Verification and Troubleshooting
• Lesson 5: Real-World Use Cases
• Lesson 6: Object Reference Library
• Lesson 7: Port and Service Objects
• Lesson 8: URL and FQDN Objects
• Lesson 9: Object Groups
• Lesson 10: Naming Conventions and Governance
• Lesson 11: Object Reuse and Lifecycle Management
• Lesson 12: Creating Firewall Objects

Module 11: FMC and Device Administration                                                                                                                                                                                                                               Review the configuration and maintenance tasks that support consistent firewall administration and recovery.

• Lesson 1: Platform Settings
• Lesson 2: FMC Device Management
• Lesson 3: Templates
• Lesson 4: NAT Configuration
• Lesson 5: FlexConfig
• Lesson 6: Security Zones
• Lesson 7: Secure Firewall Users
• Lesson 8: Backup and Restore

Module 12: Secure Firewall Routing                                                                                                                                                                                                                                       Examine forwarding behavior and routing options, including static routing, VRF, policy-based routing, OSPF, and BGP.

• Lesson 1: Routing Fundamentals
• Lesson 2: Static Routing
• Lesson 3: Virtual Routing (VRF)
• Lesson 4: Policy-Based Routing
• Lesson 5: Dynamic Routing
• Lesson 6: Open Shortest Path First (OSPF)
• Lesson 7: Border Gateway Protocol (BGP)
• Lesson 8: Forwarding Logic

Module 13: Security Policies                                                                                                                                                                                                                                                 Explore firewall policy controls and the analysis tools used to review and improve policy effectiveness.

• Lesson 1: Access Control Policy
• Lesson 2: Prefilter Rules
• Lesson 3: Creating a Decryption Policy
• Lesson 4: DNS Policy
• Lesson 5: Security Intelligence
• Lesson 6: User Identity
• Lesson 7: Intrusion Policy Overview
• Lesson 8: Application Policy
• Lesson 9: URL Filtering
• Lesson 10: Malware and File Policy
• Lesson 11: Network Discovery Policy
• Lesson 12: Policy Analyzer and Optimizer

Module 14: Encrypted Visibility Engine                                                                                                                                                                                                                                           Review Encrypted Visibility Engine configuration, exclusions, monitoring, and its relationship to decryption policy.

• Lesson 1: Encrypted Visibility Engine (EVE) Overview
• Lesson 2: Simplifying the Decryption Policy
• Lesson 3: Encrypted Visibility Engine Configuration
• Lesson 4: Encrypted Visibility Engine Exclusion List
• Lesson 5: Monitoring Encrypted Visibility Engine

Module 15: Security Cloud Control and Firewall AgenticOps                                                                                                                                                                                         Explore the AgenticOps topics in the curriculum and their relevance to AI-assisted security operations.

• Lesson 1: AgenticOps Insights
• Lesson 2: Agent Workforce
• Lesson 3: AI Operations (AIOps)

Module 16: Cisco Secure Firewall VPN                                                                                                                                                                                                                                           Review remote access VPN architecture and configuration, connection profiles, group policies, and Zero Trust Access concepts.

• Lesson 1: Remote Access VPN versus Zero Trust Access
• Lesson 2: Remote Access VPN Overview
• Lesson 3: Remote Access VPN Workflow and Protocols
• Lesson 4: Remote Access VPN Configuration
• Lesson 5: Remote Access VPN Connection Profiles and Group Policies
• Lesson 6: Zero Trust Access Overview

Module 17: Secure Firewall SD WAN                                                                                                                                                                                                                  Examine firewall SD-WAN deployment and VPN design, including hub-and-spoke topologies, VRF, forwarding, and troubleshooting.

• Lesson 1: SD-WAN on Secure Firewall
• Lesson 2: VPN Tunnel Interfaces
• Lesson 3: Secure Firewall VPN Design
• Lesson 4: Secure Firewall SD-WAN Configuration
• Lesson 5: Hub-and-Spoke VPN Topology Considerations
• Lesson 6: Hub-and-Spoke VPN Topology with VRF
• Lesson 7: ECMP and BGP Bi-Directional Forwarding
• Lesson 8: Security Service Edge Deployments
• Lesson 9: Monitoring and Troubleshooting

Module 18: Logging Monitoring and Event Analysis                                                                                                                                                                                          Explore event collection and analysis across SCC, firewall telemetry, Splunk, and XDR to support investigation and response.

• Lesson 1: Cloud Logging and Event Collection
• Lesson 2: Firewall Monitoring and Policy Analytics
• Lesson 3: SIEM Integration and Splunk Event Analysis
• Lesson 4: Advanced Logging and Threat Signals
• Lesson 5: DNS Investigation and Incident Response
• Lesson 6: Connecting SCC and XDR
• Lesson 7: Cross-Domain XDR Incident Analysis

Module 19: Security Cloud Control and Secure Firewall APIs                                                                                                                                                                           Explore API conventions, device onboarding, programmable management, and AI-assisted firewall administration.

• Lesson 1: Security Cloud Control API
• Lesson 2: API Conventions
• Lesson 3: Getting Started with APIs
• Lesson 4: Onboarding an FTD Device
• Lesson 5: Programmable Firewall AI Assistant
• Lesson 6: Firewall Management API
• Lesson 7: Simplifying FTD Management

Module 20: Secure Firewall Troubleshooting                                                                                                                                                                                                      Build a systematic approach to diagnosis using packet paths, health checks, CLI tools, RADKit, and evidence collection for TAC.

• Lesson 1: FTD Troubleshooting and Monitoring
• Lesson 2: FTD Troubleshooting Foundations
• Lesson 3: Following the Packet Path
• Lesson 4: Built-In RADKit on the FMC
• Lesson 5: Device Health and CLI Checks
• Lesson 6: Interactive Troubleshooting
• Lesson 7: VPN and HA Basics
• Lesson 8: Guided Troubleshooting Scenario
• Lesson 9: What to Collect for a TAC Case

LAB OUTLINE
Lab 1: Accessing Security Cloud Control 
Lab 2: Exploring Security Cloud Control 
Lab 3: Cisco Meraki Integration with Cisco Security Cloud Control 
Lab 4: On-Prem FMC Integration with Cisco Security Cloud Control 
Lab 5: Cloud-Delivered FMC setup with Cisco Security Cloud Control 
Lab 6: Verifying FTDs for SCC Integration 
Lab 7: Onboarding FTDs to Cloud-Delivered FMC 
Lab 8: FTD Day 0 to Full SCC Integration 
Lab 9: Explore Cloud-Delivered FMC 
Lab 10: Software Upgrades 
Lab 11: Creating Objects 
Lab 12: Cloud-Delivered FMC Basic Access Control for BR3 & BR4 
Lab 13: Cloud-Delivered FMC Basic Access Control for BR5 
Lab 14: Deploying NGFW Access Control Policies 
Lab 15: Cloud-Delivered FMC Platform Settings 
Lab 16: Device Interface and Connectivity Configuration 
Lab 17: High Availability Configuration 
Lab 18: Malware & File Policy 
Lab 19: Decryption Policy 
Lab 20: Intrusion Policy 
Lab 21: Access Control Policy Settings 
Lab 22: Access Control Rules 
Lab 23: Exploring Cisco AI Assistant 
Lab 24: Domain Integration 
Lab 25: IDP Configuration 
Lab 26: Troubleshooting 
Lab 27: Enabling Export-Controlled Features 
Lab 28: Remote Access VPN