The Implementing Cisco Network Security (IINS) v3.0 is a lab-intensive 5-day instructor-led course that introduces the learners to a solid foundation in network security, including the current threat landscape, traditional and modern threat defense technologies, basic security feature configuration and verification, logging, and monitoring. Configurations are performed on Cisco IOS devices using the CLI and on the Cisco ASA adaptive security appliance using the Cisco ASDM.
The course focuses on security principles and technologies, using Cisco security products to provide hands-on examples. Using instructor-led discussions, extensive hands-on lab exercises, and supplemental materials, this course allows learners to understand common security concepts, and deploy basic security techniques utilizing a variety of popular security appliances within a “real-life” network infrastructure.
This course is recommended training for the Cisco Certified Network Associate Security (CCNA Security) career certification.


Upon completing this course, the learner will be able to meet these overall objectives:
  • Describe common network security concepts
  • Secure routing and switching infrastructure
  • Deploy basic authentication, authorization and accounting services
  • Deploy basic firewalling services
  • Deploy basic site-to-site and remote access VPN services
  • Describe the use of more advanced security services such as intrusion protection, content security and identity management


The course contains these components:
  • Security Concepts
    • Threatscape
    • Threat Defense Technologies
    • Security Policy and Basic Security Architectures
    • Cryptographic Technologies
  • Secure Network Devices
    • Implementing AAA
    • Challenge Lab: Configure AAA and Secure Remote Administration
    • Management Protocols and Systems
    • Challenge Lab: Configure Secure Network Management Protocols
    • Securing the Control Plane
    • Challenge Lab: Configure Secure EIGRP Routing
  • Layer 2 Security
    • Securing Layer 2 Infrastructure
    • Challenge Lab: Configure Secure Layer 2 Infrastructure
    • Securing Layer 2 Protocols
    • Challenge Lab: Configure DHCP Snooping and STP Protection
  • Firewall
    • Firewall Technologies
    • Introducing the Cisco ASA v9.2
    • Challenge Lab: Configure Interfaces and NAT on the Cisco ASA
    • Cisco ASA Access Control and Service Policies
    • Challenge Lab: Configure Network Access Control with the Cisco ASA
    • Cisco IOS Zone Based Firewall
  • VPN
    • IPsec Technologies
    • Site-to-Site VPN
    • Challenge Lab: Configure Site-to-Site VPN on IOS
    • Client-Based Remote Access VPN
    • Challenge Lab: Configure AnyConnect Remote Access VPN on ASA
    • Clientless Remote Access VPN
    • Challenge Lab: Configure Clientless SSL VPN on the ASA
  • Advanced Topics
    • Intrusion Detection and Protection
    • Endpoint Protection
    • Content Security
    • Advanced Network Security Architectures

Prerequisite Knowledge

The knowledge and skills that a learner should possess before attending this course are as follows:

Associated certifications