The Securing Networks with Cisco Firepower Threat Defense NGFW (FIREPOWER200) v1.0 is a 5-day instructor-led course that introduces learners to the basic next-generation intrusion prevention system (NGIPS) and next-generation firewall (NGFW) security concepts. The course also describes the Cisco Firepower system. Among other powerful features, learners become familiar with:
  • Firepower Threat Defense configuration
  • In-depth event analysis
  • NGIPS tuning and configuration
  • The latest platform features—file and malware inspection, security intelligence, domain awareness, and more

The course begins by introducing the system architecture, the latest major features, and the role of policies in implementing the solution. Learners learn how to deploy and manage Cisco Firepower Threat Defense devices and perform basic Cisco Firepower discovery. Course then describes how to use and configure Threat Defense technology, including application control, security intelligence, NGFW, NGIPS, as well as network-based malware and file controls. Learners then learn how to take advantage of powerful tools, so that they can perform more efficient event analysis, including the detection of file types and network-based malware. Learners also learn how to properly tune systems for better performance and greater network intelligence. The course concludes with system and user administration tasks and Threat Defense system troubleshooting.

This course combines lecture materials and hands-on labs that give learners practice in deploying and managing the Cisco Firepower system.
This course is part of a portfolio of security courses designed to help businesses support and maintain their Cisco Firepower Threat Defense systems.


Upon completing this course, the learner will be able to meet these overall objectives:
  • Describe the Cisco Firepower Threat Defense system and key concepts of NGIPS and NGFW technology
  • Describe how to perform the configurations tasks required for implementing a Cisco Firepower Threat Defense device
  • Describe how to implement quality of service (QoS) and Network Address Translation (NAT) by using Cisco Firepower Threat Defense
  • Perform an initial network discovery using Cisco Firepower to identify hosts, applications, and services
  • Identify and create the objects required as prerequisites to implementing access control policies
  • Describe the behavior, usage, and implementation procedure for access control policies
  • Describe the concepts and implementation procedure of security intelligence features
  • Describe Cisco Advanced Malware Protection (AMP) for networks, and the implementation procedure of file control and advanced malware protection
  • Implement and manage intrusion policies
  • Explain the use of network analysis policies and the role of preprocessor technology in processing network traffic for NGIPS inspection
  • Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
  • Describe key Cisco Firepower Management Center system administration and user account management features
  • Describe the processes that can be used to troubleshoot Cisco Firepower Threat Defense systems


The course contains these components:
  • Cisco Firepower Threat Defense Overview
  • Cisco Firepower System Setup
  • Lab: Connect to the Lab Environment
  • Lab: Navigate the Cisco Firepower Management Center GUI
  • Lab: Device Management
  • QoS and NAT Implementation
  • Lab: Implementing QoS and NAT
  • Cisco Firepower Discovery
  • Lab: Configuring Network Discovery
  • Access Control Policy Prerequisites
  • Implementing Access Control Policies
  • Lab: Implementing an Access Control Policy
  • Security Intelligence
  • Lab: Implementing Security Intelligence
  • AMP for Networks Malware Protection
  • Lab: AMP for Networks Malware Protection
  • Next-Generation Intrusion Prevention Systems
  • Lab: Implementing NGIPS
  • Network Analysis Policies
  • Detailed Analysis Techniques
  • Lab: Performing Detailed Analysis
  • System Administration
  • Lab: System Administration
  • Cisco Firepower Threat Defense Troubleshooting
  • Lab: Cisco Firepower Troubleshooting

Prerequisite Knowledge

The knowledge and skills that a learner should possess before attending this course are as follows:
  • Technical understanding of TCP/IP networking and network architecture
  • Basic familiarity with firewall and IPS concepts