Summary
This study guide for the Cisco 300-745 exam, Designing Cisco Security Infrastructure v1.0, provides a thorough and practical overview of the core concepts and technologies necessary to design robust, scalable, and secure network infrastructures. The book covers essential Cisco security portfolio components, including SecureX, Zero Trust architecture, and threat-centric security models, laying a strong foundation for understanding Cisco’s approach to cybersecurity.
It delves into designing secure network access, focusing on Identity and Access Management (IAM) with Cisco Identity Services Engine (ISE), 802.1X authentication methods, and network segmentation using TrustSec. The guide explains perimeter security design with Cisco Secure Firewall, including firewall principles, NAT, VPN, and integration with SIEM tools for comprehensive threat management.
Readers gain insights into securing the network infrastructure itself, covering control, data, and management plane security, Layer 2 and Layer 3 protections, WAN/LAN design, and infrastructure device hardening. The book also addresses advanced threat protection with Cisco Secure Malware Analytics, Endpoint, and Network Analytics, alongside threat intelligence integration for proactive defense.
Content security is covered via Cisco Secure Email, Web Appliance, Umbrella DNS-layer security, and cloud-delivered services with policy design strategies. The guide further explores secure remote access VPNs with Cisco AnyConnect, comparing SSL and IPsec VPNs and integrating multi-factor authentication for enhanced security.Book information
Genre
Technology, Science and Nature
