دوره Cisco Hardening

• Describe Vulnerability and CVE
• Cisco Security Advisories
• Describe Management Plane, Control Plane, Data Plane

• Monitor Cisco Security Advisories and Response
• Describe AAA Framework
• Centralize Log Collection and Syslog
• Describe Netflow and Gain Traffic Visibility

     1. Password and Login Policy

• Password Management
• Enhanced Password Security
• Login Password Retry Lockout
• No Service Password-Recovery

2. General MGMT Plane Hardening

• Disable Unused Services
• EXEC Timeout
• Management interface
• Describe OOB Network
• Memory Threshold Notifications
• Reserve Memory for Console Access
• Enhanced Crashinfo File Collection
• NTP Hardening
• Disable Smart Install
• Infrastructure ACLs

3. Secure Interactive Management Session

• MGMT Plane Protection
• Control Plane Protection
• SSH and SSH Enhancements
• Console and VTY Lines
• Banners

4. Fortify the simple network monitoring (SNMP)

• SNMP Community String
• SNMP ACLs
• Infrastructure ACL
• SNMP version 3

5. Logging Best Practice

• Send logs to Central location
• Logging Levels
• Configure logging Source Interface
• Configure logging Timestamps

     1. General Control Plane Hardening

• IP ICMP Redirect
• ICMP Unreachable
• Proxy ARP

2. Limit CPU Impact of Control Plane Traffic

• Understand Control Plane Traffic
• Infrastructure ACLs
• Receive ACLs
• CoPP

     1.General Data Plane Hardening

• Disable IP Source Routing
• Disable or Limit IP directed Broadcasts

2. Secure Layer 2 Protocols

• Describe DHCP Attacks
• DHCP Snooping
• Describe ARP Attacks
• Dynamic ARP Inspection
• STP Hardening
• DTP Hardening
• Port Security Configuration
• Describe Network Access Control via Dot1x

3. Access Control with VLAN Maps and Port Access Control Lists

• Access Control with VLAN Maps
• Access Control with PACLs
• Access Control with MAC