vzw BiASC asbl

BiASC Netacad & IT Education Day Presentations | Cyber Security | 6 May 2022

Here are the presentations of the different sessions at the NetAcad & CyberSecurity Day at Pairi Daiza on 6 May 2022.

NetAcad Security Portfolio

PDF: Download 2022 Security offerings overview

CyberSecurity Learning Pathway (SkillsForAll)

PDF: Download Cyber Pathway at SFA - RM_SO

CyberSecurity in the Industry (Agoria)

PDF: Download 20220505 BiASC IT Education Roadshow

Firewall Implementation Scenarios

PDF: Download Cisco Firepower Cookbook Access Control Implementation Scenarios - XS v22.05

Cyber Threat Analysis with Network Packet Analyzers

PDF: Download Cyber Threat Analysis with Network Packet Analyzers

=> More presentations will be added soon

Cybersecurity Pathway on Skills for All

New security courses are offered for adult education and for secondary schools.  

With the high demand for cybersecurity skills, preparing learners for entry-level IT and cybersecurity job roles is more important than ever.

The Cybersecurity pathway on Skills for All from Cisco Networking Academy aligns to the new entry-level IT Specialist Cybersecurity certification from Certiport, the leading provider of performance-based IT certification exams. The online learning pathway and certification prepare learners with the skills required for entry-level cybersecurity jobs such as Cybersecurity Technician, Junior Cybersecurity Analyst, and Tier 1 Help Desk Support.

This online learning pathway is a foundation for your students to continue on to certification-aligned career courses like CyberOps Associate and Network Security.

For more information, click here.

If you intend to offer the courses, please contact Yvan Rooseleer <yvan.rooseleer@biasc.be>

 

 

Cybersecurity Pathway

Cybersecurity professionals who can protect and defend an organization's network are in high-demand.

Put your detective-like qualities to work by gaining knowledge toward a career in fighting cybercrime.

Future Cybersecurity professionals can choose a pathway of six security courses comprising more than 300 hours of interactive learning, thereby focusing on problems that you will need to be able to solve. 

More information: https://ciscointeractivepathways.com/Cybersecurity-Pathways.html

CyberSecurity Webinar: The threat of dual-use tools

E. Brumaghin & N. Biasini
Webinar: The threat of dual-use tools
8 okt 2020, YouTube, 50:57
URL: https://www.youtube.com/watch?v=3OzHRTImA1U

Workshop by Tom Cordemans - IPD WEEK - May 2021

During the IPD Week on 5 May 2021 Tom Cordemans will be demonstrating best practices to teach about network security. 

Tom says: "Learning protocols can be hard and sometimes boring. By using the hacker's perspective you can tackle the learning process in a different way. Let's find out. We'll use DHCPv4 as an example." 

We encourage all instructors to take part in Tom's workshop. Tom is an instructor in higher education both in Bruges and Brussels. Moreover, Tom is an active advisor for BiASC. 

Diving into networking protocols by using the hacker’s perspective

Remote Hands-On Labs for Academy Students

Marc's Home Lab

Access for Cisco Academy students

• 
• 
• 
• 

Quite a number of Cisco Academy Instructors have been working on hardware lab access solutions so that students are able to experience working with real equipment and solving real problems. Marc Delmotte has provided his students with all the equipment necessary for the CCNA and Security courses. Marc is an instructor Trainer in Belgium who also teaches full-time in higher education.

Marc Delmotte, ITQ, NetAcad Coach and Cisco Academy Instructor

J'ai mis en ligne 3 labos accessibles à distance par les étudiants en CCNA et en CCNA Security. Je peux encore améliorer le système, mais cela fonctionne déjà très bien.  Les étudiants semblent enchantés. L'amélioration porterait sur une automatisation du planning des labos, car cela me prend beaucoup de temps…

Hardware bundles & Equipment for new Courses

Current Equipment for CCNA & CCNA Security Courses

• Router ISR4221/K9 
• Switch WS-C2960+24TC-L
• Firewall  ASA5506-K9 

The equipment used for the Networking Academy labs supports open standards published by IETF and IEEE. The Cisco Networking Academy courses are teaching open standards in a hands-on way.

It is not necessary to use high-end devices to design, implement and troubleshoot networks in the Networking Academy labs. There are still academies running on 1800/2800 and even on 2600 series of routers and most of the content is still possible to practice on that equipment.

Current Equipment for CCNA & CCNA Security Courses

• Router
  • CCNA courses: ISR4221/K9  (2GE, 2NIM, 8G FLASH, 4G DRAM,IPB)
  • CCNA Security course: ISR4221-SEC/K9 or ISR4321-SEC/K9
  • Wireless N-Router (b/g/n Wi-Fi): needed in CCNAv7, with Simultaneous Dual-Band, MIMO antenna array for expanded high speed coverage and reliability, 4 Gigabit Ethernet Ports, support for IPv6, WPA2 encryption and SPI Firewall, Quality of Service (QoS)
  • Optional for CCNAv7: NIM-2T= (2-Port Serial WAN Interface card)
• Switch: WS-C2960+24TC-L
• Firewall
  • CCNA Security course: ASA5506-K9 --- ASA 5506-X with FirePOWER services, 8GE, AC, 3DES/AES

Necessary equipment for new CCNA Version 7

The new Version 7 of the CCNA course will be recommending a minimal POD of 2 routers  + 2 switches.

There will be still labs requiring 3 routers and/or 3 switches. These labs will be formatted for Packet Tracer but instructors are always encouraged to use real equipment.

End of Life of equipment

When a product is announced end of life (EoL) the following will happen:

• Device will stay available till the EoL date and will be in Netacad Promo
• Global NetAcad team will start to look for replacement. Once the replacement is found and proofed to be suitable for the course, the courses will be started updating if this is necessary
• Academies will be advised to purchase the new device at the next upgrade and instructions will be issued about how to run the current course on old equipment

Usually this whole chain of events takes at least one year.

CCNA Security 

• CCNA Security certification will be replaced by a training badge. So, the NetAcad Course CCNA Security is not going away.
• People who complete the course will receive a Training Badge.
• People who have CCNA Security certification will be converted in CCNA + Training Badge.
• Currently, we don´t have any information about plans of  discontinuing the CCNA Security course.

Switch: WS-C2960+24TC-L

A trusted 10/100 device supporting all open standards used in the Cisco Academy CCNA labs.

CCNA Certification Voucher for NetAcad Instructors

Belgian IT Academy Support Center (BIASC) has available the following rewards in the Cisco Networking Academy Reward 2018-2019 program: 

• 5 Certification Vouchers - available until June 30th, 2019

OPTIONS for Instructors
CCNA 
CCNA Security 
CCNA Cybersecurity Fundamentals
CCNA Cybersecurity Operations

Instructors who would benefit from one of these vouchers and would like to make a request on behalf of Belgian IT Academy Support Center (BIASC), please register using the following form.

URL: https://forms.gle/rs4SiVuP7AZGbe7X6

The following data is needed for each instructor in order to receive a voucher:

• First Name
• Last Name
• Email
• Roll: Instructor
• Networking Academy ID: Available in the Netacad.com profile
• Voucher Name: CCNA Composite, CCNA Security, CCNA Cybersecurity Operations, CCNA Cybersecurity Fundamentals (Need to use exact name)
• Country

2019 - Best Security Practices

John Strand and Jake Williams - SANS Senior Instructors along with John Pescatore, SANS Director of Emerging Security Trends discuss your best strategies to consider for 2019 to build and maintain your cybersecurity defenses. This 2 hour webcast includes talks from John Strand and Jake and is followed by a lively panel of all three experts. Sponsored by Cisco.
URL: https://www.youtube.com/watch?time_continue=637&v=PrDgkPBgW68

 

 

Before, During, and After a Security Attack -- Online Webinar

Before, During, and After a Security Attack, 17 April, 9:00 a.m. Pacific Daylight Time: Register Here

Have you ever wondered what happens before a bad actor attacks a network? The hope is that their attempt to infiltrate the infrastructure will be eliminated by the layers of security protection built into the network. However, sometimes the attackers exploit an unknown, so-called, 0-day vulnerability to get inside. Do not panic – even during the attack, we can collect valuable information and learn how the attack is being-executed and if or where it is spreading.

Moreover, based on the collected information, we know where we should concentrate our cleaning efforts after the attack has been discovered and eliminated. Join this session to learn more about threat protection, and how simple scripts with programmability and automation can turn your response time to an attack from minutes to seconds.

If you register, you will get access to the recording.

 

Cisco ASA NAT – Configuration Guide

The Cisco ASA and Cisco ASA-X firewalls provides nearly infinite flexibility in so far as their NAT configuration. From the modularity of using objects, to the simplicity of configuring Auto NAT, to the granularity of Manual NAT, to the precision of NAT precedence  — the ASA can do it all.

This article covers each of these concepts in detail, explaining what they mean, when to use them, and how to apply them. If you read it from start to finish, and were able to follow with the examples and illustrations, then you can decidedly consider yourself an address translation expert on the Cisco ASA platform.

Part 1 – NAT Syntax
Objects - Real and Mapped - Auto NAT  - Manual NAT 

Part 2 – NAT Configuration Examples
Static NAT - Static PAT - Dynamic PAT - Dynamic NAT

Part 3 – Advanced NAT
Policy NAT - Twice NAT - NAT Precedence - Identity NAT

Here is the complete guide: http://www.practicalnetworking.net/stand-alone/cisco-asa-nat/

April 16, 2018 By Ed Harmoush

New Hardware Bundle CCNA + Security for Netacad Members

Every Cisco Academy is able to buy Cisco hardware at a discount of 75%. Here is a quote from 2018 only for BiASC members. Prices are subject to change.

 A Cisco Netacad hardware bundle is a fixed grouping of hardware that you cannot change. It consists of:

• Three routers
• Three switches
• Extra modules, cabling and licences
• Adaptive Security Appliance ASA (only for CCNA Security*)

Below are the unit prices for the standard lab equipment for CCNA and CCNA Security

• LAN Switch WS-C2960: €330.32
• Internet Router Cisco ISR 4321 : €508.87
• Internet Router with integrated firewall Cisco ISR 4321 with security bundle: €763.94 (*)
• Firewall Device ASA5506-K9 ASA 5506-X with FirePOWER services: €253.80 (*)

(*) Only necessary for CCNA Security courses

REMARK: for the CCNA 1 and CCNA 2 courses it is not necessary to buy hardware equipment. It is feasible only to use the simulation tool Packet Tracer. As a member of BiASC educational institutions have the license to use Packet Tracer for their students.

Understating Cisco IOS v15 Licenses

What are the ISO v15 Feature sets (technology package) types we have now days with ISR G2:

 

1. IP Base (ipbaseK9)come and running with any new ISR G2 routers (1900,2900,3900 Series) , its entry level for Cisco IOS functionality
2. DATA (dataK9)support MPLS.ATM. Multiprotocol support
3. Unified Commuincations (ucK9) support VOIP & IP Telephony
4. Security (securityK9) support Cisco IOS Firewall , IPS , IPsec , 3DES, VPN

URL: https://learningnetwork.cisco.com/docs/DOC-20321

The State of CyberSecurity - Cisco Live 2018

   

PDF: Download BRKSEC-2010

Case Study: http://blog.talosintelligence.com/2017/10/bad-rabbit.html

CCNA Security | Networking Academy Course Updates 2016 | Career-Ready

Course Overview

CCNA Security introduces the core security concepts and skills needed to troubleshoot and monitor computer networks and help ensure the integrity of devices and data.

It emphasizes the practical application of the skills needed to design, implement, and manage network security systems.

Benefits

CCNA R&S students interested building security and data protection expertise for the Cisco CCNA Security career certification and jobs as network security specialists.

Learning Components

• 11 chapters, quizzes, and chapter exams
• 13 Cisco® Packet Tracer activities and one Packet Tracer Practice Skills Based Assessment (SBA)
• 16 hands-on labs
• One each: pre-test, certification practice exam, practice final, final exam and skills-based assessment

Features

Target Audience: 2-year and 4-year college students in Networking or Engineering programs

Prerequisites: CCNA R&S: Scaling Networks

Languages: English

Course Delivery: Instructor-led

Estimated Time to Complete: 70 hours

Recommended Next Course: CCNP R&S ROUTE

Target Audience: 2-year and 4-year college students in Networking or Engineering programs

Prerequisites: CCNA R&S: Scaling Networks

Languages: English

Course Delivery: Instructor-led

Estimated Time to Complete: 70 hours

Recommended Next Course: CCNP R&S ROUTE

Introduction to Cybersecurity | Networking Academy Course Updates 2016

Course Overview

The Introduction to Cybersecurity course explores cyber trends, threats and staying safe in cyberspace, and protecting personal and company data. 

Benefits

Learn how to protect your personal data and privacy online and in social media, and why more and more IT jobs require cybersecurity awareness and understanding.

Learning Components

• 5 modules
• Interactive and instructional content
• 8 Activities and 7 lab exercises that reinforce learning
• 4 quizzes and 1 final exam
• Links to related resources

Features

Target Audience: Upper secondary and 2-Year college students, general audience

Prerequisites: None

Languages: Chinese-S, English

Course Delivery: Instructor -led or Self-paced

Estimated Time to Complete: 15 hours

Recommended Next Course: Cybersecurity Essentials, releasing Fall 2016

Pathway to become a Network Security Administrator | Course Progression

Below is a pathway through the various Cisco Networking Academy Courses if you want to become a Network Security Specialist

 

 

 

 

Remote Access Using Clientless VPN or AnyConnect Client

BRKSEC-2697 - Remote Access using Clientless VPN (2014 Milan)
Presentation by Hakan Nohre - CSE, Cisco

This session will provide Information and Details about Clientless VPN on the Cisco ASA Firewall. For certain use cases like Contractor Access or BYOD, customers want to have a more differentiated access than the well known Full Tunnel (AnyConnect). We will show and explain how an ASA can be used to provide Secure Remote Access with no need to install a VPN Client. As simple browser based access might not satisfy everybody's needs, we will go through advanced configurations like VDI access for iPAD as well. The target audience are security administrators that are familiar with ASA Firewalls and want to learn more about the Cisco Clientless VPN Solutions.

PDF:  Download BRKSEC-2697-Clientless SSL

BRKSEC-3033 - Advanced AnyConnect Deployment and Troubleshooting with ASA (2015 Milan)
Presentation by Hakan Nohre - CSE, Cisco

Remote access VPN can provide a flexible, transparent and yet secure working environment for mobile workers. This advanced session will explain different deployment options using Cisco AnyConnect Client with ASA. We will cover different options for strong authentication, One-time-password and client certificates and how these authentication options can be used together with posture assessment and enterprise directories for granular authorization. We will also cover AnyConnect customization and how to create an office like user experience by allowing domain logon and mapping of disk drives, whilst connected over the internet. Coverage of IPv6 when using AnyConnect is also included in this session. The expected audience are network or security engineers with previous experience of AnyConnect and ASA 5500, and with a good understanding of enterprise IT infrastructure, PKI and Active Directory. The attendees will benefit from following the session: BRKSEC-2697 "Remote Access using Clientless VPN"

PDF:  Download BRKSEC-3033-AnyConnect SSL

Written to Realised Security Policy (2015 Melbourne)

Secure Access is Cisco’s Architecture for Context-based Identity and Access Control, including: – Profiling Technologies – RADIUS – IEEE 802.1X (Dot1x) – Guest Services – Device Management – TrustSec – Identity Services Engine (ISE)

Presentation by  Yuval Shchory - Product Line Manager, CiscoLive Melbourne 2015

PDF:  Download BRKSEC-1011-Security Policy

Summary

TrustSec and Security Group Tags - Presentation

In this session we review elements of Cisco TrustSec which are part of the CCIE Security Lab Exam Topics List. Cisco TrustSec covers network access methods such as 802.1X and enables segmented policy enforcement from device/remote access through to protected resources such as the data center. Key concepts reviewed are: building the CTS domain using NDAC, classification by SGTs and propagation via SXP, and policy enforcement using SGACLs.

Presentation by: Natalie Timms - Principal, Natalie Timms Consulting 

PDF:  Download Examining TrustSec CP-1003