Overview
Cisco Umbrella is a cloud security platform that provides the first line of defense against threats on the Internet. Being able to understand how this works and what are the features is the key focus of this 2-day course.
Audience Profile
The primary audience for this course is as follows:
- System Engineers
- System Administrators
- Architects
- Channel Partners
- Security Professionals
Prerequisites
It is recommended that students have the following knowledge and skills prior to attending this course:
- Basic understanding of Cisco products and solutions
At Course Completion
Upon successful completion of this course, students should be able to meet these overall objectives:
- Describe Cisco Umbrella
- Understand Secure Internet Gateway and Ransomware Protection
- Comprehend DNS & IP layer enforcement & Intelligent Proxy
- Describe Command and control callback blocking
- Discuss Threat Intelligence
- Compare Umbrella Packages
- Understand Roaming Security
- Use Cisco Roaming Client
- Deploy the Cisco Umbrella Virtual Appliance
- Integrate Cisco Umbrella into Active Directory
- Configure Umbrella Reporting
- Utilize Multi-Organization Tools
Course Outline
Module 1: Cisco Umbrella- Security Solution
- Lesson 1: Discuss Security Internet Gateway
- Lesson 2: Explain Ransomware Protection
- Lesson 3: DNS & IP layer enforcement
- Lesson 4: Intelligent Proxy
- Lesson 5: Command & control callback blocking
- Lesson 6: Threat Intelligence
- Lesson 7: Umbrella Packages
Module 2: Implementing Cisco Umbrella
- Lesson 1: Overview of Cisco Umbrella
- Lesson 2: How do you Protect your network
- Lesson 3: Review how to Point your DNS to Cisco Umbrella
- Lesson 4: What are the custom policies?
- Lesson 5: Discuss Intelligent Proxy
- Lesson 6: Umbrella Policy Tester
- Lesson 7: Policy Precedence
Module 3: Roaming Client
- Lesson 1: Introduction to Umbrella Roaming Client
- Lesson 2: Prerequisites
- Lesson 3: Downloading and Installing
- Lesson 4: Adding IP Layer Enforcement
- Lesson 5: Status, States, and Functionality
- Lesson 6: Virtual Appliances
- Lesson 7: Internal Domains
Module 4: Umbrella Roaming Security
- Lesson 1: AnyConnect: Cisco Umbrella Roaming Security Client Administrator Guide
- Lesson 2: Cisco Umbrella Dashboard at a glance
- Lesson 3: Cisco Certificate Import
Module 5: Virtual Appliance Setup Guide
- Lesson 1: Discuss Deployment Guidelines
- Lesson 2: How to Deploy the VAs
- Lesson 3: Review via VMware
- Lesson 4: Review via Hyper-V
- Lesson 5: Understand Your VAs
- Lesson 6: Local DNS Forwarding
- Lesson 7: Overview of DNS
- Lesson 8: Explain Sites and Internal Networks
- Lesson 9: Sizing
Module 6: Active Directory
- Lesson 1: Overview of Active Directory
- Lesson 2: Discuss Up DNS Forwarding with your VAs
- Lesson 3: Active Directory Environment
- Lesson 4: Route DNS Traffic
- Lesson 5: Communication Flow
- Lesson 6: Multiple Active Directory and Umbrella Sites
Module 7: Reporting Overview
- Lesson 1: Reporting Basics
- Lesson 2: Understanding Security Categories
- Lesson 3: Scheduled Reports: Overview
- Lesson 4: Security Overview Report
- Lesson 5: Activity Search Report
- Lesson 6: Security Activity Report
- Lesson 7: Destinations Report
- Lesson 8: Identities Report
- Lesson 9: Cloud Services Report
- Lesson 10: Admin Audit Log Report
Module 8: Umbrella Multi-Org Overview
- Lesson 1: Cisco Umbrella Multi-Org Overview
- Lesson 2: Centralized Settings
- Lesson 3: Centralized Reports: Service Status
- Lesson 4: Centralized Reports: Cloud Services
Instant Demo
- Lab 1: Demo Cisco Umbrella
- Lab 2: Discuss Cisco Umbrella Basic set up
- Lab 3: Demonstrate how Umbrella- Protects your Network
- Lab 4: Umbrella- Provision the roaming client
- Lab 5: View of Monitoring Cisco Umbrella
- Lab 6: Review Cisco Ransomware Defense
- Lab 7: At a glance Cisco Umbrella Reporting