+ 31 10 2042220 [email protected]

Implementing Network Security (0001210365)

Course no: 0001210365
Exam no: HPE7-A02
Duration: 5 days
Type: Hybride
Price: $ 4000 excl. VAT

Implementing Network Security (0001210365)

Validate your skills to protect enterprise networks from complex security threats.

This course prepares you for this certification:

ACP – Network Security

Description

The Implementing Network Security (IANS) course covers intermediate security concepts and prepares you for the Aruba Certified Networking Security Professional (ACNSP) certification exam. You will learn how to use the Aruba portfolio to implement Zero Trust Security (ZTS) and protect networks from threats.

The course teaches you how to configure Aruba network infrastructure and ClearPass solutions to authenticate and control wired and wireless users, as well as remote users on a client-to-site VPN. You will learn how to collect contextual information using ClearPass Policy Manager (CPPM) and implement advanced role mapping and enforcement policies. The course also covers using ClearPass Device Insight to enhance network visibility. Additionally, you will learn how to configure features such as the AOS-CX Network Analytics Engine (NAE), Aruba Wireless IDS/IPS (WIDS/WIPS), and Aruba Gateway IDS/IPS, as well as how to investigate security alerts.

Prerequisites

HPE Aruba Networking recommends completing the Network Security Fundamentals course before attending this professional-level course, or having equivalent experience and knowledge of network security fundamentals.

Target audience

This course is designed for network engineers responsible for implementing security controls on enterprise networks. You should be able to describe the network security stack, including firewall, proxy, remote access, IDS/IPS, access control, NTA, and UEBA.

Topics

  • Aruba Security Strategy & ClearPass Fundamentals
    • Understand and apply Aruba Zero Trust Security
    • Apply Aruba solutions to different security vectors
  • Deploy Trusted Certificates to Aruba Solutions
    • Understand PKI dependencies
    • Configure appropriate certificates and trusted root CAs on CPPM
  • Implement Certificate-Based 802.1X
    • Deploy AAA for WLANs with ClearPass Policy Manager (CPPM)
    • Configure certificate-based authentication for users and devices
  • Implement Advanced Policies on the Role-Based AOS-CX Firewall
    • Deploy AAA for WLANs with ClearPass Policy Manager (CPPM)
    • Define and apply advanced firewall policies
  • Evaluate Endpoint Posture
    • Evaluate different endpoint postures
  • Implement a Trusted Network Infrastructure
    • Configure secure authentication and authorization for network infrastructure managers, including advanced TACACS+ authorization and multi-factor authentication
    • Secure L2 and L3 protocols, as well as other protocols such as SFTP
  • Implement 802.1X and Role-Based Access Control on AOS-CX
    • Deploy AAA for wired devices using ClearPass Policy Manager (CPPM), including local and downloadable roles
    • Understand Dynamic Segmentation, including its benefits and use cases
    • Deploy Dynamic Segmentation using VLAN steering
    • Configure 802.1X authentication for APs
  • Implement Dynamic Segmentation on AOS-CX Switches
    • Understand Dynamic Segmentation, including its benefits and use cases
    • Deploy Dynamic Segmentation, including User-based Tunneling (UBT) and Virtual Network-based Tunneling (VNBT)
  • Monitor with Network Analytics Engine (NAE)
    • Deploy and use Network Analytics Engine (NAE) agents for monitoring
  • Implement WIDS/WIPS
    • Understand Aruba WIPS and WIDS technology
    • Configure AP rogue detection and mitigation
  • Use CPPM and Third-Party Integration to Mitigate Threats
    • Describe log types and levels and use the CPPM Ingress Event Engine to integrate with third-party logging solutions
    • Configure integration between Aruba infrastructure and CPPM for automated threat response
  • Implement Device Profiling with CPPM
    • Understand benefits and methods of endpoint classification on CPPM, including active and passive methods
    • Deploy and apply endpoint classification to devices
    • Analyze endpoint classification data on CPPM to identify risks
  • Introduction to ClearPass Device Insight
    • Understand ClearPass Device Insight (CPDI)
    • Analyze endpoint classification data on CPDI
  • Deploy ClearPass Device Insight
    • Deploy and configure ClearPass Device Insight (CPDI)
    • Analyze endpoint classification data on CPDI
  • Integrate CPDI with CPPM
    • Integrate ClearPass Policy Manager (CPPM) with ClearPass Device Insight (CPDI)
    • Mitigate threats by using CPDI to identify traffic flows and apply tags, and CPPM to take actions based on tags
  • Use Packet Captures to Investigate Security Issues
    • Perform packet captures on Aruba infrastructure locally and using Central
    • Interpret packet captures
  • Establish Secure Remote Access
    • Understand VPN concepts
    • Describe the Aruba 9×00 Series Gateways
    • Design and deploy remote VPNs using Aruba VIA
  • Configure Aruba Gateway IDS/IPS
    • Describe the Aruba 9×00 Series Gateways
    • Define and apply UTM policies
  • Use Central Alerts to Investigate Security Issues
    • Investigate Central alerts
    • Recommend actions based on analysis of Central alerts

Follow-up course

Advanced Network Security (0001210374)

The price for this course excludes exam costs. If an exam voucher is purchased after the training, an additional invoice will be sent.

Read more
Register now!

This is  guaranteed with every course:

Always 100% money back guarantee

Not satisfied? You will get your money back without questions, without explanation. We want you to be always satisfied. Read more about money back guarantee.

Always the best course materials

You will always receive both the e-book and the paper version of the course materials. Read more about the course materials.

Always a hybrid training

You can always follow the training via our virtual environment or in our training center in Schiedam. Read more about the hybrid training.

Always certification guarantee via LAI CertProtect

If an employee leaves your organization within 6 months of a training, you can register another employee for the same training free of charge. This way you protect your investment! Read more about LAI CertProtect.

Always the best teachers

LAI has experienced and certified teachers who understand the art of explaining difficult topics in a fun and understandable way. Our teachers are still active in the professional field as consultants on a daily basis.

Always comprehensive advice

Courses and certifications can be complicated. Let our certification experts create a training program for your employees free of charge.

What our students tell us:

{

Excellent trainer and training center, everyone's very nice and kind and perfect professionals!

5
Tihomir Shirov
CNSys PLC
{

Wonderful treatment, kind hosts and the perfect place to gain knowledge.

5
Boyko Kolev
CNSys PLC
{

Very good instructor, which made the training very clear and helpful for me experiencing Aruba Networks

5
Bram van Dongen
Network Engineer
Axians
{

The training was excellent, offering a lot of hands-on labs, though time was a bit tight—but that's expected in an expert-level course. The location was also fantastic, with a great environment, high-quality equipment, and friendly people.

5
Arne van der Meulen
Senior Network Engineer
Axians
{

Have taken multiple trainings. LAI gives a trusted and personal feeling!

5
Brain Reynders
Senior Network Consultant
Prowise
{

Very positive, I approached it with an open mindset and was able to gain a lot of new knowledge that I didn't yet possess about macOS and other Apple Services. Very friendly and knowledgeable trainer, always with a clear answer to questions. Overall very satisfied with this training!

5
Anthony Schepers
Prowise
{

The LAI crew is very helpful, and Peter is an excellent trainer.
Peter is enthusiastic about the topic, not only while teaching but also when he gets questions in labs. It's truly rare to see such a combination.
Makes it fun to learn.

Will definitely come back if I get the chance.

5
Even Myrvold
Network Consultant
Netnordic
{

Peter is a very skilled patient trainer with a lot of knowledge, also outside the course and is willing to go deeper into this and find out at the request of the participants.

5
Lien Monden
Network Engineer
VanRoey.be
{

Good training with excellent instructor. The acquired knowledge can immediately be used in your daily job.

5
Aad Schulte
Network Engineer
Axians
{

Top trainer, nice atmosphere, nice that drinks are always available. In terms of content, a lot of relevant matters are handled more in depth.

5
Koen Vermeire
Network Consultant
Orange Cyberdefence
{

Valuable, direct relevance to daily work, a lot of added value (also / especially by trainer)

5
Johan Lam
Technical Consultant
Axians
{

Great. Glad there are real books.

5
Rob Boel
Account Support Manager
HPE
{

Nice training, Hans told it interestingly. Glad we had real books.

5
Erik Bloemink
Network Engineer
Axians

LAI in numbers

30.000+

students

9.8

customer satisfaction

100%

money back guaranteed

1987

more than 35 years of experience

Questions about this course

If you have any questions about this training, please contact us via [email protected], +31 10 2042220 or via the “get in touch” form below. After we have processed your registration, you will receive a registration confirmation and an invoice that can be paid by bank transfer or credit card.

  • After we have processed your registration, you will receive a registration confirmation and an invoice that can be paid by bank transfer or credit card.
    The course will be delivered in English.
    When all students and the instructor speak Dutch, the course will be delivered in Dutch.

  • Participant(s)

  • Contact

  • Invoice to