CCIE Enterprise Infrastructure Certification and Training
CCIE Enterprise Infrastructure Certification and Training
CCIE Enterprise Infrastructure Certification is the highest and most prestigious certification from Cisco. It ranks No. 1 in the 10 Most Difficult IT Certifications list, and is highly-valued worldwide. A CCIE certified individual is an elite title in the field of network engineering, proving their mastery in their domain of Cisco networking. The CCIE Enterprise Certified experts have the required knowledge and skills for the field, including dual-stack(IPv4 and IPv6) architecture, virtualization, infrastructure, network assurance, security, and automation.
The quality of the program, the testing methods, and the relevance of this certification enhances its value. At IP Rulers, the classes are facilitated by CCIE Enterprise certified and experienced instructors, and students will be exposed to the latest equipments with grouped as well as one-to-one classes and online tutorials that could be scheduled for weekdays or weekends in accordance to the students’ choice, IP Rulers is fast becoming a leading name in Dubai in providing highly valued Cisco Certificates with a significant pass rate on the first attempt.
CCIE Enterprise Infrastructure certification is the avatar of core knowledge and practical skills in the management of the most complex scenarios of the entire IT Enterprise Infrastructure of a network lifecycle (Designing, Deploying, Operating & Optimizing). IP Rulers provide CCIE Enterprise Infrastructure training just as per the course described by the Cisco Security Certification blueprint.
Target Audience:
- Network engineers attempting the core exam – Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR 350- 401).
- Network engineers who have five to seven years of professional experience in designing, deploying, operating and optimizing enterprise networking technologies.
- Network designers who design and support complex network technologies and topologies.
- Network engineers who use an expert-level problem-solving process (including options analysis) to support complex network technologies and topologies.
- IT students and professionals seeking strong expertise in the subject and an internationally recognized qualification in the same for prospective jobs.
- Candidates with CCNP R&S Certification, moving on to expert levels.
- Aspirants in the following job profiles:
- Network Designer
- Network Administrator
- Consulting Systems Engineer
- Technical Solutions Architect
- Network Manager
- Cisco Integrators and partners
Prerequisites:
- The CCIE Enterprise Infrastructure does not require any particular qualification for attendance of the course. However, comprehensive knowledge of the subjects is necessary for attending the examinations.
- Five to seven years’ experience in networking field, especially in designing, deploying, operating and optimizing security technologies will be an advantage to attempt the CCIE examination.
Gigi Vikraman
MD and Founder
4XCCIE (R&S, Security, Collaboration, DC)
Gigi Vikraman a quadruple CCIE has over 15 years of experience working in the Cisco networking field consulting and training. In addition, he has designed, implemented and supported numerous enterprise networks. He has been a dedicated CCIE instructor for over 10 years. He has extended his service in producing 400+ CCIE’s all over the world. Apart from all these, he has already proven his well knowledge in giving training on Fortinet, Palo Alto and Check Point.
Aravind C P
Senior Technical Instructor
CCIE Enterprise Infrastructure
Arvaind, a CCIE Certified professional has been working for different IT companies over the last 8 years. Currently, he works for IPRULERS delivering training and consulting their students in obtaining CCNP & CCIE Certifications.
Vivek Gunasekaran
Senior Technical Instructor
CCIE Enterprise Infrastructure
Vivek has over 5 years of experience in consulting and giving training to IT professionals to obtain their certifications in Cisco & CompTIA. Designed, developed and delivered online and classroom training for the corporate professionals.
Duration
120 Hours
Modules
5
Skill Level
Expert
Language
English
Certificate
Yes
Mode
Online/Offline
Share :
Course Curriculam
1.1 Deployment modes on Cisco ASA and Cisco FTD
- Routed
- Transparent
- Single
- Multi-Context
- Multi-Instance
1.2 Firewall features on Cisco ASA and Cisco FTD
- NAT
- Application inspection
- Traffic zones
- Policy-based routing
- Traffic redirection to service modules
- Identity firewall
1.3 Security features on Cisco IOS/IOS-XE
- Application awareness
- Zone-Based Firewall (ZBFW)
- NAT
1.4 Cisco Firepower Management Center (FMC) features
- Alerting
- Logging
- Reporting
1.5 NGIPS deployment modes
- In-Line
- Passive
- TAP
1.6 Next Generation Firewall (NGFW) features
- SSL inspection
- user identity
- geolocation
- AVC
1.7 Detect, and mitigate common types of attacks
- DoS/DDoS
- Evasion Techniques
- Spoofing
- Man-In-The-Middle
- Botnet
1.8 Clustering/HA features on Cisco ASA and Cisco FTD
1.9 Policies and rules for traffic control on Cisco ASA and Cisco FTD
1.10 Routing protocols security on Cisco IOS, Cisco ASA and Cisco FTD
1.11 Network connectivity through Cisco ASA and Cisco FTD
1.12 Correlation and remediation rules on Cisco FMC
2.1 AnyConnect client-based remote access VPN technologies on Cisco ASA, Cisco FTD, and Cisco Routers.
2.2 Cisco IOS CA for VPN authentication
2.3 FlexVPN, DMVPN, and IPsec L2L Tunnels
2.4 Uplink and downlink MACsec (802.1AE)
2.5 VPN high availability using
- Cisco ASA VPN clustering
- Dual-Hub DMVPN deployments
2.6 Infrastructure segmentation methods
- VLAN
- PVLAN
- GRE
- VRF-Lite
2.7 Micro-segmentation with Cisco TrustSec using SGT and SXP
3.1 Device hardening techniques and control plane protection methods
- CoPP
- IP Source routing
- iACLs
3.2 Management plane protection techniques
- CPU
- Memory thresholding
- Securing device access
3.3 Data plane protection techniques
- uRPF
- QoS
- RTBH
3.4 Layer 2 security techniques
- DAI
- IPDT
- STP security
- Port security
- DHCP snooping
- RA Guard
- VACL
3.5 Wireless security technologies
- WPA
- WPA2
- WPA3
- TKIP
- AES
3.6 Monitoring protocols
- NetFlow/IPFIX/NSEL
- SNMP
- SYSLOG
- RMON
- eStreamer
3.7 Security features to comply with organizational security policies, procedures, and standards BCP 38
- ISO 27001
- RFC 2827
- PCI-DSS
3.8 Cisco SAFE model to validate network security design and to identify threats to different Places in the Network (PINs)
3.9 Interaction with network devices through APIs using basic Python scripts
- REST API requests and responses
- HTTP action verbs, error codes, cookies, headers
- JSON or XML payload
- Authentication
- Data encoding formats
- JSON
- XML
- YAML
3.10 Cisco DNAC Northbound APIs use cases
- Authentication/Authorization
- Network Discovery
- Network Device
- Network Host
4.1 ISE scalability using multiple nodes and personas.
4.2 Cisco switches and Cisco Wireless LAN Controllers for network access AAA with ISE.
4.3 Cisco devices for administrative access with ISE
4.4 AAA for network access with 802.1X and MAB using ISE.
4.5 Guest lifecycle management using ISE and Cisco Wireless LAN controllers
4.6 BYOD on-boarding and network access flows
4.7 ISE integration with external identity sources
- LDAP
- AD
- External RADIUS
4.8 Provisioning of AnyConnect with ISE and ASA
4.9 Posture assessment with ISE
4.10 Endpoint profiling using ISE and Cisco network infrastructure including device sensor
4.11 Integration of MDM with ISE
4.12 Certificate-based authentication using ISE
4.13 Authentication methods
- EAP Chaining
- Machine Access Restriction (MAR)
4.14 Identity mapping on ASA, ISE, WSA, and FTD
4.15 pxGrid integration between security devices WSA, ISE, and Cisco FMC
4.16 Integration of ISE with multi-factor authentication
4.17 Access control and single sign-on using Cisco DUO security technology
5.1 AMP for networks, AMP for endpoints, and AMP for content security (ESA, and WSA)
5.2 Detect, analyze, and mitigate malware incidents
5.3 Perform packet capture and analysis using Wireshark, tcpdump, SPAN, ERSPAN, and RSPAN
5.4 DNS layer security, intelligent proxy, and user identification using Cisco Umbrella
5.5 Web filtering, user identification, and Application Visibility and Control (AVC) on Cisco FTD and WSA.
5.6 WCCP redirection on Cisco devices
5.7 Email security features
- Mail policies
- DLP
- Quarantine
- Authentication
- Encryption
5.8 HTTPS decryption and inspection on Cisco FTD, WSA and Umbrella
5.9 SMA for centralized content security management
5.10 Cisco advanced threat solutions and their integration: Stealthwatch, FMC, AMP, Cognitive Threat Analytics (CTA), Threat Grid, Encrypted Traffic Analytics (ETA), WSA, SMA, CTR, and Umbrella
Download Course Brochure
For More details please download our brochure here.
OUR STUDENT SUCCESS
STORIES
Enquire Now
We are here to provide you with comprehensive assistance regarding all the details related to the courses and any other inquiries you may have. Please feel free to reach out to us for guidance and support.