Cisco IronPort Web Security Channel Partner Training (WSCPT)

Channel Partner Field Engineers seeking to be trained up and certified on the “Web Security for Field Engineers” exam (#650-568).

Attendees should possess the following background knowledge and skills:

• Basic knowledge of IP networking
• High level understanding of web proxy servers
• High level understanding of web security concepts and technologies

In addition, some exposure to the Cisco ASA firewall is useful, but not essential.

This comprehensive training course covers how to install, configure, operate and maintain the Cisco IronPort WSA Web Security Appliances or WSA. The course also covers how to configure and deploy the Cisco ScanSafe Web Security solution. The course consists of presentations and hands-on labs. The course is designed to be delivered over two full days or four half days. After successful completion of the course, the participant will be able tperform a customer evaluation. The course content includes:

• Deployment scenarios
• The Web Security Appliance (WSA)
  • Policy framework
  • Proxy authentication
  • CiscIronPort Web Usage Controls
  • Web Reputation Filters
  • The DVS engine
  • Adaptive Scanning
  • HTTPS inspection
• ScanSafe
  • Authentication
  • Policy Framework
  • Reporting

Module 1 – Course & Product Overview.

This module covers the course and products from a high level, and includes such formalities as classroom introductions. For the WSA, It also covers product installation and initial configuration using the System Setup Wizard.

Module 2 – WSA Policy Framework.

This module covers the WSA policy framework. Different types of policies are described. Information about HTTP headers and the proxy access log are also included. During the lab you will configure and test simple policies

Module 3 – WSA: Utilizing Authentication.

This module covers both the theory and practice of web proxy authentication. During the lab, you will enable, test and troubleshoot proxy authentication.

Module 4 – WSA: Enforcing Acceptable Use.

This module covers technologies used by the WSA to enforce acceptable use. These technologies include: URL filters, Application Visibility and Control, Media Bandwidth limits, and SaaS access control. In the lab you will configure the WSA to enforce acceptable use according to several practical scenarios.

Module 5 – WSA: Defending Against Malware.

This module covers web reputation filters, anti-malware scanning, and HTTP inspection. Together these form the framework for WSA Malware protection. During the lab, you will work with malware provided in the classroom lab environment.

Module 6 – Deploying the WSA.

This module covers theory and practice related to WSA deployment. This includes tuning and manipulation the proxy cache. Interface configuration and Service routing will also be covered. Proxy modes are also discussed. In the lab, you will deploy the WSA in explicit proxy mode using Proxy Auto-Configuration (PAC) files. You will also configure and troubleshoot Web Cache Communication Protocol (WCCP) to deploy the WSA as a transparent proxy.

Module 7 – ScanSafe Policy Framework.

This module covers the ScanSafe policy framework. During the lab, you will use ScanCenter to create filters, schedules and rules.

Module 8 – Deploying ScanSafe.

This module covers several ScanSafe deployment options. The lab consists of explicit deployment using a connector, and transparent deployment using integration with a Cisco ASA firewall.

Module 9 – Reporting.

This module covers reporting for both the WSA and ScanSafe. You will learn how to generate both on-box reports and off-box reports for the WSA. WSA Web Tracking is also covered. You will also l work with ScanSafe Web Intelligence Reporting (WIRe).

Module 10 – Troubleshooting.

This module focuses on troubleshooting tools and methods. The lab consists of several scenarios. For each scenario,