Empowered Branch Online Training

Securing Cisco Unified Communications—Empowered Branch - Computer Based Training

Securing Cisco Unified Communications—Empowered Branch (SECU-EB) teaches the top steps for improving the security of Cisco Unified Communications (UC) systems enabled by Cisco Unified Communications Manager Express (UCME) in a Cisco Empowered Branch setting.

Based on Cisco and industry best practices and the newest in Cisco UCME security features, SECU-EB contains tutorials, videos, and configuration examples that teach you how to configure Cisco UC systems to ensure maximum security. Practice what you learn in a safe training environment through e-lab simulations of the Cisco IOS software command-line interface. Finally, test your knowledge using the built-in assessment quizzes.

Are you certain that you have completed the top security steps on every Cisco UC system under your control? Complete the SECU-EB course and learn how!

Course Description

The SECU-EB course is designed primarily for system administrators or students who want to further develop their Cisco UC and VoIP security expertise. The course has been developed to help raise awareness of the need to ensure that Cisco UC systems used in critical infrastructure networks are configured securely based on VoIP security principles, industry best practices, and Cisco IOS software features.

Course Objectives

Upon completion of this course you will be able to perform the following tasks:

• Identify risk management pertaining to VoIP security including threats, vulnerabilities, protocols, devices, and security policy.
• Identify the top critical security strategies that increase the security posture of VoIP networks using Cisco UC solutions.
• Identify specific actions system administrators should take to implement the top critical security strategies.
• Configure security on Cisco UC systems, Cisco IOS routers, and Catalyst switches using the Cisco IOS command-line interface (CLI) and various GUIs.
• Identify locations of additional VoIP security information including best practice guidelines, VoIP software security features, and Cisco security training for future reference.

Recommended Top Steps

The following list summarizes the top steps to securing Cisco UC based on UCME as covered in the course:

1. Physical security - Lock down your VoIP servers
2. Harden your VoIP devices
3. Implementing VLAN Security to Isolate Voice Traffic
4. Secure the Infrastructure
5. Secure Management Access and Management Applications
6. Put Your Equipment Behind Firewalls
7. Add Endpoint Security Layers
8. Secure Voice Gateways
9. Use Multiple Layers of Encryption
10. Build Redundancy Into VoIP Networks
11. Monitor and Track Traffic Patterns on your VoIP Network
12. Perform Security Audits on a Regular Basis

Course Outline

Module 1: SECU-EB 1.0 Introduction

Module 2: Implementing Infrastructure Security

Module 3: Securing Endpoints

Module 4: Next Steps

Audience

The SECU-EB course can benefit government, academia, and critical infrastructure sectors, yet any enterprise deploying Cisco UC can take advantage of the syllabus. The target audience for this course is as follows:

• Entry to mid-level system administrators working in government, academia, and critical infrastructure sectors who administer networks that include Cisco routers and switches.
• IT managers and Chief Information Officers responsible for running government and critical infrastructure networks.
• Professors in academia who need to teach critical infrastructure security.

For More Information

This training was developed by the Critical Infrastructure Assurance Group (CIAG) at Cisco Systems Inc. to help raise awareness of the need to ensure that Cisco equipment used in critical infrastructure networks are configured securely based on industry best practices and Cisco IOS software features.

If you would like more information about the SECU-EB course, such as obtaining bulk quantities of the CD-ROM, please contact the Training Manager at ciag-training@cisco.com.