Cisco SAFE Implementation Exam

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the students to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.

The SAFE White Papers can be downloaded for free.

The following information provides general guidelines for the content likely to be included on this exam. However, other related topics may also appear on any specific delivery of the exam.

Security Fundamentals

• Need for network security
• Components of a complete security policy
• Primary network threats and attacks
• Common attacks and recommended mitigation techniques
• Security issues implicit in common management protocols

SAFE Blueprint Overview

• SAFE Blueprint Overview
• Design Fundamentals
• SAFE Axioms

The Cisco Security Portfolio

• Cisco Security Portfolio Overview
• Secure Connectivity-Cisco VPN 3000 Concentrator and Cisco VPN Optimized IOS
• Perimeter Security Firewalls-Cisco PIX Firewall and Cisco IOS Firewall
• Intrusion Protection-IDS
• Identity-CSACS
• Security Management-VMS
• Cisco AVVID

SAFE Small Network Design

• Small Network Design Overview
• Small Network Corporate Internet Module
• Small Network Campus Module
• Implementation-ISP Router
• Implementation-Cisco IOS Firewall
• Implementation-PIX Firewall
• Implementation-CSA

SAFE Midsize Network Design

• Midsize Network Design
• Midsize Network Corporate Internet Module Design Guidelines
• Midsize Network Campus Module
• Midsize Network Campus Module Design Guidelines
• Midsize Network WAN Module
• Implementation-ISP Router and Edge Router
• Implementation-Network IPS
• Implementation-VPN 3000 Concentrator
• Implementation-Layer 3 Switch

SAFE Remote Network Design

• Remote-User Network Overview
• Key Devices and Threat Mitigation
• Software Client Option
• Remote Site Firewall Option
• VPN 3002 Hardware Client Option
• Remote Site Router Option

SAFE Enterprise Network Design

• Enterprise Network Design Overview
• Enterprise Campus
• Enterprise Network Edge

SAFE IP Telephony Design

• IP Telephony Concepts, Caveats and Axioms
• IP Telephony Product Portfolio
• IP Telephony Design Considerations
• IP Telephony Design for Small, Medium and Large Network

SAFE Wireless LAN Design

• Wireless LAN Security Concepts, Caveats and Axioms
• WLAN Security Extensions
• Cisco WLAN Product Portfolio
• WLAN Design Approach
• Standard WLAN Design
• WLAN Design for Small, Medium, Enterprise and Remote Network
• WLAN Implementation

Cisco SAFE Implementation (CSI) is the recommended training for this exam.

Courses listed are offered by Cisco Learning Partners—the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the List of Learning Partners for a Cisco Learning Partner near you.

A variety of Cisco Press Self-Study titles are available for this exam. These titles can be purchased at the Cisco Marketplace, directly through Cisco Press, or wherever you purchase technical books.

Return to Top