CCIE Security V4 Technology Labs Section 1:System Hardening and Availability

Section 1 Introduction

Last updated: May 15, 2013

Hardware Configuration(s)

System Hardening and Availability Configuration Files (/documents/configs/System Hardening And

Availability Configuration Files.zip)

Note:

A Note on Lab Content: We are currently adding more tasks to this workbook. If

you see a topic that needs coverage, please be patient. It is our intent to cover each

blueprint topic thoroughly.

The following topics in this section are blueprint topics for the CCIE Security v4.0 lab exam. These

labs are intended to prepare a CCIE Security Candidate for potential exam topics, while also

building the technical ability in specific areas. In these tasks, we focus on gaining an in-depth

knowledge of how the technology works.

Section 1 General Lab Topology

Use the Section 1 Topology Diagram for this section. Additional diagrams for each task are found in

the Task Information area.

If you use your own rack to practice these labs, it is recommended that you use the following

hardware/software versions to obtain the same results and outputs:

2811 is running 15.1(3)T3 with Advanced Security feature set

2911 is running 15.2(3)T3 with Security license

3560 is running 12.2(55)SE7 with IP Base feature set

3750X is running 15.0(2)SE2 with IP Base feature set

ASA5500 is running 8.2(5) or 8.4(5) along with ASDM 7.1(2)

ASA5500-X is running 8.6(1) along with ASDM 7.1(2)

AnyConnect is running version 3.0.11046

VPN Client is running version 5.0.07.0440

WSA is running version 7.1.3-031 along with AD Agent 1.0.0.32.1

WLC is running version 7.2.111.3

IPS is running version 7.1(7)E4

ISE is running version 1.1.3.124

ACS is running version 5.3 with patch 5.3.0.40.8

NAC Agent is running version 4.9.049