Implementing Network Security (IANS) - Classroom Training

• HPE Aruba Networking Security Strategy and ClearPass Fundamentals
• Deploy Trusted Certificates
• Implement Certificate-Based 802.1X
• Implement Advanced Policies on the Role-Based AOS Firewall
• Evaluate Endpoint Posture
• Implement a Trusted Network Infrastructure
• Implement 802.1X and Role-Based Access Control on AOS-CX
• Implement Dynamic Segmentation on AOS-CX Switches
• Monitor with Network Analytics Engine (NAE)
• Implement WIDS/WIPS
• Use CPPM and Third-Party Integration to Mitigate Threats
• Implement Device Profiling with CPPM
• Device Profiling with HPE Aruba Networking
• Deploy ClearPass Device Insight
• Integrate Device Insight with CPPM
• Use Packet Captures To Investigate Security Issues
• Secure Remote and Branch Access
• Configure HPE Aruba Networking Gateway IDS/IPS
• Use HPE Aruba Networking Central Alerts

After you successfully complete this course, expect to be able to:

• Define security terminologies
• PKI
• Zero Trust Security
• WIPS & WIDS
• Harden devices
• Securing network infrastructure
• Securing L2 & L3 protocols
• Secure a WLAN
• Deploy AAA with CPPM
• Secure a wired LAN
• Deploy AAA with CPPM
• Deploy 802.1x
• Deploy certificate based authentication for users & devices
• Secure the WAN
• Understand Arubas SD-Branch for automating VPN deployment
• Design and deploy VPN with Arubas VIA client
• Classify endpoints
• Deploy endpoint classification to devices
• Integrate ClearPass and CPDI

• Threat detection
• Investigate Central alerts
• Interpret packet captures Evaluate endpoint postures
• Troubleshooting
• Deploy and analyze results from NAE scripts
• Endpoint classification
• Analyze endpoint classification data to identify risks
• Analyze endpoint classification data on CPDI

• Forensics
• Explain CPDI capabilities of showing network conversations on supported Aruba devices

Typical candidates for this course are network engineers responsible for implementing security controls on enterprise networks. Learners can describe the network security stack (firewall, proxy, remote access, IDS/IPS, access control, NTA, UEBA).