Implement Secure Firewall modes

Routed mode

Transparent mode

Implement NGIPS modes

Passive

Inline

Implement high availability options

Port channels

Failover

Equal-Cost Multipath (ECMP) routing

Static route tracking

Clustering

Describe virtual appliance on-premises and cloud deployment

Configure system settings in Secure Firewall Management Center

Configure policies in Secure Firewall Management Center

Access control

Intrusion, Malware & File

DNS, Identity

Decryption, Prefilter

Configure these features using Secure Firewall Management Center

Network discovery

Application detectors

Correlation

Encrypted visibility engine

Configure objects using Secure Firewall Management Center

Object management

Intrusion rules

Configure devices using Secure Firewall Management Center

Device management

NAT, VPN, QoS

Platform settings

Certificates, Routing

Describe the use of Snort within Secure Firewall Threat Defense

Troubleshoot with Secure Firewall Management Center GUI and device CLI

Configure dashboards and reporting in Secure Firewall Management Center

Troubleshoot using:

packet capture procedures

Packet Tracer

Analyze risk and standard reports

Describe device management tools

Cisco Defense Orchestrator

Cloud-delivered Firewall Management Center

Secure Firewall Device Manager

Secure Firewall Management Center

Configure Cisco Secure Firewall Malware Defense (formerly AMP for Networks) in

Secure Firewall Management Center

Configure Cisco Secure Endpoint (formerly AMP for Endpoints) integration with Secure

Firewall Management Center

Implement Threat Intelligence Director for third-party security intelligence feeds

Describe using Cisco SecureX for security investigations

Describe Secure Firewall Management Center integration using pxGrid

Describe Rapid Threat Containment (RTC) functionality within Secure Firewall

Management Center

Describe Cisco Security Analytics and Logging