• VLANs and IP Addressing
• Configuring RIPv2
• Configuring OSPF
• Configuring EIGRP
• Advanced Routing
• IP Access-Lists
• Object Groups
• Administrative Access
• ICMP Traffic
• URL Filtering
• Dynamic NAT and PAT
• Static Policy NAT and PAT
• Identity NAT and NAT Exemption
• Outside Dynamic NAT
• DNS Doctoring using Alias
• DNS Doctoring using Static
• Fragmented Traffic
• IDENT Issues
• BGP across Firewall
• Stub Mutlicast Routing
• Network Time Protocol
• System Logging
• Filtering System Logs
• SNMP Monitoring
• DHCP Server
• HTTP Traffic Inspection
• FTP Traffic Inspection
• SMTP Traffic Inspection
• TCP Inspection
• Management Traffic Inspection
• ICMP Traffic Inspection
• Threat Detection
• Un-Stealthing the Firewall
• Traffic Policing
• Low Latency Queuing
• Traffic Shaping
• Hierarchical Queuing
• Transparent Firewall
• ARP inspection
• Ethertype Access-Lists
• Transparent Firewall NAT
• Firewall Contexts
• Firewall Contexts Routing
• Firewall Contexts Classification
• Resource Management
• Active/Standby Failover
• Active/Active Failover
• Redundant Interface
• Enhanced Object Groups

IOS Firewall Solutions

• Basic Access Lists
• Reflexive Access Lists
• Dynamic Access Lists
• Basic CBAC
• CBAC Port to Application Mapping
• CBAC TCP/UDP Intercept Features
• CBAC Performance Optimization
• IOS URL Filtering
• IOS Authentication Proxy
• Flexible Packet Matching
• Zone Based Firewall
• ZFW Rate Limiting
• ZFW Application Inspection
• Classic IOS Transparent Firewall
• ZFW-Based IOS Transparent Firewall
• IOS IP Virtual Reassembly
• IOS ACL Selective IP Option Dropping

Virtual Private Network (VPN) Solutions

• LAN-to-LAN VPN between IOS and Firewall
• IPsec and NAT Interaction in Firewall
• Authentication using Digital Signatures
• Tunnel Group Names
• Certificate Mapping Rules
• Filtering Traffic Inside LAN-to-LAN Tunnels
• LAN-to-LAN Tunnels between Routers
• IOS IPsec NAT Traversal
• IOS IKE Aggressive Mode
• VPN between Overlapping Subnets
• IOS VPN with Digital Signature Authentication
• Certificate Access Lists
• Virtual Tunnel Interfaces
• GRE over IPsec
• DMVPN
• ezVPN Server in IOS
• ezVPN Server using VTI
• ezVPN Server using Group Lock
• ezVPN Server using RADIUS Authorization
• ezVPN Server Per User AAA Download with PKI
• ezVPN Server in Client Mode
• ezVPN Server NEM
• ezVPN Server VTI
• ezVPN Server Digital Signatures
• Firewall ezVPN Server DHCP Address Allocation
• Clientless SSL VPN
• Clientless SSL VPN: Port Forwarding
• Clientless SSL VPN: Smart Tunneling
• IOS SSL VPN  RADIUS Authorization
• IOS WebVPN
• IOS WebVPN Port Forwading
• GET VPN
• GET VPN COOP KS

• IPS Setup and Configuration
• Configuring Inline VLAN Pair
• Creating Custom Signatures
• Event Counting
• Inline Blocking
• IPS VLAN Groups and Virtual Sensors
• IPS Event Processing
• IPS Blocking and Rate-Limiting
• IPS Application Inspection and Control
• IPS META Engine
• IPS Anomaly Detection
• IOS IPS

Identity Management Solutions

• Remote Session Authentication using TACACS+
• Exec Authorization using TACACS+
• IOS Local Authorization
• IOS Remote Authorization
• Using RADIUS for Session Control
• Firewall Cut-Through Proxy
• Firewall Network Authorization
• LDAP Attribute Maps
• 802.1x Authentication and Authorization
• NAC Policy Configuration
• Layer 3 NAC with Firewall and VPN Client

Control/Management Plane Security Solutions

• Control Plane Protection (CPPr)
• BGP TTL Security
• BGP Prefix Limit
• Selective Packet Discard
• Terminal Lines Security
• TCP Keepalives
• SNMPv2 Server
• SNMPv2 Access Control
• SNMP Traps and Informs
• CPU and Memory Thresholds
• SNMPv3
• RMON Alarms
• Role Based Access Control
• IP Source Tracker
• ICMP Rate Limiting
• IOS Login Enhancements

Advanced Security and Attack Mitigation Solutions

• Application-Based Filtering with NBAR
• VLAN Filtering for IP Traffic
• VLAN Filters for Non-IP Traffic
• DHCP Snooping
• Dynamic ARP Inspection
• IP Source Guard
• Netflow Ingress and Egress
• Rate-limiting with CAR
• MQC Single-Rate Policies
• TCP Intercept Watch Mode
• Preventing Spoofing with uRPF
• Traffic Filtering with Policy-Based Routing
• STP BPDU Guard
• STP BPDU Filter
• STP Root Guard
• Protected Ports
• Storm Control