
Explain how to configure dynamic pat to translate an inside subnet to a single public ip with per-session ports, and compare manual, dynamic net, and extra ip options, verification steps.
Configure and verify PAT pool and PAT options in Cisco FTD to translate internal subnets to multiple external IPs, using round-robin and extended PAT table.
Explain multi instances in FTD as hardware-based partitioning, contrasting it with security context, and outline its requirements, including FTD 6.3+, specific devices, and non-virtual deployment.
Explain quality of service principles, including bandwidth, delay, jitter, and packet loss, and apply classification, marking, policing, queuing, shaping, and congestion management to prioritize sensitive traffic.
Master troubleshooting for Cisco FTD using top-down, bottom-up, and follow-the-traffic-path approaches; define problems, gather facts, create action plans, implement, observe, and document results.
The Cisco Firepower Threat Defense NGFW Implementation Training course shows you how to use and configure Cisco Firepower Threat Defense technology, beginning with initial device setup and configuration and including routing, Network Address Translation (NAT) and Policies.
This course teaches you how to implement advanced Next-Generation Firewall (NGFW) and Next-Generation Intrusion Prevention System (NGIPS) features. Cisco Firepower Threat Defense and Firepower including policy configurations, integrations, deployments, management and troubleshooting. These courses, Securing Networks with Cisco Firepower, and Securing Network with Cisco Firepower Next-Generation Intrusion Prevention System help candidates prepare for this exam.
1.1 Implement NGFW modes
1.1.a Routed mode
1.1.b Transparent mode
1.2 Implement NGIPS modes
1.2.a Passive
1.2.b Inline
1.3 Implement high availability options
1.3.a Link redundancy
1.3.b Active/standby failover
1.3.c Multi-instance
1.4 Describe IRB configurations
2.0 Configuration
2.1 Configure system settings in Cisco Firepower Management Center
2.2 Configure these policies in Cisco Firepower Management Center
2.2.a Access control
2.2.b Intrusion
2.2.c Malware and file
2.2.d DNS
2.2.e Identity
2.2.f SSL
2.2.g Prefilter
2.3 Configure these features using Cisco Firepower Management Center
2.3.a Network discovery
2.4 Configure objects using Firepower Management Center
2.4.a Object Management
2.4.b Intrusion Rules
2.5 Configure devices using Firepower Management Center
2.5.a Device Management
2.5.b NAT
2.5.c VPN
2.5.d QoS
2.5.e Platform Settings
3.0 Management and Troubleshooting
3.1 Troubleshoot with FMC CLI and GUI
3.2 Configure dashboards and reporting in FMC
3.3 Troubleshoot using packet capture procedures