Practical Cisco Firepower Training

Set up a complete firepower lab by provisioning ESXi from a USB, creating the inside port group, and importing the FMC and FTD images.

Configure the FMC and FTDi on the management network via the console, set IPs and shared passwords, and complete the bootstrap with rooted mode and license steps.

Register and license a ftdi device with FMC, enable a 90-day evaluation, apply base, threat, malware, and URL filtering licenses, and create an acme access control policy blocking all traffic.

Configure FMC basic settings, including access lists and user roles, and enable external authentication with ldap or active directory. Set up backups, monitoring, and scheduling to maintain security and reliability.

Configure a network discovery policy on the FMC to identify devices, users, and applications, collect data across RFC 1918 space, and enable LDAP integration.

Learn how to configure the intrusion prevention function of firepower with a balanced security and connectivity base policy, enable and test rules, and apply firepower recommendations for efficient detections.

Learn to configure identity policy to identify end users by name, apply active or passive authentication, and connect with AD using realms and identity sources.

Configure URL filtering with manual blocks and optional dynamic lists, using category and reputation scores to craft top-down policies. Implement whitelist first, then blocks, including interactive blocks and example rules.

Explore network design and routing concepts with layer two and layer three architectures, vlans, vrfs, and routing protocols like rip, ospf, and bgp, plus nat, ip sla, and firewall integration.

Learn to configure site-to-site VPN on Firepower with FMC management, linking HQ and remote sites via FTDs, IPsec, access lists, tunnel groups, and crypto maps.

Learn practical NAT concepts by building static and PAT rules, exploring dynamic NAT behavior, a two-router topology, loopbacks, and known NAT exceptions for VPN traffic in Firepower.