Implementing Automation for Cisco Security Solutions (SAUI)
-
Overview
Description, Pre requisites -
Content
Lessons, Course Structure
>>Purchase Cisco eLearning Subscription
The Implementing Automation for Cisco Security Solutions (SAUI) v1.0 course teaches you how to design advanced automated security solutions for your network.
Through a combination of lessons and hands-on labs, you will master the use of modern programming concepts, RESTful application programming interfaces (APIs), data models, protocols, firewalls, web, Domain Name System (DNS), cloud, email security, and Cisco Identity Services Engine (ISE) to strengthen cybersecurity for your web services, network, and devices. You will learn to work within the following platforms: Cisco Firepower® Management Center, Cisco Firepower Threat Defense, Cisco ISE, Cisco pxGrid, Cisco Stealthwatch® Enterprise, Cisco Stealthwatch Cloud, Cisco Umbrella®, Cisco Advanced Malware Protection (AMP), Cisco Threat grid, and Cisco Security Management Appliances. This course will teach you when to use the API for each Cisco security solution to drive network efficiency and reduce complexity.
This course helps you prepare for the Automating and Programming Cisco Security Solutions (300-735 SAUTO) certification exam.
Course Objectives
After completing this course the student should be able to:
- Describe the overall architecture of the Cisco security solutions and how APIs help enable security
- Know how to use Cisco Firepower APIs
- Explain how pxGrid APIs function and their benefits
- Demonstrate what capabilities the Cisco Stealthwatch APIs offer and construct API requests to them for configuration changes and auditing purposes
- Describe the features and benefits of using Cisco Stealthwatch Cloud APIs
- Learn how to use the Cisco Umbrella Investigate API
- Explain the functionality provided by Cisco AMP and its APIs
- Describe how to use Cisco Threat Grid APIs to analyze, search, and dispose of threats
Target Audience
- Network engineer
- Systems engineer
- Wireless engineer
- Consulting systems engineer
- Technical solutions architect
- Network administrator
- Wireless design engineer
- Network manager
- Sales engineer
- Account manager
Suggested Pre-requisites
The knowledge and skills that a student must have before attending this course are as follows:
- Basic programming language concepts
- Basic understanding of virtualization
- Ability to use Linux and CLI tools, such as Secure Shell (SSH) and Bash
- CCNP-level core networking knowledge
- CCNP-level security networking knowledge
The following Cisco courses can help you gain the knowledge you need to prepare for this course:
- Implementing and Administering Cisco Solutions (CCNA)
- Introducing Automation for Cisco Solutions (CSAU)
- Programming Use Cases for Cisco Digital Network Architecture (DNAPUC)
- Introducing Cisco Network Programmability (NPICNP)
- Implementing and Operating Cisco Security Technologies (SCOR)
Duration
3 days
Outline
- Introducing Cisco Security APIs
- Consuming Cisco Advanced Malware Protection APIs
- Using Cisco ISE
- Using Cisco pxGrid APIs
- Using Cisco Threat Grid APIs
- Investigating Cisco Umbrella Security Data Programmatically
- Exploring Cisco Umbrella Reporting and Enforcement APIs
- Automating Security with Cisco Firepower APIs
- Operationalizing Cisco Stealthwatch and the API Capabilities
- Using Cisco Stealthwatch Cloud APIs
- Describing Cisco Security Management Appliance APIs
Lab outline
- Query Cisco AMP Endpoint APIs for Verifying Compliance
- Use the REST API and Cisco pxGrid with Cisco Identity Services Engine
- Construct a Python Script Using the Cisco Threat Grid API
- Generate Reports Using the Cisco Umbrella Reporting API
- Explore the Cisco Firepower Management Center API
- Use Ansible to Automate Cisco Firepower Threat Defense Configuration
- Automate Firewall Policies Using the Cisco Firepower Device Manager API
- Automate Alarm Policies and Create Reports Using the Cisco Stealthwatch APIs
- Construct a Report Using Cisco Stealthwatch Cloud APIs