CCIE安全实验考试大纲变动情况[1]

【网络综合 - Cisco认证大纲】
据考试大了解，新的第三版CCIE安全实验的大纲发布了，将于2009年4月开始实行，硬件上没有太多的改变，具体硬件，软件版本和考纲如下，红色部分是新内容。
　　Hardware
　　Cisco 3800 Series Integrated Services Routers (ISR)
　　Cisco 1800 Series Integrated Services Routers (ISR)
　　Cisco Catalyst 3560 Series Switches
　　Cisco ASA 5500 Series Adaptive Security Appliances
　　Cisco IPS Series 4200 Intrusion Prevention System sensors
　　Cisco Secure Access Control Server for Windows
　　Software
　　Cisco ISR Series running IOS Software Version 12.4T Advanced Enterprise Services feature set is used on all routers
　　Cisco Catalyst 3560 Series Switches running Cisco IOS Software Release 12.2(44)SE or above
　　Cisco ASA 5500 Series Adaptive Security Appliances OS Software Version 8.x
　　Cisco IPS Software Release 6.1.x
　　Cisco VPN Client Software for Windows, Release 5.x
　　Cisco Secure ACS for Windows Version 4.1
　　V3 Blueprint
　　Ⅰ Implement secure networks using Cisco ASA Firewalls
　　Perform basic firewall Initialization
　　Configure device management
　　Configure address translation (nat, global, static)
　　Configure ACLs
　　Configure IP routing
　　Configure object groups
　　Configure VLANs
　　Configure filtering
　　Configure failover
　　Configure Layer 2 Transparent Firewall
　　Configure security contexts (virtual firewall)
　　Configure Modular Policy Framework
　　Configure Application-Aware Inspection
　　Configure high availability solutions
　　Configure QoS policies
　　Ⅱ Implement secure networks using Cisco IOS Firewalls
　　Configure CBAC
　　Configure Zone-Based Firewall
　　Configure Audit
　　Configure Auth Proxy
　　Configure PAM
　　Configure access control
　　Configure performance tuning
　　Configure advanced IOS Firewall features
　　Ⅲ Implement secure networks using Cisco VPN solutions
　　Configure IPsec LAN-to-LAN (IOS/ASA)
　　Configure SSL VPN (IOS/ASA)
　　Configure Dynamic Multipoint VPN (DMVPN)
　　Configure Group Encrypted Transport (GET) VPN
Cisco认证