This session covers the design principles associated with the deployment of Group Encrypted Transport (GET) VPNs. A brief overview covers the protocols (GDOI and COOP) and state machines associated with group members and key servers. Best practices are emphasized for redundancy, scalability, manageability, and network performance. Discussion also covers various deployment scenarios. Knowledge of GET VPN architecture is highly recommended as a prerequisite.

BRKCRT-1963 - CCVP:Mobility Features in Cisco Unified Communications Manager version 6 and 7
This session discusses Cisco Unified Device Mobility and Cisco Unified Mobility and their implementation in Cisco Unified Communications Manager versions 6 and 7. It describes how Cisco Unified Device Mobility and Cisco Unified Mobility work and how they are implemented. The session discusses how these features interact with different calling privileges implementation models such as the traditional calling search space approach, the line/device calling search space approach, and the corresponding changes in Cisco Unified Communications Manager version 7, for example when using the Local Route Group feature.

Technical Overview of the CCSP "Securing Networks with ASA Advanced (SNAA)" certification training and technical content. This session would discuss the need for this particular training, the technical aspects of the content, and the value it adds to the business. This session would discuss the relationship between the SNAA Cisco Certification course and the CCSP certification.

Technical Overview of the CCSP "Securing Networks with ASA Advanced (SNAA)" certification training and technical content. This session would discuss the need for this particular training, the technical aspects of the content, and the value it adds to the business. This session would discuss the relationship between the SNAA Cisco Certification course and the CCSP certification.

This session presents a methodical technique for troubleshooting Dynamic Multipoint VPN (DMVPN) networks. The session starts with a short overview of DMVPN functionality and then concentrates on a four-layer troubleshooting methodology. These four layers are IP infrastructure layer (peer connectivity), IPsec encryption layer (IPsec/ISAKMP), GRE/NHRP layer (NHRP), and the VPN layer (IP routing protocols). Explicit troubleshooting examples with solutions are shown that are based on the most common DMVPN design and implementation issues as seen by Cisco Technical Assistance Center (TAC) engineers. This session is for designers, managers, and troubleshooters of extended corporate DMVPNs and for service providers deploying these services.

This session covers in detail the concepts of the Dynamic Multipoint VPN (DMVPN) solution. It starts with an overview of basic DMVPN functionality including in-depth descriptions of how Next Hop Resolution Protocol (NHRP) is used in DMVPN hub-and-spoke and dynamic spoke-spoke networks, including DMVPN Phase 2 and Phase 3 functionality and discussion and examples of using DMVPN for Network Virtualization with VRF-lite and 2547oDMVPN. The session also covers how DMVPN interacts with NAT, QoS, MPLS, and dynamic routing. This session is for designers, managers, and troubleshooters of extended corporate DMVPNs and for service providers that are deploying these services for their customers.

BRKCRT-1963 - CCVP:Mobility Features in Cisco Unified Communications Manager version 6 and 7. This session discusses Cisco Unified Device Mobility and Cisco Unified Mobility and their implementation in Cisco Unified Communications Manager versions 6 and 7. It describes how Cisco Unified Device Mobility and Cisco Unified Mobility work and how they are implemented. The session discusses how these features interact with different calling privileges implementation models such as the traditional calling search space approach, the line/device calling search space approach, and the corresponding changes in Cisco Unified Communications Manager version 7, for example when using the Local Route Group feature.

This session covers public key infrastructure (PKI) architectures, designs, and practical applications including an introduction to PKI public/private key pairs, core concepts, setting up a basic PKI infrastructure, auto-enrollment, recovering from an outage, certificate revocation list (CRL) checking, and PKI architecture for large-scale deployments. An example case is presented for a GET-VPN DMVPN scenario.

This session covers the design principles associated with the deployment of Group Encrypted Transport (GET) VPNs. A brief overview covers the protocols (GDOI and COOP) and state machines associated with group members and key servers. Best practices are emphasized for redundancy, scalability, manageability, and network performance. Discussion also covers various deployment scenarios. Knowledge of GET VPN architecture is highly recommended as a prerequisite.

This session addresses Cisco firewalls and how they are used to enforce security policy around the network. It includes best practices as part of a case study that illustrates these various techniques in practice and options on how they can be implemented. Common design scenarios are covered for both the ASA firewall appliance and the Cisco Firewall Services Module, including virtualization and transparent (Layer 2) mode. Pros and cons of each design are discussed in depth. Participants should have a working knowledge of TCP/IP and understand general networking and packet flow. This session focuses on the Cisco ASA Adaptive Security Appliance and Firewall Services Module and does not cover any Cisco IOS based firewall solutions.

This session covers the principles and design aspects of identity-based networking based on the IEEE 802.1x standard, which allows enterprise network administrators to explicitly control who and what gets on their networks. Identity services are technology solutions with tools to improve the security of physical and logical access to LANs.

This session focuses on the network security issues surrounding Layer 2, the data link layer. Because many network attacks originate inside the corporate firewall, exploring this soft underbelly of data networking is critical for any secure network design. Issues covered include Address Resolution Protocol (ARP) spoofing, MAC flooding, VLAN hopping, Dynamic Host Configuration Protocol (DHCP) attacks, and Spanning Tree Protocol concerns.

BRKCRT-1963 - CCVP:Mobility Features in Cisco Unified Communications Manager version 6 and 7. This session discusses Cisco Unified Device Mobility and Cisco Unified Mobility and their implementation in Cisco Unified Communications Manager versions 6 and 7. It describes how Cisco Unified Device Mobility and Cisco Unified Mobility work and how they are implemented. The session discusses how these features interact with different calling privileges implementation models such as the traditional calling search space approach, the line/device calling search space approach, and the corresponding changes in Cisco Unified Communications Manager version 7, for example when using the Local Route Group feature.

Technical Overview of the CCSP "Securing Networks with ASA Advanced (SNAA)" certification training and technical content. This session would discuss the need for this particular training, the technical aspects of the content, and the value it adds to the business. This session would discuss the relationship between the SNAA Cisco Certification course and the CCSP certification.