This list is intended to provide a general view of the skill set required to successfully complete the specified certification exam. Topics listed are subject to change.
- Administering Firewall / VPN Devices
- Layer 2 / Transparent Mode Operations
- Layer 3 Operations
- Policy Configuration
- Address Translation
- VPNs
Administering Firewall / VPN Devices
- Identify device components/functions
- Describe packet flow through device
- Describe initial configuration requirements/commands
- Configure local management options
- Configure external management devices (syslog, dns, snmp, etc.)
- Upgrade device software
- Manage configuration files (including configuration rollback)
- Discuss interface types/layer 1 & 2 configuration requirements
Layer 2 / Transparent Mode Operations
- Describe characteristics & operations of transparent mode
- Configure transparent mode
Layer 3 Operations
- Configure static routes
- Verify routing operations
- Configure L3 interfaces (including loopback)
- Describe NAT and route mode operations
- Configure NAT and route modes
Policy Configuration
- Configure address book entries & address groups.
- Configure service parameters & service groups.
- Configure basic policies.
- Configure multi-cell.
- Explain & verify policy operations.
- Configure logging
- Configure schedules
- Configure authentication
- Configure counters
Address Translation
- Distinguish between NAT options
- Configure NAT-src (including DIPs)
- Configure NAT-dst
- Configure MIPs
- Configure VIPs
- Verify address translation
VPNs
- List basic VPN requirements
- Describe IPSec operations (Phase 1/2, Diffie-Hellman, ESP/AH, etc.)
- Configure policy-based VPNs
- Validate VPN operations
- Differentiate route-based and policy-based VPNs
- Describe tunnel interface operations
- Configure route-based VPNs
- Validate VPN operations
