Designing Cisco Security Infrastructure v1.0 (SDSI)
The Designing Cisco Security Infrastructure (SDSI) training teaches you about security architecture design, including secure infrastructure, applications, risk, events, requirements, artificial intelligence (AI), automation, and DevSecOps.
Course Overview
After completing this course, you should be able to:
Identify and explain the fundamental concepts of security architecture and how they support the design, building, and maintenance of a secure infrastructure
- Identify the layers of security infrastructure, core security technologies, and infrastructure concepts
- Explain how security designs principles contribute to secure infrastructure
- Identify and discuss security design and management frameworks that can be used for infrastructure security design
- Explain the importance of and methods for enforcement of regulatory compliance in security design
- Identify tools that enable detection and response to infrastructure security incidents
Explain various strategies that can be implemented to modify traditional security architectures to meet the technical requirements of modern enterprise networks
- Implement secure network access methods, such as 802.1X, MAC Authentication Bypass (MAB), and web-based authentication
- Describe security technologies that can be applied to enterprise Wide Area Network (WAN) connections
- Compare methods to secure network management and control plane traffic
Compare the differences between traditional firewalls and next-gen firewalls (NGFWs) and identify the advanced features that NGFWs provide
Explain how web application firewalls (WAFs) secure web applications from threats
Describe the key features and best practices for deploying intrusion detection system (IDS) and intrusion prevention system (IPS) as part of the enterprise infrastructure security design
Explain how endpoints and services in cloud-native or microservice environments can be protected with host-based or distributed firewalls
- Discuss security technologies that address application data and data that is in transit
- Identify several security solutions for cloud-native applications, microservices, and containers
- Explain how technology advancements allow for improvements in today’s infrastructure security
- Identify tools that enable detection and response to infrastructure security incidents
- Describe frameworks and controls to access and mitigate security risks for infrastructure
- Explain how to make security adjustments following a security incident
- Identify DevSecOps integrations that improve security management and response
- Discuss how to ensure that automated services are secure
- Discuss how AI can aid in threat detection and response
Course Outline
- Definition and Purpose of Security Architecture
- Components of Security Infrastructure
- Security Design Principles
- Security and Design Frameworks
- Compliance and Regulatory Requirements
- Security Approaches to Protect Against Threats
- Modify the Security Architecture to Meet Technical Requirements
- Network Access Security
- VPN and Tunneling Solutions
- Secure Infrastructure Management and Control Planes
- Nextgen Firewalls
- Web Application Firewall (WAF)
- IPS/IDS Deployment
- Host-Based Firewalls and Distributed Firewalls
- Security Solutions Based on Application and Flow Data
- Security for Cloud-Native Applications, Microservices, and Containers
- Emerging Technologies in Application Security
- SOC Tools for Incident Handling and Response
- Modify Design to Mitigate Risk
- Incident-Driven Security Adjustments
- DevSecOps Integration
- Secure Automated Workflows and Pipelines
- AI’s Role in Securing Infrastructure
Intended Audience
- Security Engineer
- Network Engineer
- Network Designer
- Network Administrator
- Systems Engineer
- Consulting Systems Engineer
- Technical Solutions Architect
- Cisco Integrators/Partners
- Network Manager
- Cisco integrators and partners
Prerequisites
There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:
- Cisco CCNP Security or equivalent knowledge
- Familiarity with Microsoft Windows Operating Systems
- Familiarity with the Cisco Security portfolio
Follow-On Courses
Related training topics
Justify your training
Use this sample request letter — copy it into an email to your manager and personalize the bracketed details to make the case for the time and budget.
Sample training request letter
Subject: Request for Networking & Wireless training from Applied Technology Academy
[Decision Maker Name],
I'm writing to request time and budget approval to complete Applied Technology Academy's course, Designing Cisco Security Infrastructure v1.0 (SDSI). The information below outlines how this training benefits our organization, the tasks I'll be able to perform after completing it, and relevant cost and funding details.
Course Description
The Designing Cisco Security Infrastructure (SDSI) training teaches you about security architecture design, including secure infrastructure, applications, risk, events, requirements, artificial intelligence (AI), automation, and DevSecOps. Applied Technology Academy is an award-winning, SBA-certified woman-owned training provider (est. 2008) whose instructors are active practitioners. The course combines instructor-led training with practical, job-relevant learning designed to reinforce the skills covered in the curriculum. It also includes hands-on virtual labs for applied, learn-by-doing practice.
Course Objectives
Once I've completed the course, I'll have hands-on, job-ready skills in networking & wireless that I can apply immediately to our work.
Expected Organizational Benefits
After completing this course, I will be better equipped to apply these skills directly to our projects, reduce our reliance on outside expertise, strengthen our team's capabilities, and share what I learn with colleagues.
Expected Cost & Funding
Course fee: [request an itemized quote at the link below]. Applied Technology Academy supports multiple funding paths that may reduce or cover this cost: GSA MAS purchasing and government purchase orders, military credentialing funding (Army CA, AF COOL, CG COOL), VA GI Bill and VR&E, ATA Flexible Spending, and student financing. Private team cohorts are available if colleagues should attend with me.
Conclusion
This training provides practical, hands-on experience I can apply immediately to strengthen our work in networking & wireless. Additional course information is available at https://appliedtechnologyacademy.com/cisco-training/designing-cisco-security-infrastructure/.
Thank you for your consideration,
[Your Name]
Design training around your team, not the other way around.
Talk to a training advisor about private cohorts, funding paths and program management.