CCIE安全认证Lab实验考试考点大纲(2008年10月版)

　　Implement secure networks using Cisco ASA Firewalls

　　Perform basic firewall Initialization

　　Configure device management

　　Configure address translation (nat, global, static)

　　Configure ACLs

　　Configure IP routing

　　Configure object groups

　　Configure VLANs

　　Configure filtering

　　Configure failover

　　Configure Layer 2 Transparent Firewall

　　Configure security contexts (virtual firewall)

　　Configure Modular Policy Framework

　　Configure Application-Aware Inspection

　　Configure high availability solutions

　　Configure QoS policies

　　Implement secure networks using Cisco IOS Firewalls

　　Configure CBAC

　　Configure Zone-Based Firewall

　　Configure Audit

　　Configure Auth Proxy

　　Configure PAM

　　Configure access control

　　Configure performance tuning

　　Configure advanced IOS Firewall features

　　Implement secure networks using Cisco VPN solutions

　　Configure IPsec LAN-to-LAN (IOS/ASA)

　　Configure SSL VPN (IOS/ASA)

　　Configure Dynamic Multipoint VPN (DMVPN)

　　Configure Group Encrypted Transport (GET) VPN

　　Configure Easy VPN (IOS/ASA)

　　Configure CA (PKI)

　　Configure Remote Access VPN

　　Configure Cisco Unity Client

　　Configure Clientless WebVPN

　　Configure AnyConnect VPN

　　Configure XAuth, Split-Tunnel, RRI, NAT-T