CCNP Security case studies
CCNP Security · Put your knowledge to work in context.
CCNP Security is Cisco's professional-level security certification, aimed at engineers who design, deploy, and operate Cisco security solutions rather than at candidates seeking their first security role. It sits above associate-level security credentials and is typically pursued by network and security engineers, SOC and firewall administrators, and consultants who already work with Cisco security products day to day. The CCNP Security case studies are 5 cases and about 4,012 words.
1Branch IPsec Tunnels Rebuilding and Stalling Large Transfers
A retail chain runs an FTD 2130 HA pair at its data center and FTD 1120s at 60 branches. Each branch has 500 Mbps fiber as primary and a 40 Mbps LTE link as backup, with IKEv2 IPsec tunnels to HQ and BGP advertising branch subnets across them.
840 words, about 4 min2Centralized Inspection VPC: Asymmetric Resets and Appliance Saturation
An enterprise runs three AWS VPCs (prod, shared services, inspection) attached to a Transit Gateway. On-premises connects over a 10 Gbps Direct Connect with a 1 Gbps IPsec VPN as backup.
831 words, about 4 min3Email Gateway False Positives, an Allow-List Bypass, and a Full Disk
A company with 22,000 Exchange Online mailboxes routes inbound and outbound mail through a pair of ESAs in HA. Inbound volume is about 1.4 million messages per day, of which roughly 71% is rejected.
765 words, about 4 min4Audit-Mode Endpoints, a Low-Prevalence Beacon, and a Latency-Sensitive Server Farm
A firm has 8,400 endpoints under Secure Endpoint: 6,900 Windows 10/11 desktops, 900 macOS, and 600 RHEL 8 servers. Policy is Protect on desktops and Audit-only on servers, because the servers run a latency-sensitive application where any file scan exceeding 50 ms causes a dropped transaction.
778 words, about 4 min5MFA Fatigue on VPN and Contractor Over-Access
A company supports 3,000 employees working remotely through AnyConnect on an FTD HA pair, plus 500 contractors on a separate connection profile. Authentication is RADIUS to ISE (two nodes) with AD as the identity store, and Duo push is the second factor for everyone.
798 words, about 4 min