Skip to content
CBT Nuggets
DemoBook a Demo

Cisco Security Essentials: Access, Network, and XDR

This Cisco Security Essentials course prepares IT professionals to defend modern enterprise infrastructure using Zero Trust principles and consistent policy enforcement. Dive deep into the Cisco Secure Reference Architecture (SRA) to explore PKI foundations, identity-based access control with Cisco ISE and Duo, and integrated cloud security. This course covers advanced network protection, including SD-WAN integration with Umbrella and workload security across multi-cloud environments. You’ll also get comfortable with XDR orchestration by leveraging Talos threat intelligence and using ThousandEyes for end-to-end visibility. Once you’re done with this course, you’ll have the expertise to design and deploy a resilient security fabric across any enterprise landscape.

Updated March 2026

31Skills
170Videos
27hTotal

Who This Course Is For

This course is for security engineers, network engineers, and cloud specialists who design or support secure access to cloud and SaaS applications. If you work with Cisco networks and make security decisions in cloud or hybrid environments, this course will give you practical insight into the tools and frameworks you need to do your job.

Skills Your Team Will Gain

  • Design cloud security architectures that align with the Cisco SAFE framework
  • Apply identity-based access controls with SSO and multifactor authentication
  • Define cloud security policies using Cisco SD-WAN and Umbrella
  • Analyze application performance and user experience with Cisco ThousandEyes
  • Interpret threat data with Cisco XDR and Talos intelligence

Course Curriculum

One skill is free to watch — no signup needed. The other 30 premium skills unlock for your whole team with a CBT Nuggets plan.

Free skill preview

Exploring Security Frameworks: Part 1

David SmithDuration: 52m11 videos

Watch this complete skill free — the same trainer, videos, and labs your team gets with a plan.

Watch free skill
  • Exploring Security Frameworks: Part 1Free52m · 11 videos
  • Premium skill.Exploring Security Frameworks: Part 250m · 12 videos
  • Premium skill.Cisco SRA: User and Device Security Intro50m · 11 videos
  • Premium skill.Cisco SRA: User and Device Security Measures47m · 10 videos
  • Premium skill.Certificate-Based Authentication Foundations48m · 11 videos
  • Premium skill.Certificate-Based Access Control Using Cisco ISE48m · 14 videos
  • Premium skill.Cisco DUO Application Protection45m · 17 videos
  • Premium skill.802.1X Certificate-Based Network Access47m · 11 videos
  • Premium skill.SRA Use Cases: Common Identity53m · 13 videos
  • Premium skill.Identity-Aware Application Access58m · 14 videos
  • Premium skill.Using DUO with AnyConnect VPN50m · 12 videos
  • Premium skill.Secure Remote Access VPN Policies1h 5m · 10 videos
  • Premium skill.SRA Use Cases: Zero Trust Network Access48m · 11 videos
  • Premium skill.Cisco SRA: Network Security48m · 9 videos
  • Premium skill.Cisco SRA: Advanced Network Security50m · 11 videos
  • Premium skill.Cisco SRA: Workload Application and Data Security49m · 10 videos
  • Premium skill.Cisco SRA: Cisco Secure Workload49m · 11 videos
  • Premium skill.SD-WAN Content Filtering48m · 8 videos
  • Premium skill.Integrate SD-WAN with Cisco Umbrella1h 3m · 12 videos
  • Premium skill.Implement Umbrella DNS with SD-WAN54m · 11 videos
  • Premium skill.Implement Umbrella SIG with SD-WAN50m · 12 videos
  • Premium skill.Understand Umbrella Access Security Broker1h 1m · 13 videos
  • Premium skill.Cisco ThousandEyes Fundamentals49m · 12 videos
  • Premium skill.Integrate Cisco SD-WAN with ThousandEyes47m · 12 videos
  • Premium skill.Cisco SRA: XDR Toolset57m · 15 videos
  • Premium skill.SRA Use Cases: XDR Telemetry and Orchestration1h 3m · 19 videos
  • Premium skill.SRA Use Cases: Converged Multicloud Policy49m · 11 videos
  • Premium skill.SRA Use Cases: SASE Integration49m · 9 videos
  • Premium skill.Cisco SRA: Talos53m · 15 videos
  • Premium skill.Explore the Cisco SAFE Architecture49m · 11 videos
  • Premium skill.SD-WAN Direct Internet Access53m · 11 videos
Want to browse the locked skills?
with no purchase required. Already have an account?

An account gets you the full catalog to browse, pre-assessments, quiz questions on free skills, and IT Trainerbot, with every answer citing its source video.

Put this course to work for your team

Every plan includes this course plus the full library, virtual labs, and practice exams — or talk it through with sales.

For IT leaders

What IT leaders need to know before assigning this course

Distributed work, direct internet access, and multicloud operations make security inconsistent when identity, network, remote access, and detection tools are managed in silos. IT teams complete this intermediate Cisco training to build a shared operating model around Cisco Secure Reference Architecture concepts, certificate-based access, Duo-protected applications and VPN, SD-WAN security integrations, Umbrella, ThousandEyes, XDR telemetry, Talos, and Cisco SAFE.

For an IT Director or Training Manager, the time commitment is realistic but meaningful: about 27 hours per learner, best assigned to network security engineers, security operations staff, and senior network practitioners supporting Cisco environments. Team Leads should plan this as a cross-functional upskilling path because the topics span access control, remote access policy, DNS/SIG security, visibility, and incident-response tooling.

CBT Nuggets Playlists can sequence the course by role or project phase, while Team Reporting helps managers track completion and adoption across the team.

Team Impact

How this training helps your team succeed

This training helps Cisco-focused teams reduce security gaps that appear when access, network, and detection controls are implemented independently. The course maps practical scenarios across user/device security, application access, VPN policy, SD-WAN security, cloud-delivered protection, visibility, and XDR.

  • Standardize access decisions with certificate-based authentication, Cisco ISE concepts, 802.1X network access, and common identity use cases.
  • Improve remote workforce protection by connecting Duo application protection, AnyConnect VPN, secure remote access policies, and zero trust network access scenarios.
  • Strengthen branch and internet-edge security by integrating Cisco SD-WAN with Umbrella DNS, Umbrella SIG, content filtering, and direct internet access designs.
  • Increase operational visibility by applying ThousandEyes fundamentals, SD-WAN integration, XDR telemetry/orchestration, Talos context, and Cisco SAFE architecture concepts.

After completion

Capabilities your team walks away with

Knowledge

  • Cisco security framework concepts, including Secure Reference Architecture and Cisco SAFE.
  • User and device security measures for Cisco environments.
  • Certificate-based authentication foundations and how they relate to Cisco ISE and 802.1X.
  • Duo use cases for application protection and AnyConnect VPN access.
  • SD-WAN security patterns using content filtering, Umbrella DNS, Umbrella SIG, and direct internet access.
  • XDR, Talos, ThousandEyes, and multicloud/SASE policy concepts.

Ability

  • Evaluate where identity, device, network, workload, and data protections fit in a Cisco security architecture.
  • Plan certificate-based access control and network access approaches using Cisco ISE and 802.1X concepts.
  • Align remote access VPN policies with Duo and zero trust network access use cases.
  • Identify SD-WAN integration points for Umbrella and ThousandEyes.
  • Connect telemetry, orchestration, Talos intelligence, and XDR use cases to security operations workflows.
  • Discuss converged multicloud policy and SASE integration with network and security stakeholders.

Readiness check

Confirm prerequisite knowledge before training begins

A short placement assessment on the CBT Nuggets assessments platform measures whether a learner already has the foundation this course assumes. IT Directors use it to put the right people in the right training — and any learner can take it right now to make sure they'll get full value from day one.

  • Questions generated from this course's own video transcripts — what gets measured is exactly what gets taught
  • Instant, per-learner results that show whether the prerequisite foundation is in place
  • Results roll up into team readiness reporting, so training hours go where they change outcomes
Runs on assessments.cbtnuggets.com — sign in with an Adept account so results roll up into team readiness reporting. Need one?
.

This course is included with every subscription

Unlock this one course, or get one learner — or your whole team — access to all 287 courses, virtual labs, and practice exams.

Course Unlock

Just need this course?

$169one time

No subscription

One year of access to Cisco Security Essentials

  • Every skill in this course
  • Its virtual labs and practice exam
  • Ask IT Trainerbot about it — free

CBT Nuggets Individual

IT Trainerbot Pro

$49per month

Billed annually

Every course, for one learner

See Individual pricing
For IT teams

CBT Nuggets Teams

IT Trainerbot for Teams

$59per seat / mo

Billed annually

From 1 learner seat · unlimited admin seats

Checking your access

Need tenant hosting, reseller terms, or payment plans on a larger agreement? Book a Demo to discuss an Enterprise contract.

See plans and pricing for your team

Trusted by 23,000+ organizations

Frequently Asked Questions

What is the Cisco Secure Reference Architecture (SRA)?

The Cisco SRA is a holistic design framework that defines how different security products like Firewalls, ISE, and Umbrella integrate to create a unified defense. The SRA provides a blueprint for consistent policy, visibility and threat response across the entire enterprise, from the campus to the cloud.

What is the role of Cisco ISE in identity-based access control?

Cisco Identity Services Engine (ISE) serves as the network's policy engine. Each time someone or something tries to join the network - through cable, Wi-Fi, or remote tunnel - it checks identities and device conditions first. Depending on that information, it grants tailored levels of entry. Because of this control layer, only trusted individuals using up-to-date systems interact with critical resources. Built around continuous validation, ISE supports Zero Trust by design. Access shifts dynamically, matching real-time risk rather than fixed rules. Security stays active throughout the session, not just at login.

What jobs does this Cisco secure access course qualify me for?

This training supports early-career individuals in cybersecurity and networking who aim for positions like Security Analyst, Cloud Security Specialist, or Network Safety Engineer. Learners will develop a practical understanding alongside relevant terminology needed for handling access systems and protecting cloud-to-perimeter defenses within large organizations.

What is the difference between Cisco SAFE and SRA frameworks?

While both are architectural guides, Cisco SAFE targets distinct network zones, laying out precise blueprints for protecting operations such as those in branch offices or data centers. Instead of isolating locations, the Cisco SRA takes a wider view, built around how today's tools from the "Cisco Secure" suite work together so protection moves with people and applications, no matter their physical location.

What certifications should I consider taking after finishing this course?

While this is a practical skills-based course, it provides an excellent foundation for those later pursuing the CCNP Security track. It introduces core concepts found in the SCOR (350-701) and SCAZT (300-740) exams, making it a perfect bridge for professionals who want hands-on experience before diving into official certification prep.

Ready to upskill your team?

Talk to our sales team to find the right plan for your organization.