Designing and Implementing Secure Cloud Access for Users and Endpoints (300-740 SCAZT)

Distributed work, direct internet access, and multicloud operations make security inconsistent when identity, network, remote access, and detection tools are managed in silos. IT teams complete this intermediate Cisco training to build a shared operating model around Cisco Secure Reference Architecture concepts, certificate-based access, Duo-protected applications and VPN, SD-WAN security integrations, Umbrella, ThousandEyes, XDR telemetry, Talos, and Cisco SAFE.

For an IT Director or Training Manager, the time commitment is realistic but meaningful: about 27 hours per learner, best assigned to network security engineers, security operations staff, and senior network practitioners supporting Cisco environments. Team Leads should plan this as a cross-functional upskilling path because the topics span access control, remote access policy, DNS/SIG security, visibility, and incident-response tooling.

CBT Nuggets Playlists can sequence the course by role or project phase, while Team Reporting helps managers track completion and adoption across the team.

This training helps Cisco-focused teams reduce security gaps that appear when access, network, and detection controls are implemented independently. The course maps practical scenarios across user/device security, application access, VPN policy, SD-WAN security, cloud-delivered protection, visibility, and XDR.

• Standardize access decisions with certificate-based authentication, Cisco ISE concepts, 802.1X network access, and common identity use cases.
• Improve remote workforce protection by connecting Duo application protection, AnyConnect VPN, secure remote access policies, and zero trust network access scenarios.
• Strengthen branch and internet-edge security by integrating Cisco SD-WAN with Umbrella DNS, Umbrella SIG, content filtering, and direct internet access designs.
• Increase operational visibility by applying ThousandEyes fundamentals, SD-WAN integration, XDR telemetry/orchestration, Talos context, and Cisco SAFE architecture concepts.

Knowledge

• Cisco security framework concepts, including Secure Reference Architecture and Cisco SAFE.
• User and device security measures for Cisco environments.
• Certificate-based authentication foundations and how they relate to Cisco ISE and 802.1X.
• Duo use cases for application protection and AnyConnect VPN access.
• SD-WAN security patterns using content filtering, Umbrella DNS, Umbrella SIG, and direct internet access.
• XDR, Talos, ThousandEyes, and multicloud/SASE policy concepts.

Ability

• Evaluate where identity, device, network, workload, and data protections fit in a Cisco security architecture.
• Plan certificate-based access control and network access approaches using Cisco ISE and 802.1X concepts.
• Align remote access VPN policies with Duo and zero trust network access use cases.
• Identify SD-WAN integration points for Umbrella and ThousandEyes.
• Connect telemetry, orchestration, Talos intelligence, and XDR use cases to security operations workflows.
• Discuss converged multicloud policy and SASE integration with network and security stakeholders.