Chapter 1 of 4 · Cisco CCNP 300-710 SNCF
Deployment
Overview of the SNCF Deployment chapter covering routed and transparent modes, NGIPS modes, high availability options and virtual appliance management.
- 5topics
- 24 minfast track
- 7diagrams and exhibits
- 30%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Routed and Transparent Firewall ModesLearn how Secure Firewall Threat Defense works in routed and transparent mode, what bridge groups do, where the mode is set, and…Diagram5 min
- 2NGIPS Passive and Inline ModesLearn how Secure Firewall runs as a next generation IPS in passive mode on a SPAN port or tap and in inline mode with inline…Diagram5 min
- 3Port Channels and FailoverLearn how EtherChannel port channels and Active Standby failover high availability work on Secure Firewall Threat Defense, plus…Diagram5 min
- 4ECMP, Route Tracking and ClusteringLearn how ECMP zones share traffic over equal cost routes, how static route tracking with an SLA monitor fails over, and how…Diagram5 min
- 5Virtual Appliances and Management OptionsLearn where FTD Virtual and FMC Virtual run on premises and in the cloud, and how the manager and the device register with each…4 min
About this chapter
What this chapter covers
Deployment is about how you place Secure Firewall in a network and how you keep it available.
It covers the two firewall modes, the two IPS modes, the high availability options and the way virtual firewalls and their managers are deployed. These choices come first, because every later configuration task depends on them.
The chapter follows the Deployment objectives for the CCNP 300-710 SNCF exam, which are 1.1 to 1.4 in the question bank.
How the topics fit together
You choose a mode for the device, then protect it from failure, then decide where it runs and how it is managed.
The first two pages are about traffic. Routed and transparent mode decide whether the firewall is a Layer 3 hop or a Layer 2 bump. Passive and inline mode decide whether the inspection engine watches a copy or controls the live path.
The next two pages are about availability. Port channels protect against link failure, and failover protects against device failure. ECMP, static route tracking and clustering handle path choice, next hop failure and scale.
The last page covers virtual appliances, the on premises and cloud platforms they run on, and how a device registers to its manager.
The device CLI in these pages is the Secure Firewall Threat Defense CLI, which has the > prompt.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the usual traps.
- Check yourself: three questions to test your understanding.
Read the pages in order the first time. If you have a lab, practise registering a device and building a failover pair, because both show how the manager and device work together.
Ready for more practice?
The full Cisco CCNP 300-710 SNCF question bank has 865 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Cisco. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.