Secure the AI Era.
You're innovating with AI, building applications and agentic services that move your business forward. But how do you protect yourself against the specific threats of this new world? Your traditional security stack wasn't built for any of this, and the threat landscape moves faster than your policies can.
Step into the role of a Senior Security Engineer at PseudoCo and take on a mission to secure AI sprawl across the enterprise. Across four real-world use cases and fifteen success criteria, you'll discover AI assets, validate models with algorithmic red teaming, scan model files for embedded threats, and build runtime policies that block security threats, sensitive data, and harmful language in real time. Then you'll go deeper into agentic AI by inspecting flows for agent-specific attacks such as tool poisoning, prompt injection, and rug pull attacks.
By the end, you'll have hands-on experience with Cisco AI Defense's full capabilities across both generative and agentic AI. Walk away ready to bring AI security home to your own environment.
Experience the latest innovations in Cisco Secure Firewall 10.0 in this lab. Discover how the Encrypted Visibility Engine (EVE) enables threat detection in encrypted traffic, while AI-driven SnortML provides protection against signature-less attacks. Take advantage of expanded SD-WAN features and improved OT security with advanced access control and containment. Seamless Splunk integration delivers robust security analytics for effective incident response. This lab will help you build the knowledge and skills needed to highlight the strengths of Cisco Secure Firewall 10.0.
Discover Industry leading Zero Trust Micro-Segmentation
In this interactive and hands-on workshop, you'll secure the SIWAPP invoice app using Zero Trust Micro-segmentation. You'll use Secure Workload to automatically find and suggest segmentation policies based on traffic and get visibility into runtime to detect vulnerable packages and container images.
[Not yet Generally Available]
Welcome to Cisco Hybrid Mesh Firewall Lab v1, a hands-on effort to future-proof PseudoCo's security posture, ensuring resilience against the ever-evolving threat landscape. Your mission, is to implement Cisco's cutting-edge Hybrid-Mesh Firewall solution to protect PseudoCo's diverse operations, encompassing headquarters, regional sites, branch offices, and cloud environments, all under the umbrella of Project Mercury. By the end, you’ll see how Hybrid Mesh Firewall unifies security across data center, cloud, and campus—giving you practical experience in protecting a global enterprise at scale.
Deliver unmatched, automated micro-segmentation and threat defense
Discover how this powerful duo delivers dynamic microsegmentation, automated policy enforcement, and robust threat protection—securing your workloads seamlessly across hybrid environments. Get ready to simplify security and boost application defense with unified, adaptive protection.
Unify Control. Simplify Security.
In this interactive design workshop, Cisco experts work with your team to map your current security solutions landscape and explore how Zero Trust Access can bring it all together. Through discussion and whiteboarding, you’ll identify integration opportunities, improve visibility, and outline a roadmap toward unified management. The result: stronger security, simplified operations, and reduced complexity across your network.
Unify Control. Simplify Security.
In this interactive design workshop, Cisco experts work with your team to map your current firewall landscape and explore how Hybrid Mesh Firewall can bring it all together. Through discussion and whiteboarding, you’ll identify integration opportunities, improve visibility, and outline a roadmap toward unified management. The result: stronger security, simplified operations, and reduced complexity across your network.
Attack. Detect. Remediate. — All in One Lab.
Switch from attacker to defender in this instructor-led lab. Use a preconfigured pod to launch phishing-based intrusions mapped to MITRE TTPs, then pivot to blue-team work with Secure Firewall, Secure Network Analytics, Secure Email, and Cisco XDR. You’ll experience the full purple-team loop—attack, detect, investigate, and remediate—building hands-on skills that strengthen defenses where it counts.
Modernize the Firewall. Secure the Enterprise.
Lead PseudoCo’s Project Meteor, a hands-on modernization effort powered by Cisco’s Hybrid Mesh Firewall. Across three phases, you’ll onboard firewalls, simplify branch connectivity, integrate cloud policies, and configure segmentation for workloads and apps. By the end, you’ll see how Hybrid Mesh Firewall unifies security across data center, cloud, and campus—giving you practical experience in protecting a global enterprise at scale.
Zero Trust in Action.
Step into the role of administrator at PseudoCo and design a modern Zero Trust Access environment with Duo Identity and Cisco Secure Access. Configure secure connectivity between remote users and private apps, integrate identity using Duo Directory, and enable SAML-based authentication. Along the way, you’ll have the opportunity to experience Duo Passwordless enrollment and authentication, Duo Passport to reduce user friction, test access end-to-end to Private corporate resources and Internet destinations, and monitor performance with ThousandEyes—leaving with the confidence to deliver Zero Trust access seamlessly and securely.
One Cisco Experience Lab
Cisco Secure Networking delivers the One Cisco Experience by unifying networking, security, observability, and policy into a single integrated architecture designed to protect modern enterprises across campus, branch, WAN, cloud, and remote access environments. By combining deep visibility, identity-driven access control, and Zero Trust enforcement across every connection point, organizations can simplify operations, strengthen security posture, and improve digital resilience.
In this hands-on lab, participants will deploy either a BGP EVPN fabric or an SDA-LISP Campus fabric as the foundation for a modern Cisco Secure Network supporting both macro and micro segmentation. Through guided exercises, you’ll experience how Cisco technologies work together seamlessly across domains using Cisco Security Cloud Control, Secure Firewall Management Center (cdFMC/FTD), Cisco Secure Access, Duo, Catalyst SD-WAN, Identity Services Engine (ISE), ThousandEyes, and Security Group Tags (SGTs) to deliver unified policy enforcement, shared telemetry, and consistent user experiences.
You’ll implement integrated workflows that connect networking and security operations across campus, branch, data center, and remote users. Real-world use cases include securing users and devices accessing local and cloud applications, protecting IoT environments through identity-based segmentation, and enabling secure remote access using Zero Trust Network Access (ZTNA). Participants will also explore how Cisco’s unified platform approach enables consistent policy, end-to-end visibility, and faster troubleshooting across switching, wireless, SD-WAN, cloud security, and firewall infrastructure.
By the end of the lab, you’ll gain practical experience deploying and validating a fully integrated Cisco architecture that demonstrates the power of the One Cisco Experience—bringing together connectivity, security, and observability into a cohesive operational model for the modern enterprise.
Zero Trust in Action.
Step into the role of administrator at PseudoCo and design a modern Secure Service Edge with Cisco Secure Access. Configure secure connectivity between remote users and private apps, integrate identity services like Active Directory and Duo, and enable SAML-based authentication. Along the way, you’ll validate tunnels, monitor performance with ThousandEyes, and test access end-to-end—leaving with the confidence to deliver Zero Trust access seamlessly and securely.
Automate Security. Accelerate Response.
In this hands-on workshop, you’ll explore how automation strengthens security operations across hybrid environments. Through five tracks—Intro to Security Automation, Network Security, Breach Protection, User Protection, and Cloud Protection—you’ll practice real-world use cases using Cisco tools and APIs. Walk away with the skills to detect faster, respond smarter, and reduce manual workload with consistent, automated defenses.
Stay Ahead of Attackers
Cyber threats move fast—can you respond even faster? Join our Rapid Incident Response Workshop and master the art of detecting and neutralizing threats in minutes, not weeks. Get hands-on with Cisco XDR, tackle live threat scenarios, sharpen your threat triage skills, and connect with cybersecurity experts. Whether you're in IT, security operations, or threat hunting, this workshop will arm you with the tools and insights to stay ahead of cyber adversaries. Don't just react—hunt threats with confidence!
Deploy with Skill. Demonstrate with Confidence.
This hands-on lab gives you the skills and methodology to install, configure, and integrate Cisco XDR in a controlled environment. Working through guided scenarios, you’ll connect data sources, configure the console, and set up supporting devices to mirror real-world requirements. By the end, you’ll be ready to deliver XDR implementations, Proof-of-Concepts, and customer demos with confidence—well-prepared before stepping into a production environment.
Rediscover. Reinforce. Reignite.
This lab brings you back to the core of Hybrid Mesh Firewall while layering in modern capabilities. You’ll register devices, run threat assessments with Caldera, and test encrypted visibility without decryption. Dive into SD-WAN with simplified branch-to-hub tunnels and policy-based routing, then explore AI-driven assistants for policy analysis and optimization. Finally, integrate segmentation across firewall and workload for unified control. Walk away with refreshed skills and new insights to strengthen firewall strategy in today’s evolving networks.
Build Your Firewall from the Ground Up.
Get hands-on with Cisco Secure Firewall basics in this guided lab. Configure FMC, create objects and security zones, register devices, and define policies for malware protection, decryption, and intrusion prevention. Step through access control rules and visibility features to see how each piece fits together. These fundamentals prepare you for advanced labs and give you the core skills to design and manage deployments with confidence.
Push Your Firewall Further.
Take Cisco Secure Firewall beyond the basics in this advanced hands-on lab. Explore Zero Trust Access, policy-based routing with user identity, and SD-WAN integration with VRF and dynamic tunnels. Test dashboards for VPNs, run packet tracing, and dive into threat labs with tools like AttackIQ and Caldera. You’ll finish with the skills to design and operate a firewall strategy that’s smarter, stronger, and ready for modern threats.