ASA Solutions (ASAS)
Course Description
We continue to provide you with a competitive advantage in being
prepared to install, configure, and troubleshoot Cisco Firewall
Solutions.
Implementing Cisco ASA Solutions (ICAS) aims at providing
network security engineers with the knowledge and skills needed to
configure Cisco ASA Firewalls in Every aspect. From Basic Interface
Configuration to Advanced VPN with digital certificates this course
will not leave you guessing. We're confident is saying that this is
the most complete ASA course available today.
This course covers a mix of both Command Line Interface (CLI)
and Graphical Configuration using the Adaptive Security Device
Manager (ASDM).
Prerequisites
The knowledge and skills that you must have before attending
this course include concepts from the following Cisco Certification
Courses:
Cisco Certified Network Associate (CCNA)
certification:
- Interconnecting Cisco Network Devices 1 (ICND1)
- Interconnecting Cisco Network Devices 2 (ICND2)
Cisco Certified Network Associate Security (CCNA
Security) certification:
- Implementing Cisco IOS Network Security (IINS)
In addition to the above prerequisite skills, learners will
benefit from a working knowledge of the Microsoft Windows operating
system.
While these are not necessarily "prerequisites" we highly
recommend having the knowledge that is developed in these courses
prior to attending the ICAS course.
Associated Certifications
- Cisco Certified Network Professional - Security (CCNP
Security)
Who Should Attend
This course is intended for the following audience:
- Network Security Engineers (NSEs)
Number of Days
5 INTENSE Days of instructor-led classroom training. (Approx. 10
- 12 hours each day.)
Course Objectives
After completing this course, you will be able to:
- Evaluate the basic technology, features, and hardware models of
the Cisco ASA adaptive security appliance product line
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Implement and maintain basic Cisco ASA adaptive security
appliance connectivity and device management plane features
- Deploy Cisco ASA adaptive security appliance IPsec VPN
solutions
- Deploy Cisco ASA adaptive security appliance Cisco AnyConnect
remote access VPN solutions
- Deploy Cisco ASA adaptive security appliance clientless remote
access VPN solutions
- Deploy advanced Cisco ASA adaptive security appliance VPN
solutions
Course Outline
Module 1: Introducing the Cisco ASA Adaptive Security
Appliance
- Lesson 1: Introducing Cisco ASA Adaptive Security Appliance
Technology and Features
- Lesson 2: Introducing the Cisco ASA Adaptive Security Appliance
Family
Module 2: Implementing Basic Connectivity and Device
Management
- Lesson 1: Getting Started with the Cisco ASA Adaptive Security
Appliance and Cisco ASDM
- Lesson 2: Configuring Interfaces and Static Routing
- Lesson 3: Configuring Basic Device Management Features
- Lesson 4: Configuring Management Access
Module 3: Deploying Cisco ASA Adaptive Security
Appliance Access Control Features
- Lesson 1: Configuring Basic Access Control
- Lesson 2: Using Cisco ASA Adaptive Security Appliance Modular
Policy Framework
- Lesson 3: Tuning Basic Stateful Inspection Features
- Lesson 4: Configuring Application-Layer Policies
- Lesson 5: Configuring Advanced Access Controls
- Lesson 6: Configuring Resource Limits and Guarantees
- Lesson 7: Configuring User-Based Policies (Cut-Through
Proxy)
Module 4: Deploying Cisco ASA Adaptive Security
Appliance Network Integration Features
- Lesson 1: Deploying Network Address Translation
- Lesson 2: Configuring Cisco ASA Adaptive Security Appliance
Transparent Operations
Module 5: Deploying Cisco ASA Adaptive Security
Appliance Virtualization and High Availability
Features
- Lesson 1: Deploying Cisco ASA Adaptive Security Appliance
Virtualization Features
- Lesson 2: Deploying Cisco ASA Adaptive Security Appliance
Redundant Interfaces
- Lesson 3: Deploying Active/Standby High Availability
Failover
- Lesson 4: Deploying Active/Active High Availability Failover
*** VoD Delivery
Module 6: Integrating Cisco ASA Adaptive Security
Appliance Security Service Modules *** VoD Delivery
- Lesson 1: Introduction to Cisco ASA Adaptive Security Appliance
Security Service Modules *** VoD Delivery
- Lesson 2: Integrating the Cisco ASA Adaptive Security Appliance
AIP-SSM and AIP-SSC Modules *** VoD Delivery
- Lesson 3: Integrating the Cisco ASA Adaptive Security Appliance
CSC-SSM Module *** VoD Delivery
Module 7: Evaluating the Cisco ASA Adaptive Security
Appliance VPN Subsystem
- Lesson 1: Evaluating the Cisco ASA Adaptive Security Appliance
Software Architecture
- Lesson 2: Evaluating the Cisco ASA Adaptive Security Appliance
VPN Subsystem Architecture
- Lesson 3: Applying Common Cisco ASA Adaptive Security Appliance
Remote Access VPN Configuration Concepts
Module 8: Deploying Cisco ASA Adaptive Security
Appliance IPsec VPN Solutions
- Lesson 1: Deploying Basic Site-to-Site IPsec VPNs
- Lesson 2: Deploying Certificate Authentication in Site-to-Site
IPsec VPNs
- Lesson 3: Deploying the Cisco IPsec VPN Client
- Lesson 4: Deploying Basic Easy VPN Solutions
- Lesson 5: Deploying Advanced Authentication in Cisco Easy VPN
Solutions
- Lesson 6: Deploying the Cisco ASA 5505 Adaptive Security
Appliance as an Easy VPN Hardware Client *** VoD Delivery
Module 9: Deploying Cisco ASA Adaptive Security
Appliance AnyConnect Remote Access VPN Solutions
- Lesson 1: Deploying a Basic Cisco AnyConnect Full Tunnel SSL
VPN Solution
- Lesson 2: Advanced Deployment of the Cisco AnyConnect VPN
Client
- Lesson 3: Deploying Advanced Authentication in AnyConnect Full
Tunnel SSL VPNs *** VoD Delivery
Module 10: Deploying Cisco ASA Adaptive Security
Appliance Clientless Remote Access VPN Solutions
- Lesson 1: Deploying a Basic Clientless VPN Solution
- Lesson 2: Deploying Advanced Application Access for Clientless
SSL VPN
- Lesson 3: Deploying Advanced Authentication and Single Sign-On
in a Clientless SSL VPN *** VoD Delivery
- Lesson 4: Customizing the Clientless SSL VPN User Interface and
Portal
Module 11: Deploying Advanced Cisco ASA Adaptive
Security Appliance VPN Solutions
- Lesson 1: Deploying VPN Authorization, Access Control, and
Accounting
- Lesson 2: Deploying Cisco Secure Desktop in SSL VPNs
- Lesson 3: Deploying Dynamic Access Policies
- Lesson 4: Deploying High Availability and High Performance in
SSL and IPsec VPNs *** VoD Delivery
Hands-on Lab Exercises
- Lab 1: Configuring Basic Connectivity
- Lab 2: Configuring Management Features
- Lab 3: Configuring Basic Access Control
- Lab 4: Tuning Basic Cisco ASA Adaptive Security Appliance
Stateful Inspection Features
- Lab 5: Configuring Application-Layer Policies
- Lab 6: Configuring Advanced Access Controls and ACLs
- Lab 7: Configuring Cut-Through Proxy
- Lab 8: Configuring Cisco ASA Adaptive Security Appliance
NAT
- Lab 9: Deploying a Cisco ASA Adaptive Security Appliance
Active/Standby Failover
- Lab 10: Deploying a Basic Cisco ASA IPsec Site-to-Site VPN
- Lab 11: Deploying a Certificate-Based Cisco ASA IPsec
Site-to-Site VPN
- Lab 12: Deploying Basic Easy VPN
- Lab 13: Configuring a Basic Cisco AnyConnect Full Tunnel SSL
VPN using Local Password Authentication
- Lab 14: Configuring a Basic AnyConnect Full Tunnel SSL VPN
Using the Local CA
- Lab 15: Deploying the Cisco AnyConnect Client with Centralized
Management
- Lab 16: Configuring Basic Clientless VPN Access
- Lab 17: Configuring Advanced Application Access in Clientless
SSL VPNs
- Lab 18: Customizing the SSL VPN Portal
- Lab 19: Deploying SSL VPN Access Policies and Authorization
Parameters
- Lab 20: Deploying Cisco Secure Desktop and DAP in SSL VPNs