Implementing Core Cisco ASA Security v1.0

Course Objectives

By the end of this course, you should be able to:

• Explain the core essential features of Cisco ASA 5500-X Series Next-Generation Firewalls
• Describe how to implement Cisco ASA basic connectivity and device management
• Implement basic Cisco ASA network integration
• Describe and implement basic Cisco ASA policy controls
• Describe Cisco ASA common VPN components
• Describe and implement Cisco ASA clientless VPN solutions
• Describe and implement Cisco ASA and Cisco AnyConnect full tunnel VPN solutions

Course Content

Cisco ASA Core v1.0 is a new 5-day ILT class that covers the Cisco ASA 9.0 / 9.1 core firewall and VPN features. It offers hands-on labs and is designed to teach network security engineers working on the Cisco ASA Adaptive Security Appliance to implement core Cisco ASA features, including the new ASA 9.0 and 9.1 features.

The knowledge and skills that a learner must have before attending this course are as follows:

• Working knowledge of basic IP networking
• Basic Cisco ASA Knowledge

Additional knowledge and skills that will help the learner benefit fully from the course are as follows:

• Cisco ASA Firewall v2 Course
• Cisco ASA VPN v2 Course

he primary audience for this course is as follows:

• Network engineers supporting Cisco ASA 9.x implementations

Detailed Course Outline

Module 1: Cisco ASA Adaptive Security Appliance Essentials

• Evaluating Cisco ASA Adaptive Security Appliance Technologies
• Identifying Cisco ASA Adaptive Security Appliance Models
• Identifying Cisco ASA Adaptive Security Appliance Licensing Options

Module 2: Basic Connectivity and Device Management

• Preparing the Cisco ASA Adaptive Security Appliance for Network Integration
• Managing Basic Cisco ASA Adaptive Security Appliance Network Settings

Module 3: Network Integration

• Configuring Cisco ASA Adaptive Security Appliance NAT Features
• Configuring Cisco ASA Adaptive Security Appliance Basic Access Control Features
• Configuring Cisco ASA Adaptive Security Appliance Routing Features

Module 4: Cisco ASA Adaptive Security Appliance Policy Controls

• Defining the Cisco ASA Adaptive Security Appliance MPF
• Configuring Cisco ASA Adaptive Security Appliance Advanced Application Inspections

Module 5: Cisco ASA Adaptive Security Appliance VPN Common Components

• VPN Overview
• Implementing Profiles, Group Policies, and User Policies
• Implementing PKI Services

Module 6: Cisco Clientless VPN Solution

• Introducing Clientless SSL VPN
• Deploying Basic Cisco Clientless SSL VPN on the Cisco ASA Adaptive Security Appliance
• Deploying Application Access in Cisco Clientless SSL VPN
• Deploying Client-Side Authentication and Authorization in Clientless SSL VPN

Module 7: Cisco AnyConnect Full Tunnel VPN Solutions

• Deploying Basic Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Authentication and Authorization in Cisco AnyConnect VPNs
• Deploying Cisco AnyConnect IPsec/IKEv2 VPNs

Module 8: Cisco ASA Adaptive Security Appliance High Availability and Virtualization

• Configuring Cisco ASA Adaptive Security Appliance Interface Redundancy Features
• Configuring Cisco ASA Adaptive Security Appliance Active/Standby High Availability
• Configuring Security Contexts on the Cisco ASA Adaptive Security Appliance
• Configuring Cisco ASA Adaptive Security Appliance Active/Active High Availability (Optional/Self-study)

Lab

Accessing the Remote Lab Environment
Configuring the Cisco ASA Adaptive Security Appliance
Configuring NAT
Configuring Basic Cisco Access Control Features
Configuring MPF, Basic Stateful Inspections, and QoS
Configuring MPF Advanced Application Inspections
Implementing Basic Clientless SSL VPN on the Cisco ASA
Configuring Application Access for Clientless SSL VPN on the Cisco ASA
Implementing External Authentication and Authorization for Clientless SSL VPNs
Implementing Basic Cisco AnyConnect SSL VPN on the Cisco ASA
Configuring Advanced Authentication for Cisco AnyConnect SSL VPNs
Implementing Cisco AnyConnect IPsec/IKEv2 VPNs
Configuring Active/Standby High Availability