Learn the skills needed to configure, maintain, and operate the firewall features of the Cisco ASA 5500 Series Adaptive Security Appliances (ASAs). This course prepares our students for the Cisco exam 642-617 FIREWALL which tests a candidate's knowledge and skills needed to implement and maintain Cisco ASA-based perimeter solutions. Candidates are expected to be ale to reduce risk to the IT infrastructure and applications using Cisco ASA features, and provide detailed operations support for the Cisco ASA.
Prerequisites
•ICND2 - Interconnecting Cisco Network Devices 2
•IINS - Implementing Cisco IOS Network Security
Who Should Attend
•Anyone who implements and maintains Cisco ASA firewalls
•Network security specialists and technicians
•Candidates seeking a CCNP Security certification
Course Content
•Technology and features of the Cisco ASA
•Cisco ASA product family
•How ASAs and Cisco PIX Security Appliances protect network devices from attacks
•Bootstrap the security appliance
•Prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM)
•Launch and navigate ASDM
•Perform essential security appliance configuration using ASDM and the CLI
•Configure dynamic and static address translations
•Configure access policy based on Access Control Lists (ACLs)
•Use object groups to simplify ACL complexity and maintenance
•Use the Modular Policy Framework to provide unique policies to specific data flows
•Handle advanced protocols with application inspection
•Deep packet inspection of application layer traffic
•Troubleshoot with Syslog, Packet Tracer, and packet capture
•Configure access-control based on authenticated users
•Configure threat detection to meet security policy requirements
•Configure the security appliance to run in transparent firewall mode
•Enable, configure, and manage multiple contexts to meet security policy requirements
•Select and configure the type of failover that best suits the network topology
•Monitor and manage an installed security appliance
•Initialize ASA Security Service Modules including the AIP-SSM and CSC-SSM
Course Outline
1. Cisco ASA Adaptive Security Appliance
•Technology and Features
•ASA Family
2. Basic Connectivity and Device Management
•Cisco ASA and Cisco ASDM
•Interfaces and Static Routing
•Basic Device Management Features
•Management Access
3. Cisco ASA Access Control Features
•Basic Access Control
•Modular Policy Framework
•Basic Stateful Inspection Features
•Application-Layer Policies
•Advanced Access Controls
•Resource Limits and Guarantees
•User-Based Policies
4. Cisco ASA Network Integration Features
•Network Address Translation
•Transparent Firewall Operations
5. Cisco ASA Virtualization and High Availability Features
•Virtualization Features
•Redundant Interfaces
•Active/Standby High Availability Failover
•Active/Active High Availability Failover
6. Cisco ASA Security Service Modules
•AIP-SSM and AIP-AIP-SSC Module Integration
•CSC-SSM Module Integration
Labs
•Deploying Cisco ASA Firewall Solutions
•Configuring Basic Connectivity
•Configuring Management Features
•Configuring Basic Access Control
•Tuning Basic Cisco ASA Adaptive Security Appliance Stateful Inspection Features
•Configuring Application-Layer Policies
•Configuring Advanced Access Controls
•Configuring User-Based Policies (Cut-Through Proxy)
•Configuring Cisco ASA Adaptive Security Appliance NAT
•Configuring Transparent Firewall Mode
•Deploying a Cisco ASA Adaptive Security Appliance Active/Standby Failover
•Deploying a Cisco ASA Adaptive Security Appliance Active/Active Failover
