Deploying Cisco ASA VPN Solutions (VPN) 2.0 is a five-day instructor-led course which aims at providing network security engineers with the knowledge and skills needed to configure Cisco VPN Solutions with the Cisco ASA Security Appliance. This VPN v.0 course includes ASA Software v8.2 and will prepare you for Cisco Exam 642-647 VPN.2
Our students will learn the skills they need to choose, configure, and troubleshoot the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce risk to IT infrastructure and its applications.
Who Should Attend
This course is intended for the following audience:
•Network Security Engineers (NSEs)
•Anyone who implements and maintains VPN features on the Cisco ASA
•Those seeking CCNP Security certification
Course Overview
Learn to configure, maintain, and operate VPN solutions based on the Cisco ASA 5500 Series Adaptive Security Appliance (ASA) including:
•Site-to-site IPsec VPN
•Remote access IPsec VPN
•Remote access SSL VPN
Prerequisites
The knowledge and skills that we recommend you have before attending this course include concepts from the following Cisco Certification Courses:
•Cisco Certified Network Associate (CCNA) certification
•Cisco Certified Network Associate Security (CCNA Security) certification
For students who are not certification-motivated and possess an appropriate level of experience, the prerequisites listed above may not apply.
Course Content
This course will cover the following topics:
•Implement site-to-site IPsec VPN
•Implement remote access IPsec and SSL VPNs
•Work with both the Cisco IPsec VPN client software and the hardware client built into the ASA 5505
•Deploy clientless SSL VPN access, including portal customization, smart tunnel access, and web-type ACLs
•Implement single sign-on for clientless VPN access to internal resources
•Deploy full tunnel SSL VPN using the Cisco AnyConnect VPN Client
•Determine and enhance the security posture of remote SSL VPN systems using Cisco Secure Desktop
•Use digital certificates and PKI infrastructure for peer identity management in all classes of VPN
•Configure the ASA as a Certificate Authority for SSL VPN access
•Configure access control policies to implement your security policy across all classes of VPN
•Use Dynamic Access Policies (DAP) to adapt a remote user's VPN policy to the user's current situation
•Implement High Availability and scalability features for Cisco ASA VPN solutions
Course Outline
1. Evaluating the Cisco ASA VPN Subsystem
•ASA Software Architecture
•Common Cisco ASA Remote Access VPN Concepts
2. ASA IPsec VPN Solutions
•Basic Site-to-Site IPsec VPNs
•Certificate Authentication in Site-to-Site IPsec VPNs
•Cisco IPsec VPN Client
•Basic Easy VPN Solutions
•Advanced Authentication
•Cisco ASA 5505
3. ASA AnyConnect Remote Access VPN Solutions
•Basic AnyConnect Full Tunnel SSL VPN Solution
•Advanced Deployment
•Advanced Authentication in AnyConnect Full Tunnel SSL VPNs
4. ASA Clientless SSL Remote Access VPN Solutions
•Basic Clientless SSL VPN Solution
•Advanced Application Access for Clientless SSL VPN
•Advanced Authentication
•Single Sign-On in a Clientless SSL VPN
•Customize the Clientless SSL VPN User Interface and Portal
5. Advanced Cisco ASA VPN Solutions
•VPN Authorization and Accounting
•Cisco Secure Desktop in SSL VPNs
•Dynamic Access Policies
•High Availability and High Performance in SSL and IPsec VPNs
Labs
•Deploying Cisco ASA VPN Solutions
•Deploying a Basic Cisco ASA IPsec Site-to-Site VPN
•Deploying a Certificate-Based Cisco ASA IPsec Site-to-Site VPN
•Deploying Basic Easy VPN
•Deploying Advanced Easy VPN Server with Certificate-based Authentication
•Deploying the Cisco ASA 5505 as a Hardware Easy VPN Client
•Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN using Local Password Authentication
•Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
•Deploying the Cisco AnyConnect Client with Centralized Management
•Configuring Basic Clientless VPN Access
•Configuring Advanced Application Access in Clientless SSL VPNs
•Customizing the SSL VPN Portal
•Deploying SSL VPN Access Policies and Authorization Parameters
•Deploying Cisco Secure Desktop and DAP in SSL VPNs
•Configuring a Load Balancing SSL VPN Cluster
Deploying Cisco ASA VPN Solutions
Deploying a Basic Cisco ASA IPsec Site-to-Site VPN
Deploying a Certificate-Based Cisco ASA IPsec Site-to-Site VPN
Deploying Basic Easy VPN
Deploying Advanced Easy VPN Server with Certificate-based Authentication
Deploying the Cisco ASA 5505 as a Hardware Easy VPN Client
Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN using Local Password Authentication
Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
Deploying the Cisco AnyConnect Client with Centralized Management
Configuring Basic Clientless VPN Access
Configuring Advanced Application Access in Clientless SSL VPNs
Customizing the SSL VPN Portal
Deploying SSL VPN Access Policies and Authorization Parameters
Deploying Cisco Secure Desktop and DAP in SSL VPNs
Configuring a Load Balancing SSL VPN Cluster
