SNAF - Securing Networks with ASA Foundation

Summary

This course takes a task-oriented approach to teaching the skills to configure, operate, and manage the Cisco Adaptive Security Appliance product family. Configurations are performed via ASDM. This course covers important new ASA and PIX Security Appliance 8.0 features giving students the knowledge and skills to protect network systems from intrusions and security threats. CCNA or CCNA Security Certification are strongly suggested as prerequisites.  Students must also have experience in configuring Cisco IOS software, basic knowledge of the Windows operating system, and familiarity with networking and security terms and concepts. This course is for network professionals wanting to guarantee the security of their network.   This course provides an excellent foundation to SNAA.
 
  
Prerequisites
 
Students who attend this intermediate course should have experience in configuring Cisco IOS software and should have met the following prerequisites:
Certification as a CCNA Boot Camp Version 2.0 or the equivalent knowledge.
Basic knowledge of the Windows operating system.
Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications).
 
 
Audience

Technicians requiring CCSP Certification or ASA Specialist Certification.
Technicians using or designing networks with Cisco ASA products
 
 
Skills taught
 
• Explain the functions of the three types of firewalls used to secure today's computer networks
• Describe the technology and features of Cisco security appliances
• Given diagrams of networks protected by Cisco Adaptive Security Appliances (ASAs) and Cisco PIX Security Appliances, explain how each appliance protects network devices from attacks and why each is an appropriate choice for the example network
• Bootstrap the security appliance, prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM), and launch and navigate ASDM
• Use ASDM and the CLI to perform essential security appliance configuration
• Use ASDM to configure dynamic and static address translations in the security appliance
• Use ASDM to configure switching and routing on the security appliance
• Given a PC, a Cisco 5520 ASA, and a security policy, use ASDM to configure access control lists, filter malicious active codes, and filter URLs to meet the requirements of the security policy
• Use the packet tracer for troubleshooting
• Use ASDM to configure object groups that meet the requirements of the security policy
• Use ASDM to configure AAA as needed to meet the requirements of the security policy
• Use ASDM to configure a modular policy that supports the security policy
• Use ASDM to configure protocol inspection to meet the requirements of the security policy
• Use ASDM and the CLI to configure threat detection to meet the requirements of the security policy
• Use ASDM to configure the security appliance to support a site-to-site VPN that meets the requirements of the security policy
• Use ASDM to configure the security appliance to provide secure connectivity using remote access VPNs
• Configure the security appliance to run in transparent firewall mode as needed to meet the requirements of the security policy
• Enable, configure, and manage multiple contexts as needed to meet the requirements of the security policy
• Select and configure the type of failover that best suits the network topology
• Monitor and manage an installed security appliance
 
 
Course outline

• Lesson 1 Introducing Cisco Security Appliance Technology and Features
• Lesson 2 Introducing the Cisco ASA and PIX Security Appliance Families
• Lesson 3 Getting Started with Cisco Security Appliances
• Lesson 4 Configuring a Security Appliance
• Lesson 5 Configuring Translations and Connection Limits
• Lesson 6 Using ACLs and Content Filtering
• Lesson 7 Configuring Object Grouping
• Lesson 8 Switching and Routing on Cisco Security Appliances
• Lesson 9 Configuring AAA for Cut-Through Proxy
• Lesson 10 Configuring the Cisco Modular Policy Framework
• Lesson 11 Configuring Advanced Protocol Handling
• Lesson 12 Configuring Threat Detection
• Lesson 13 Configuring Site-to-Site VPNs Using Pre-Shared Keys
• Lesson 14 Configuring Security Appliance Remote-Access VPNs
• Lesson 15 Configuring the Cisco ASA Security Appliance for SSL VPN
• Lesson 16 Configuring Transparent Firewall Mode
• Lesson 17 Configuring Security Contexts
• Lesson 18 Configuring Failover
• Lesson 19 Managing the Security Appliance