What You'll Learn

• Technology and features of the Cisco ASA
• Cisco ASA product family
• How ASAs and Cisco PIX Security Appliances protect network devices from attacks
• Bootstrap the security appliance
• Prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM)
• Launch and navigate ASDM
• Perform essential security appliance configuration using ASDM and the CLI
• Configure dynamic and static address translations
• Configure access policy based on Access Control Lists (ACLs)
• Use object groups to simplify ACL complexity and maintenance
• Use the Modular Policy Framework to provide unique policies to specific data flows
• Handle advanced protocols with application inspection
• Deep packet inspection of application layer traffic
• Troubleshoot with Syslog, Packet Tracer, and packet capture
• Configure access-control based on authenticated users
• Configure threat detection to meet security policy requirements
• Configure the security appliance to run in transparent firewall mode
• Enable, configure, and manage multiple contexts to meet security policy requirements
• Select and configure the type of failover that best suits the network topology
• Monitor and manage an installed security appliance
• Initialize ASA Security Service Modules including the AIP-SSM and CSC-SSM

Who Needs to Attend

• Anyone who implements and maintains Cisco ASA firewalls
• Network security specialists and technicians
• Candidates seeking CCNP Security certification

Pre-requisites

• ICND2 - Interconnecting Cisco Network Devices 2
• IINS - Implementing Cisco IOS Network Security

Course Outline

1. Cisco ASA Adaptive Security Appliance

• Technology and Features
• ASA Family

2. Basic Connectivity and Device Management

• Cisco ASA and Cisco ASDM
• Interfaces and Static Routing
• Basic Device Management Features
• Management Access

3. Cisco ASA Access Control Features

• Basic Access Control
• Modular Policy Framework
• Basic Stateful Inspection Features
• Application-Layer Policies
• Advanced Access Controls
• Resource Limits and Guarantees
• User-Based Policies

4. Cisco ASA Network Integration Features

• Network Address Translation
• Transparent Firewall Operations

5. Cisco ASA Virtualization and High Availability Features

• Virtualization Features
• Redundant Interfaces
• Active/Standby High Availability Failover
• Active/Active High Availability Failover

6. Cisco ASA Security Service Modules

• AIP-SSM and AIP-AIP-SSC Module Integration
• CSC-SSM Module Integration