What You'll Learn

• Implement site-to-site IPsec VPN
• Implement remote access IPsec and SSL VPNs
• Work with both the Cisco IPsec VPN client software and the hardware client built into the ASA 5505
• Deploy clientless SSL VPN access, including portal customization, smart tunnel access, and web-type ACLs
• Implement single sign-on for clientless VPN access to internal resources
• Deploy full tunnel SSL VPN using the Cisco AnyConnect VPN Client
• Determine and enhance the security posture of remote SSL VPN systems using Cisco Secure Desktop
• Use digital certificates and PKI infrastructure for peer identity management in all classes of VPN
• Configure the ASA as a Certificate Authority for SSL VPN access
• Configure access control policies to implement your security policy across all classes of VPN
• Use Dynamic Access Policies (DAP) to adapt a remote user's VPN policy to the user's current situation
• Implement High Availability and scalability features for Cisco ASA VPN solutions

Who Needs to Attend:

• Anyone who implements and maintains VPN features on the Cisco ASA
• Those seeking CCNP Security certification

Pre-requisites

• ICND2 - Interconnecting Cisco Network Devices 2
• IINS - Implementing Cisco IOS Network Security

Course Outline

1. Evaluating the Cisco ASA VPN Subsystem

• ASA Software Architecture
• Common Cisco ASA Remote Access VPN Concepts

2. ASA IPsec VPN Solutions

• Basic Site-to-Site IPsec VPNs
• Certificate Authentication in Site-to-Site IPsec VPNs
• Cisco IPsec VPN Client
• Basic Easy VPN Solutions
  • Advanced Authentication
  • Cisco ASA 5505

3. ASA AnyConnect Remote Access VPN Solutions

• Basic AnyConnect Full Tunnel SSL VPN Solution
• Advanced Deployment
• Advanced Authentication in AnyConnect Full Tunnel SSL VPNs

4. ASA Clientless SSL Remote Access VPN Solutions

• Basic Clientless SSL VPN Solution
• Advanced Application Access for Clientless SSL VPN
• Advanced Authentication
• Single Sign-On in a Clientless SSL VPN
• Customize the Clientless SSL VPN User Interface and Portal

5. Advanced Cisco ASA VPN Solutions

• VPN Authorization and Accounting
• Cisco Secure Desktop in SSL VPNs
• Dynamic Access Policies
• High Availability and High Performance in SSL and IPsec VPNs