Training description

This 5-day training introduces students to the basic principles of information security in the enterprise networks and the main features of the Nest Generation Firewalls (NGFW). The course is built around Adaptive Security Appliance. In addition to the basic functionality of the platform, the possibilities of its integration into the network and models comparison, additional services will be considered: interface and global ACL, Modular Policy Framework, inspectors, failover functions, clientless and client VPN, and etc.
The training also provides 13 laboratory works, during which students will improve their skills to configure and administer Cisco ASA.

Intended Audience

This training is for information security specialists, network engineers and network administrators who work with Next Generation Firewalls (NGFW) or will work in the near future. The training will also be useful for all students who are interested in Adaptive Security Appliance from Cisco Systems.

Expected students’ skills and knowledge

This training does not require deep understanding of network security methods and
technologies, but students will need a basic knowledge of network protocols (TCP, UDP, IP, ICMP).

Training outline

Chapter 1: Cisco ASA Adaptive Security Appliance Essentials

• Evaluating Cisco ASA Adaptive Security Appliance Technologies
• Identifying Cisco ASA Adaptive Security Appliance Models
• Identifying Cisco ASA Adaptive Security Appliance Licensing Options

Chapter 2: Basic Connectivity and Device Management

• Preparing the Cisco ASA Adaptive Security Appliance for Network Integration
• Managing Basic Cisco ASA Adaptive Security Appliance Network Settings

Chapter 3: Network Integration

• Configuring Cisco ASA Adaptive Security Appliance NAT Features
• Configuring Cisco ASA Adaptive Security Appliance Basic Access Control Features
• Configuring Cisco ASA Adaptive Security Appliance Routing Features

Chapter 4: Cisco ASA Adaptive Security Appliance Policy Controls

• Defining the Cisco ASA Adaptive Security Appliance MPF
• Configuring Cisco ASA Adaptive Security Appliance Advanced Application Inspections

Chapter 5: Cisco ASA Adaptive Security Appliance VPN Common Components

• VPN Overview
• Implementing Profiles, Group Policies, and User Policies
• Implementing PKI Services

Chapter 6: Cisco Clientless VPN Solution

• Introducing Clientless SSL VPN
• Deploying Basic Cisco Clientless SSL VPN on the Cisco ASA Adaptive Security Appliance
• Deploying Application Access in Cisco Clientless SSL VPN
• Deploying Client-Side Authentication and Authorization in Clientless SSL VPN

Chapter 7: Cisco AnyConnect Full Tunnel VPN Solutions

• Deploying Basic Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Authentication and Authorization in Cisco AnyConnect VPNs
• Deploying Cisco AnyConnect IPsec/IKEv2 VPNs
• Chapter 8: Cisco ASA Adaptive Security Appliance High Availability and Virtualization
• Configuring Cisco ASA Adaptive Security Appliance Interface Redundancy Features
• Configuring Cisco ASA Adaptive Security Appliance Active/Standby High Availability
• Configuring Security Contexts on the Cisco ASA Adaptive Security Appliance
• Configuring Cisco ASA Adaptive Security Appliance Active/Active High Availability (Optional/Self-study)

Lab outline

Lab 1: Accessing the Remote Lab Environment
Lab 2: Configuring the Cisco ASA Adaptive Security Appliance
Lab 3: Configuring NAT
Lab 4: Configuring Basic Cisco Access Control Features
Lab 5: Configuring MPF, Basic Stateful Inspections, and QoS
Lab 6: Configuring MPF Advanced Application Inspections
Lab 7: Implementing Basic Clientless SSL VPN on the Cisco ASA
Lab 8: Configuring Application Access for Clientless SSL VPN on the Cisco ASA
Lab 9: Implementing External Authentication and Authorization for Clientless SSL VPNs
Lab 10: Implementing Basic Cisco AnyConnect SSL VPN on the Cisco ASA
Lab 11: Configuring Advanced Authentication for Cisco AnyConnect SSL VPNs
Lab 12: Implementing Cisco AnyConnect IPsec/IKEv2 VPNs
Lab 13: Configuring Active/Standby High Availability