Home Company Information Consulting Course Catalog Contact Us Request a Quote Government Corporate
 

CISCO

 
   
Course Name: Securing Networks with ASA Advanced (SNAA) Training
   
Deployment Options: Onsite - Instructor-Led Training
   
Course Duration: 5-6 days depending on audience background and options
   
Related Courses
 
 
Introduction:
 
In this Authorized Cisco course, you will take your knowledge and skills on configuring, maintaining, and operating Cisco ASA 5500 Series Adaptive Security Appliance to the next level. Recommended training for the Cisco Certified Security Professional (CCSP) certification, SNAA takes over where SNAF leaves off, covering advanced topics of the Adaptive Security Appliance.

We have added depth to the existing Cisco-developed hands-on labs for SNAA. Our advanced hands-on labs, delivered on an enhanced topology designed to simulate a typical production network, guide you through exercises such as managing digital certificates for IPSec and SSL VPNs, deep packet inspection, and using the 5505 in the SOHO environment.
 
Audience:
 
The class is designed for Security/Network Administrators who have at least working knowledge of networking and network security.
 
Prerequisites:
 
 
Customize it:
 
This 5-6-day Cisco SNAA course will be customized to your needs and specifications. Eno.com will assist you in identifying those needs and specifications. A word to the wise, there are many vendors of IT security training. They will typically have a broad and general course, one size fits all, already developed and just put your organization?s name on the title slide. This minimizes their effort and time investment. At Eno.com, every course is made to your exact and exacting specifications. We help you ensure what you are getting is what you really need even if at the beginning you weren't too sure of what that was. We fit the class to your needs. We never fit you into our standard, one size fits all, class. Please call or e-mail to schedule a no-obligation conference call to help us understand your audience background and training objectives.
 
Objectives:
 

What You'll Learn

  • Use advanced NAT features such as policy-based NAT
  • Use advanced modular policy framework for deep packet inspection of application protocols such as HTTP and FTP
  • How the multimedia protocols are handled and configured by the modular policy framework of the security appliance at Layer 3, 4, and 7
  • Configure the security appliance to support multiple VLANs on a single physical interface
  • Configure dynamic routing capabilities of the appliance
  • Use advanced IPSec VPN technologies including peer authentication using digital certificates
  • Steps necessary to configure the ASA as a CA Server
  • Configure the IPSec VPN Client using digital certificates
  • Configure the advanced Easy VPN Server features of the ASA
  • Necessary configuration for the ASA 5505 to be a VPN hardware client
  • Steps to configure QoS for VPN traffic
  • SSL VPN features and capabilities of the security appliance
  • Enable clientless SSL VPNs with the security appliance
  • Enable AnyConnect SSL VPN Client with the security appliance
  • Enable the Cisco Secure Desktop with the security appliance to increase the security posture of SSL VPN connections
  • Enable Dynamic Access Policy for remote access IPsec or SSL VPN
  • Characteristics of the security services modules for the ASA
  • Configure, inspect, and filter traffic with the Content Security and Control SSM
  • Configure the AIP-SSM to identify and alert for common attacks
 
Course Outline and Labs Taught
 

1. Advanced ASA NAT

  • Applying NAT 0 and Policy NAT
  • ACLs
  • NAT
  • Translation Behavior
  • NAT Exemption
  • Policy NAT
  • Verify and Troubleshoot

2. Advanced Protocol Handling

  • Applying the Cisco Modular Policy Framework
  • Modular Policy Framework Overview
  • Configuring the Modular Policy Framework
  • Configuring a Layer 7 Class Map
  • Configuring a REGEX Class Map
  • Configuring a Layer 7 Policy Map
  • Verifying the Modular Policy Framework Configuration
  • Handling Advanced Protocol
  • Protocol Inspection Overview
  • FTP Inspection
  • HTTP Inspection
  • Instant Messaging Inspection
  • ESMTP Inspection
  • DNS Inspection
  • ICMP Inspection
  • Verifying Protocol Inspection

3. Dynamic Routing and Switching

  • Switching with VLANs
  • ASA VLAN Operations
  • VLAN Configuration
  • Configuring VLANs on the ASA 5505
  • Verify VLANs
  • Routing with Dynamic Protocols
  • Dynamic vs. Static Routing
  • RIP
  • OSPF
  • EIGRP
  • Redistribution
  • Verification and Troubleshooting

4. IPsec VPNs

  • Understanding IPsec and Digital Certificates
  • What IPsec Is
  • IPsec Operation
  • Digital Certificates and Public Key Cryptography
  • Certificates and Scalability
  • Certificate Enrollment Process
  • Validating the Certificate
  • Certificate Revocation Lists
  • Security Appliance Certificate Enrollment Support
  • Key Pairs and Trustpoints
  • Implementing Site-to-Site VPNs with Digital Certificates
  • Site-to-Site VPNs
  • Configuring CA Certificates
  • Site-to-Site IPsec Connection Profiles
  • Modifying Certificate to Connection Mapping
  • Hub and Spoke
  • Site-to-Site Redundancy
  • Verifying Site-to-Site VPNs
  • Troubleshooting Site-to-Site VPNs
  • Configuring the Cisco VPN Client
  • Cisco VPN Client
  • Client Installation
  • Digital Certificates with Cisco VPN Client
  • Connection Entry
  • Advanced Options
  • Verify and Troubleshoot Client Configuration
  • Implementing Remote Access VPNs with Digital Certificates
  • Remote Access VPNs
  • Configuring an ASA for Remote Access
  • Installing ASA Certificates
  • Defining a Remote Access Address Pool
  • User Policy Attribute Inheritance
  • Configuring an IPSec Connection Profile
  • Configuring the Certificate to Connection Profile Policy
  • Verifying Remote Access VPNs
  • Troubleshooting Remote Access VPNs
  • Configuring Advanced Remote Access Features and Policy
  • Load Balancing
  • Reverse Route Injection
  • Backup Servers
  • Intra-Interface VPN Traffic
  • NAT Transparency
  • Client Update
  • Split Tunneling
  • Personal Firewalls
  • Configuring the ASA 5505 as an Easy VPN Hardware Client
  • Introduction to Cisco Easy VPN
  • Cisco Easy VPN Server Policy
  • Easy VPN Hardware Client
  • IPsec VPNs and QoS
  • QoS Overview
  • ASA QoS
  • Configuring QoS for VPNs

5. SSL VPNs

  • SSL VPN Technology Overview
  • SSL Overview
  • Clientless SSL VPN
  • Cisco Secure Desktop (CSD)
  • Configuring Clientless SSL VPNs
  • Configuring Clientless SSL VPN
  • Verifying Clientless SSL VPN Operation
  • Configuring Port-Forwarding SSL VPN
  • Verifying Port-Forwarding SSL VPN
  • Configuring Additional SSL VPN Features
  • Troubleshooting Clientless and Port-Forwarding SSL VPNs
  • Configuring Full Network Access SSL VPNs
  • Cisco Full Network Access SSL VPN Overview
  • Configuring Cisco AnyConnect SSL VPN
  • Verifying Cisco AnyConnect SSL VPN Operation
  • Configuring Advanced Features for the Cisco AnyConnect SSL VPN Client
  • Configuring Certificate-Based Authentication for AnyConnect SSL VPN
  • Troubleshooting Cisco AnyConnect SSL VPN Client Operation
  • Cisco Secure Desktop
  • Cisco Secure Desktop Overview
  • Cisco Secure Desktop Interoperability
  • Preparing the ASA for Cisco Secure Desktop
  • Securing the Desktop with CSD and DAP
  • CSD Workflow
  • Pre-Login Assessment
  • Secure Session
  • Cache Cleaner
  • Host Emulation and Keystroke Logger Detection
  • Host Scan
  • Dynamic Access Policy
  • DAP Testing

6. Security Services Modules

  • Examining the SSMs
  • Business Challenges
  • SSMs
  • CSC-SSM
  • AIP-SSM
  • AIP-SSM or CSC-SSM
  • CSC-SSM: Getting Started
  • CSC-SSM Overview
  • CSC-SSM SW Loading
  • Initial CLI CSC Configuration
  • Initial Configuration of the CSC-SSM using CSC Setup Wizard from ASDM
  • AIP-SSM: Getting Started
  • AIP-SSM Overview
  • AIP-SSM SW Loading
  • Initial IPS ASDM Configuration
  • Configure an IPS Security Policy
 
Other Expertise:
 
Complete Training Catalog
Oracle Applications Training and Consulting
Peoplesoft Applications Training and Consulting
SAP Applications Training and Consulting
Security Technologies Training and Consulting
Telecommunications Training and Consulting
Wireless Technology Training and Consulting
 

For organizational purchases, please send us a message at salesinfo@eno.com or complete and submit this form .