Cisco:Securing Networks with ASA Fundamentals Training Onsite

Security Training & Consulting

Enterprise Applications

Wireless Communication

DoD 8570 Training

Bookstore

We are here to help...

With easy ways to get the answers you need:

Or call us at:
1-888-742-3214

CISCO



Course Name:	Securing Networks with ASA Fundamentals (SNAF) Training

Deployment Options:	Onsite - Instructor-Led Training

Course Duration:	5-6 days depending on audience background and options

Related Courses

Introduction:

In this Authorized Cisco course, you will gain the knowledge and skills needed to configure, maintain, and operate Cisco ASA 5500 Series Adaptive Security.

We have enhanced our delivery of SNAF by adding depth to the existing Cisco-developed hands-on labs. In a topology designed to simulate a typical production network, our advanced hands-on labs guide you through exercises such as executing general maintenance commands, configuring ACLs, and configuring VPN on the Security Appliance.

Our labs utilize ASA 5520 security appliances, though the content in this course and our labs is applicable across the ASA and PIX families of security appliances since the command syntax is generally the same. This course has been updated to cover the features and syntax of Cisco Security Appliance Software v8.0.

Audience:

The class is designed for Security/Network Administrators who have at least working knowledge of networking and network security.

Prerequisites:

Customize it:

This 5-6-day Cisco SNAF course will be customized to your needs and specifications. Eno.com will assist you in identifying those needs and specifications. A word to the wise, there are many vendors of IT security training. They will typically have a broad and general course, one size fits all, already developed and just put your organization?s name on the title slide. This minimizes their effort and time investment. At Eno.com, every course is made to your exact and exacting specifications. We help you ensure what you are getting is what you really need even if at the beginning you weren't too sure of what that was. We fit the class to your needs. We never fit you into our standard, one size fits all, class. Please call or e-mail to schedule a no-obligation conference call to help us understand your audience background and training objectives.

Objectives:

What You'll Learn

Functions of the three types of firewalls used to secure today's computer networks
Technology and features of Cisco security appliances
How Cisco Adaptive Security Appliances (ASAs) and Cisco PIX Security Appliances protect etwork devices from attacks and why each is an appropriate choice
Bootstrap the security appliance, prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM), and launch and navigate ASDM
Perform essential security appliance configuration using ASDM and the CLI
Configure dynamic and static address translations using ASDM
Configure switching and routing using ASDM
Use ASDM to configure ACLs, filter malicious active codes, and filter URLs that meet the requirements of the security policy
Use the packet tracer for troubleshooting
Use ASDM to configure object groups that meet the requirements of the security policy
Use ASDM to configure AAA to meet the requirements of the security policy
Configure a modular policy that supports the security policy using ASDM
Use ASDM to configure protocol inspection to meet security policy requirements
Configure threat detection to meet security policy requirements using ASDM and the CLI
Using ASDM, configure the security appliance to support a site-to-site VPN that meets policy requirements
Using ASDM, configure the security appliance to provide secure connectivity using remote access VPNs
Configure the security appliance to run in transparent firewall mode
Enable, configure, and manage multiple contexts to meet security policy requirements
Select and configure the type of failover that best suits the network topology
Monitor and manage an installed security appliance

Course Outline and Labs Taught

1. Introducing Cisco Security Appliance Technology and Features

Functions of the three types of firewalls that are used to secure modern computer networks
Technology and features of Cisco security appliances

2. Cisco Adaptive Security Appliance and PIX Security Appliance Families

Cisco ASA security appliance models
Cisco ASA security appliance licensing options

3. Getting Started with Cisco Security Appliances

Four main access modes
Security appliance file management system
Security appliance security levels
ASDM requirements and capabilities
Use the CLI to configure and verify basic network settings, and prepare the security appliance for configuration via ASDM
Verify security appliance configuration and licensing via ASDM

4. Essential Security Appliance Configuration

Configure a security appliance for basic network connectivity
Verify the initial configuration
Set the clock and synchronize the time on security appliances
Configure the security appliance to send syslog messages to a syslog server

5. Configuring Translations and Connection Limits

Function of TCP and UDP protocols within the security appliance
Function of static and dynamic translations
Configure dynamic address translation
Configure static address translation
Set connection limits

6. Using ACLs and Content Filtering

Configure the basic function of ACLs
Configure additional functions of ACLs
Configure active code filtering (ActiveX and Java applets)
Configure the security appliance for URL filtering
Use the packet tracer for troubleshooting

7. Configuring Object Grouping

Object grouping feature of the security appliance and its advantages
Configure object groups and use them in ACLs

8. Switching and Routing on Security Appliances

Configure logical interfaces and VLANs
Configure static routes and static route tracking
Dynamic routing capabilities of Cisco security appliances
Configure passive RIP routing

9. Configuring AAA for Cut-Through Proxy

Define and compare AAA
Install and configure Cisco Secure ACS
Configure the local user database
Define and configure cut-through proxy authentication
Define and configure user authorization using downloadable ACLs
Define and configure accounting

10. Configuring the Cisco Modular Policy Framework

Cisco Modular Policy Framework feature for security appliances
Functionality of class maps
Functionality of policy maps
Functionality of service policies
Use ASDM to configure a service policy rule

11. Configuring Advanced Protocol Handling

Need for advanced protocol handling
How the security appliance implements inspection of common network applications
Issues with multimedia applications and how the security appliance supports multimedia call control and audio sessions

12. Configuring Threat Detection