Implementing Core Cisco ASA Security v1.0 (SASAC)

New Age Technologies has been delivering Authorized Training since 1996. We offer Cisco’s full suite of authorized courses including Network Management with Cisco Prime Infrastructure, Unified Communications, Wireless, Implementing Core Cisco ASA Security, Storage Networking and more. If you have any questions or can’t seem to find the Cisco class that you are interested in, contact one of our Cisco Training Specialists. Invest in your future today with Cisco training from New Age Technologies.

✉ Cisco Training Specialist | ☏ 502.909.0819

Course Information

Implementing Core Cisco ASA Security (SASAC) Overview:

The Implementing Core Cisco ASA Security (SASAC) course contains added depth to the standard labs, using a topology that simulates a typical production network. You’ll use ASA 5515 appliances to work through configuring access control to and from your network.

Additionally, the PC systems and server systems are an integral part of the lab environment. Here you will use Windows 8, Windows Server 2012, and Kali Linux to manage, test, and even attack your lab network using real-world operating systems and applications.

Who Should Attend:

• Network engineers supporting Cisco ASA 9.x implementations

Implementing Core Cisco ASA Security (SASAC) Prerequisites:

Before attending this course, you must have the following:

• Working knowledge of basic IP networking
• Basic Cisco ASA Knowledge
• Additional knowledge and skills that will help the learner benefit fully from the course are as follows:
• Cisco ASA Firewall v2
• Course Cisco ASA VPN v2 Course

Implementing Core Cisco ASA Security (SASAC) Objectives:

After successfully completing this course, you will be able to:

• Essentials of Cisco ASA
• Basic connectivity and device management
• Network integration
• Configure common features of the Cisco ASA OS
• Cisco ASA policy control
• Core Cisco ASA VPN common components
• Main VPN components
• Cisco Clientless VPN solutions
• Cisco AnyConnect full tunnel VPN solution
• Cisco ASA high availability and virtualization options
• Features of Cisco ASA 5500-X Series Next-Generation Firewalls

Implementing Core Cisco ASA Security (SASAC) Outline:

Module 1: Cisco ASA Essentials

• Firewall Technologies
• Cisco ASA Features
• Cisco ASA Hardware
• Cisco ASA Licensing Options
• Cisco ASA Licensing Requirements

Module 2: Basic Connectivity and Device Management

• Managing the Cisco ASA Boot Process
• Managing the Cisco ASA Using the CLI
• Managing the Cisco ASA Using Cisco ASDM
• Navigating Basic Cisco ASDM Features
• Managing the Cisco ASA Basic Upgrade
• Managing Cisco ASA Security Levels
• Configuring and Verifying Basic Connectivity Parameters
• Configuring and Verifying Interface VLANs
• Configuring a Default Route
• Configuring and Verifying the Cisco ASA Security Appliance DHCP Server
• Troubleshooting Basic Connectivity

Module 3: Network Integration

• NAT on Cisco ASA Security Appliances
• Configuring Object (Auto) NAT
• Configuring Manual NAT
• Tuning and Troubleshooting NAT on the Cisco ASA
• Connection Table and Local Host Table
• Configuring and Verifying Interface ACLs
• Configuring and Verifying Global ACLs
• Configuring and Verifying Object Groups
• Configuring and Verifying Public Servers
• Configuring and Verifying Other Basic Access Controls
• Troubleshooting ACLs
• Static Routing
• Dynamic Routing
• EIGRP Configuration and Verification
• Multicast Support

Module 4: Cisco ASA Policy Control

• Cisco MPF Overview
• Configuring and Verifying Layer 3 and Layer 4 Policies
• Configuring and Verifying a Policy for Management Traffic
• Layer 5 to Layer 7 Policy Control Overview
• Configuring and Verifying HTTP Inspection
• Configuring and Verifying FTP Inspection
• Supporting Other Layer 5 to Layer 7 Applications
• Troubleshooting Application Layer Inspection

Module 5: Cisco ASA VPN Common Components

• VPN Definition
• Key Threats to WANs and Remote Access
• VPN Types
• VPN Components
• Cisco ASA VPN Policy Configuration
• Cisco ASA Connection Profiles
• Cisco ASA Group Policies
• Cisco ASA VPN AAA and External Policy Storage
• Cisco ASA User Attributes
• Access Control Methods
• VPN Accounting Using External Servers
• Dynamic Access Policy for SSL VPN
• Using PKI
• Provisioning Server-Side Certificates on the Cisco ASA Adaptive Security Appliance
• CA Servers
• Deploying Client-Based Certificate Authentication
• SCEP Proxy Operations
• Enable Certificate Authentication in Connection Profile
• Configuring Certificate-to-Connection Profile Mappings

Module 6: Cisco Clientless VPN Solution

• Introducing Clientless SSL VPN
• Deploying Basic Cisco Clientless SSL VPN on the Cisco ASA Adaptive Security Appliance
• Deploying Application Access in Cisco Clientless SSL VPN
• Deploying Client-Side Authentication and Authorization in Clientless SSL VPN

Module 7: Cisco AnyConnect Full Tunnel VPN Solution

• Deploying Basic Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Cisco AnyConnect SSL VPN on Cisco ASA
• Deploying Advanced Authentication and Authorization in Cisco AnyConnect VPNs
• Deploying Cisco AnyConnect IPsec/IKEv2 VPNs

Module 8: High Availability and Virtualization

• Configuring Cisco ASA Adaptive Security Appliance Interface Redundancy Features
• Configuring Cisco ASA Adaptive Security Appliance Active/Standby High Availability
• Configuring Security Contexts on the Cisco ASA Adaptive Security Appliance
• Configuring Cisco ASA Adaptive Security Appliance Active/Active High Availability (Optional/Self-study)

Implementing Core Cisco ASA Security (SASAC) Labs:

• Lab 1: Remote Lab Environment
• Lab 2: ASA Administration and Network Integration
• Lab 3: Network Address Translation
• Lab 4: Access Control and Troubleshooting
• Lab 5: MPF Basic Application Inspections
• Lab 6: MPF Advanced Application Inspections
• Lab 7: Basic Clientless SSL VPN
• Lab 8: Clientless SSL VPN Applications
• Lab 9: External AAA for Clientless SSL VPN
• Lab 10: Lab: Basic AnyConnect SSL VPN
• Lab 11: Advanced AnyConnect SSL VPN
• Lab 12: IPSec Remote Access VPN
• Lab 13: Active-Standby High Availability

Boost your salary by obtaining your Cisco Certification: Cisco Certified Internetwork Expert Security (CCIE Security):

Median Salary by Job – Certification: Cisco Certified Internetwork Expert (CCIE) (United States)