Cisco – SASAA – Implementing Advanced Cisco ASA Security

Description

Overview:

This course provides Cisco ASA firewall administrators and engineers with update training on the main post-8.4.1 release Cisco ASA features including most 9.x features such as CX and Clustering. The course includes detailed coverage of Cisco ASA 5500-X Series Next-Generation Firewalls, the Cisco Catalyst 6500 Series ASA Services Module (ASASM), and the ASA 1000v Cloud Firewall. It also provides a hands-on experience with installing and setting up the Cisco IPS and Cisco ASA CX software modules, implementing Identity Firewall policies with Cisco CDA, implementing CX policies, and integrating Cisco Cloud Web Security. Additional terms and conditions apply–please ask your Account Executive.

Prerequisite(s):

FIREWALL or equivalent knowledge of the Cisco ASA

Audience:

This course is intended for network engineers supporting Cisco ASA 9.x implementations.

Outline:

Lesson 1: Cisco ASA Product Family

• Cisco ASA 5500-X Series Next-Generation Firewalls
• Cisco ASA 5500-X Series USB 2.0 Ports
• Cisco ASA 5500-X Series SSDs
• Cisco ASA NGE Support
• Cisco ASA 5585-X Dual Firewall Support

Lesson 2: Cisco ASA Identity Firewall

• Describing the Cisco ASA Identity Firewall Solution
• Setting Up Cisco CDA
• Configuring Cisco CDA
• Configuring Cisco ASA Identity Firewall
• Verifying and Troubeshooting Cisco Identitiy Firewall

Lesson 3: Cisco ASA CX

• Introducing Cisco ASA CX (Next Generation Firewall)
• Describing the Cisco ASA CX Management Architecture
• Installing the Cisco Off-Box PRSM and Cisco ASA CX
• Redirecting Cisco ASA-to-Cisco ASA CX Traffic
• Performing Cisco PSRM Device Discovery and Configuration Import
• Configuring Cisco ASA CX Policy Objects
• Configuring Cisco ASA CX Access Policies
• Configuring Cisco ASA CX Identity Policies
• Configuring Cisco ASA CX Decryption Policies
• Licensing Cisco ASA CX and Cisco PRSM
• Monitoring Cisco ASA CX
• Using Cisco PRSM for Administration
• Troubleshooting Cisco ASA CX

Lesson 4: Cisco ASA Cloud Web Security Integration

• Introducing Cisco ASA with Cisco Cloud Web Security
• Licensing Cisco ASA with Cisco Cloud Web Security
• Configuring Cisco ASA with Cisco Cloud Web Security
• Verifying Cisco ASA and Cloud Web Security Operations

Lesson 5: Cisco ASA IPv6 Enhancements

• Describing the Cisco ASA IPv4 and IPv6 Unified ACL
• Describing Other Cisco ASA IPv6 Support Enhancements

Lesson 6: Cisco ASA Security Group Firewall

• Introducing Cisco Security Group Tagging
• Configuring Cisco ASA Security Group Firewall

Lesson 7: Cisco ASA Multicontext Enhancements

• Describing Cisco ASA Multicontext Mode
• Describing Multicontext Enhancements in Cisco ASA Software Release 9.0

Lesson 8: Cisco ASA Cluster

• Describing Cisco ASA Cluster Features
• Describing Cisco ASA Cluster Terminology and Data Flows
• Using the CLI to Configure a Cisco ASA Cluster
• Using Cisco ASDM to Configure a Cisco ASA Cluster
• Verifying Cisco ASA Cluster Operations
• Troubleshooting a Cisco ASA Cluster