deploying cisco asa firewall solutions

2
Deploying Cisco ASA Firewall Solutions Duration: 5 Days Course Code: FIREWALL Overview: This five-day course aims to provide network security engineers with the knowledge and skills needed to implement and maintain Cisco ASA adaptive security appliance-based perimeter solutions. Delegates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA adaptive security appliance features, and provide detailed operations support for the Cisco ASA adaptive security appliance. Target Audience: Anyone who implements and maintains Cisco ASA firewalls, Network security specialists and technicians, delegates seeking CCNP Security certification Objectives: After you complete this course you will be able to: Evaluate the basic technology, features, and hardware models of the Cisco ASA adaptive security appliance product line Implement and maintain basic Cisco ASA adaptive security appliance connectivity and device management plane features Implement and maintain data plane access control features of the Cisco ASA adaptive security appliance product family Implement and maintain Cisco ASA adaptive security appliance features that integrate itwith the local and global routing and switching infrastructure Implement and maintain Cisco ASA adaptive security appliance virtualization and highavailability features Evaluate Cisco ASA adaptive security appliance SSM modules, their major features, and integrate them with the Cisco ASA adaptive security appliance Prerequisites: Attendees should meet the following prerequisites: CCNA Certification, ICND1 and ICND2 or CCNABC Required CCNA Security Certification IINS Required. Working knowledge of Microsoft Windows OS is an advantage. Follow-on-Courses: The following courses are recommended for further study : SECURE - Securing Cisco Routers and Switches VPN - Deploying Cisco ASA VPNSolutions IPS - Implementing Cisco Intrusion Prevention System Testing and Certification: Recommended preparation for exam(s): 642-647 -Deploying Cisco ASA Firewall Solutions FIREWALL is one of four courses required for the Cisco Certified Network Professional for Security Career Certification FIREWALL www.bittnet.ro [email protected] (+40 21) 410 60 23 Price: € 1,800

Upload: others

Post on 16-Oct-2021

33 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Deploying Cisco ASA Firewall Solutions

Deploying Cisco ASA Firewall Solutions Duration: 5 Days Course Code: FIREWALL

Overview: This five-day course aims to provide network security engineers with the knowledge and skills needed to implement and maintain Cisco ASA adaptive security appliance-based perimeter solutions. Delegates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA adaptive security appliance features, and provide detailed operations support for the Cisco ASA adaptive security appliance.

Target Audience: Anyone who implements and maintains Cisco ASA firewalls, Network security specialists and technicians, delegates seeking CCNP Security certification

Objectives:

After you complete this course you will be able to:

Evaluate the basic technology, features, and hardware models of the Cisco ASA adaptive security appliance product line

Implement and maintain basic Cisco ASA adaptive security appliance connectivity and device management plane features

Implement and maintain data plane access control features of the Cisco ASA adaptive security appliance product family

Implement and maintain Cisco ASA adaptive security appliance features that integrate itwith the local and global routing and switching infrastructure Implement and maintain Cisco ASA adaptive security appliance virtualization and highavailability features Evaluate Cisco ASA adaptive security appliance SSM modules, their major features, and integrate them with the Cisco ASA adaptive security appliance

Prerequisites: Attendees should meet the following prerequisites:

CCNA Certification, ICND1 and ICND2 or CCNABC Required CCNA Security Certification IINS Required. Working knowledge of Microsoft Windows OS is an advantage.

Follow-on-Courses: The following courses are recommended for further study :

SECURE - Securing Cisco Routers and Switches VPN - Deploying Cisco ASA VPNSolutions IPS - Implementing Cisco Intrusion Prevention System

Testing and Certification: Recommended preparation for exam(s):

642-647 -Deploying Cisco ASA Firewall Solutions FIREWALL is one of four courses required for the Cisco Certified Network Professional for Security Career Certification

FIREWALL www.bittnet.ro [email protected] (+40 21) 410 60 23

Price: € 1,800

Page 2: Deploying Cisco ASA Firewall Solutions

Content: Introduction tothe Cisco ASA Adaptive Security Appliance

line Introducing Cisco ASA Adaptive Security Appliance Technology and Features

Introducing the Cisco ASA Adaptive Security Appliance Family

Implementation ofBasic Connectivity and Device Management

line

Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features

line Deploying Network Address Translation Configuring Cisco ASA Adaptive Security Appliance Transparent Operations

Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High Availability Features

Labs line

Lab 2-1: Configuring Basic Connectivity Lab 2-2: Configuring Management Features

Lab 3-1: Configuring Basic Access Control Lab 3-2: Tuning Basic Cisco ASA Adaptive Security Appliance Stateful Inspection Features

Lab 3-3: Configuring Application-Layer Policies

Getting Started with the Cisco ASA Adaptive line Security Appliance and Cisco ASDM Deploying Cisco ASA Adaptive Security

Configuring Interfaces and Static Routing Appliance Virtualization Features Configuring Basic Device Management Deploying Cisco ASA Adaptive Security Features Appliance Redundant Interfaces

Configuring Management Access Deploying Active/Standby High Availability Failover

Deployment of Cisco ASA Adaptive Security Deploying Active/Active High Availability Appliance Access Control Features Failover

line Configuring Basic Access Control Integration of Cisco ASA Adaptive Security Using Cisco ASA Adaptive Security Appliance Security Service Modules Appliance Modular Policy Framework line

Tuning Basic Stateful Inspection Features Introducingthe Cisco ASA Adaptive Configuring Application-Layer Policies Security Appliance Security Service Configuring Advanced Access Controls Modules Configuring Resource Limits and Integrating the Cisco ASA Adaptive Guarantees Security Appliance AIP-SSM and

Configuring User-Based Policies AIP-SSC Modules (Cut-Through Proxy) Integrating the Cisco ASA Adaptive

Security Appliance CSC-SSM Module Additional Information: Recertification:

Lab 3-4: Configuring Advanced Access Controls

Lab 3-5: Configuring User-Based Policies (Cut-Through Proxy)

Lab 4-1: Configuring Cisco ASA Adaptive Security Appliance NAT

Lab 4-2: Configuring Transparent Firewall Mode Lab 5-1: Deploying a Cisco ASA Adaptive Security Appliance Active/Standby Failover

Lab 5-2: Deploying a Cisco ASA Adaptive Security Appliance Active/Active Failover

Appendixes line

Appendix A: Configuring Routing on the Cisco ASA Adaptive Security Appliance

Appendix B: Lab (Optional): Configuring Dynamic Routing

Cisco professional level certifications (CCNP, CCNP SP Operations, CCNP Wireless, CCDP, CCNP Security, CCNP Voice, and CCIP) are valid for three years. To recertify, pass any 642 exam that is part of the professional level curriculum or pass any CCIE/CCDE written exam before the certification expiration date. Achieving or recertifying any of the certifications above automatically extends your active Associate and Professional level certification(s) up to the point of expiration of the last certification achieved. For more information, access the Cisco About Recertification page Further Information: For More information, or to book your course, please call us on Head Office +44 (0) 118 977 7700 [email protected] www.globalknowledge.net Global Knowledge, Mulberry Business Park, Fishponds Road, Wokingham Berkshire RG41 2GY UK FIREWALL www.bittnet.ro [email protected] (+40 21) 410 60 23