Description

This training will allow you to acquire all the knowledge necessary to deploy and maintain a security solution based on Cisco ASA. At the end of this course, you will see how to configure essential functions using a WEB interface with ASDM (Cisco Adaptive Security Device Manager) and CLI command line, configure dynamic and static address translations and carry out the first maintenance operations.

Who is this training for ?

For whom ?

Security manager. Systems and network engineer. Security architect. Network or security technician.

Prerequisites

Training objectives

Know the functionalities of the Cisco ASA firewall Configure an ASA firewall Configure essential functions using ASDM and CLI Configure access policy based on ACLs (Access Control Lists) Analyze and restrict the flow (incoming and outgoing) Configure a VPN for remote access Optimize security rules

Training program

• Introduction
  • The technologies and characteristics of firewalls.
  • Presentation of firewalls.
  • Terminology and functionalities.
  • Architecture examples.
  • The ASA range.
  • Starting with an ASA.
  • The user interface.
  • Firewall configuration.
  • NTP configuration.
  • ASA security levels.
  • Syslog configuration.
  • Practical work Basic configuration of an ASA.
• Address translation and connections
  • Dynamic NAT, PAT and Static NAT.
  • The TCP Intercept function.
  • Connections, port forwarding.
  • DMZ configuration.
  • Practical work Configuration of an ASA in PAT with two and three interfaces.
  • Publishing a Web server.
• ACL et Content Filtering
  • ACL Overview.
  • Configuring ACLs.
  • Malicious Active Code Filtering.
  • URL Filtering.
  • Object groups.
  • Presentation of object groups.
  • Uses.
  • Configuration of object groups.
  • Practical work HTTP and FTP network traffic filtering.
  • Creation and use of object groups in ACLs.
• Configuration AAA
  • Cisco Secure ACS Overview.
  • Installing Cisco Secure ACS.
  • Configure Authentication and Authorization.
  • Downloading the ACL.
  • AAA troubleshooting.
  • Practical work Installing CSACS.
  • Configuring ASA in AAA.
• Routing and switching
  • Reminders about VLANs.
  • Supported features.
  • Static and dynamic routing.
  • Multicast.
  • Practical work Configuration of ASA in multi-VLAN, RIPv2 and OSPF.
• VPN
  • Setting up VPNs.
  • Configuring IPSec.
  • The Cisco VPN client.
  • Configuring remote access with Easy VPN.
  • Easy VPN server configuration.
  • Easy VPN remote features.
  • Client overview and configuration.
  • Presentation and configuration of WebVPN.
  • Practical work Setting up a site-to-site VPN, VPN remote access and WebVPN.
• Transparent firewall
  • Transparent vs.
  • Routed firewall.
  • Unsupported features.
  • Configuring IP addresses, ACLs and ARP.
  • Maintenance and troubleshooting.
  • Practical work Setting up a transparent firewall.
• Failover
  • Presentation of Failover modes.
  • Configuring Failover and Lan Failover.
  • Setting up the Failover.
  • Configuring Failover .
  • Configuration of Lan Failover.
  • Setting up the Failover in Active/Active mode.
  • Practical work Setting up a failover in Active/Standby mode, as well as in Active/Active mode.
• Cisco Security Appliance Device Manager
  • Using ASDM for configuring ASA.
  • Creating site-to-site VPN and remote access VPN.
  • Practical work Installation of ASDM.
  • VPN Configuration.
• Maintenance
  • Access configuration.
  • Privilege levels.
  • Password Recovery.
  • IOS management.
  • Configuration management.
  • License management.
  • Practical work IOS update.
  • Configuration backup .
  • Password Recovery.