ASACAMP - ASA Lab Camp Training Class

Course ID: 21215

ASACAMP - ASA Lab Camp Training Seminar

Based on our Cisco SNAF and SNAA courses, our exclusive, lab-based course is designed to provide you with the most ASA-based lab experience in 5 days of training. During the Lab Camp, you will have 24x7 access via the Internet to a dedicated Flexible Security Architecture (FSA) pod. No coordination with another student is necessary. Labs are run at the pace you want, in the order you want, with flexibility for experimentation. Our FSA pods use real Cisco security devices and a powerful VMware server to provide an unparalleled lab environment. They provide automated set up of the lab pod to match the prerequisite configurations for any particular lab. Labs can be run in any order, any number of times. Our labs utilize ASA 5520 and ASA 5505 security appliances. Since the command syntax is generally the same, this course and lab content applies across the ASA and PIX families of security appliances. Further, this course covers the features and syntax of the Cisco Security Appliance Software version 8.0. We have enhanced our delivery of SNAF and SNAA, adding depth to the existing Cisco-developed hands-on labs. Our advanced hands-on labs guide you through exercises such as executing general maintenance commands, configuring ACLs, configuring VPN on the Security Appliance, managing digital certificates for IPSec and SSL VPNs, deep packet inspection, and using the 5505 in the SOHO environment. Apply what you learn in labs based on an enhanced topology designed to simulate a typical production network. Our ASA Lab Camp includes: Dedicated FSA pod consisting of the most up-to-date security hardware Extended lab availability - 24x7 access Enhanced content that exceeds standard authorized Cisco content SNAF and SNAA Workbook and Lab Guide, including exclusive additional labs Limited, concise lectures to summarize important points of technology demonstrated in labs


	Agenda
	SNAF 1. Introducing Cisco Security Appliance Technology and Features Functions of the three types of firewalls that are used to secure modern computer networks Technology and features of Cisco security appliances 2. Cisco Adaptive Security Appliance and PIX Security Appliance Families Cisco ASA security appliance models Cisco ASA security appliance licensing options 3. Getting Started with Cisco Security Appliances Four main access modes Security appliance file management system Security appliance security levels ASDM requirements and capabilities Use the CLI to configure and verify basic network settings, and prepare the security appliance for configuration via ASDM Verify security appliance configuration and licensing via ASDM 4. Essential Security Appliance Configuration Configure a security appliance for basic network connectivity Verify the initial configuration Set the clock and synchronize the time on security appliances Configure the security appliance to send syslog messages to a syslog server 5. Configuring Translations and Connection Limits Function of TCP and UDP protocols within the security appliance Function of static and dynamic translations Configure dynamic address translation Configure static address translation Set connection limits 6. Using ACLs and Content Filtering Configure the basic function of ACLs Configure additional functions of ACLs Configure active code filtering (ActiveX and Java applets) Configure the security appliance for URL filtering Use the packet tracer for troubleshooting 7. Configuring Object Grouping Object grouping feature of the security appliance and its advantages Configure object groups and use them in ACLs 8. Switching and Routing on Security Appliances Configure logical interfaces and VLANs Configure static routes and static route tracking Dynamic routing capabilities of Cisco security appliances Configure passive RIP routing 9. Configuring AAA for Cut-Through Proxy Define and compare AAA Install and configure Cisco Secure ACS Configure the local user database Define and configure cut-through proxy authentication Define and configure user authorization using downloadable ACLs Define and configure accounting 10. Configuring the Cisco Modular Policy Framework Cisco Modular Policy Framework feature for security appliances Functionality of class maps Functionality of policy maps Functionality of service policies Use ASDM to configure a service policy rule 11. Configuring Advanced Protocol Handling Need for advanced protocol handling How the security appliance implements inspection of common network applications Issues with multimedia applications and how the security appliance supports multimedia call control and audio sessions 12. Configuring Threat Detection Threat detection and statistics Configure basic threat detection and scanning threat detection Configure and view threat detection statistics 13. Configuring Site-to-Site VPNs Using Pre-Shared Keys How security appliances enable a secure VPN Perform the tasks necessary to configure security appliance IPsec support Commands to configure security appliance IPsec support Configure a VPN between security appliances 14. Configuring Security Appliance Remote Access VPNs Cisco Easy VPN Cisco VPN Client Configure an IPSec Remote Access VPN Configure Users and Groups 15. Configuring Cisco Security Appliances for SSL VPN SSL VPN and its purpose Use the SSL VPN Wizard to configure a basic clientless SSL VPN connection Configure SSL VPN policies Verify SSL VPN operations Customize the clientless SSL VPN portal 16. Configuring Transparent Firewall Mode Purpose of transparent firewall mode How data traverses a security appliance in transparent mode Enable transparent firewall mode Monitor and maintain transparent firewall mode 17. Configuring Security Contexts Purpose of security contexts Enable and disable multiple context mode Configure a security context Manage a security context 18. Configuring Failover Difference between hardware and stateful failover Difference between active/standby and active/active failover Security appliance failover hardware requirements Configure redundant interfaces How active/standby failover works Security appliance roles of primary, secondary, active, and standby How active/active failover works Configure active/standby cable-based and LAN-based failover Configure active/active failover Use remote command execution 19. Managing Security Appliances Configure Telnet access to the security appliance Configure SSH access to the security appliance Configure command authorization Recover security appliance passwords using general password recovery procedures Use TFTP to install and upgrade the software image on the security appliance SNAA 1. Advanced ASA NAT Configuration ACLs, NAT 0, Policy NAT 2. Advanced Protocol Handling Modular Policy Framework Protocol Application Inspection Multimedia Protocol Handling 3. Dynamic Routing and Switching VLANs Dynamic Routing Multicast 4. VPNs with IPSec IPSec and Digital Certificates ASA CA Server LAN-to-LAN with Digital Certificates IPSec VPN Client Remote Access with Digital Certificates Advanced Remote Access Features ASA 5505 as a Hardware Client VPN QoS 5. Security Services Modules ASA Services Modules Content Security and Control Advanced Inspection and Prevention


	Audience
	Security professionals looking for the most hands-on experience possible in 5 days Motivated, self-starters looking to get all the materials required to prepare for the SNAF and SNAA CCSP certification exams