Browse Our Catalog

New to e-Learning

SkillSoft Worldwide

Download a free report

Chat with us now

< Return To Course List

Securing Networks with ASA Fundamentals (SNAF) 1.0 Expert Live with Encore


Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number


Overview/Description
This critical Cisco security course focuses on securing networks with Cisco security appliances and is a core element in the Cisco Certified Security Professional track. At the completion of this course students will be able to perform basic tasks with the Cisco ASA such as configuring the security appliance, using ACLs and content filtering, and configuring threat detection. Students will learn to enable such features as advanced protocol handling, AAA for cut-through proxy and transparent firewall mode.

Target Audience
This course is a necessity for any student that desires to learn more about securing networks using the latest in Cisco technologies. This course is also recommended for any student interested in professional level Cisco certifications or beyond.

Prerequisites
The SNAF course focuses on the technology required for securing complex networks. To fully benefit from this course, the student must be familiar with general networking concepts and have Cisco router operation and configuration experience. The student should also be familiar with the Windows Operating System. Successful completion of Interconnecting Cisco Networking Devices Part 1 is strongly recommended.

Certification
CCSP

Exams
642-524 SNAF

Included Labs

  • Initializing the Security Appliance
  • Configuring ACLs using ASDM
  • Preparing for AAA Services
  • Configuring a Site-to-Site VPN
  • Configuring a Secure SSL VPN
  • Command Authorization with Privileged Mode Passwords

    Skills
    This course covers the following hardware and software/operating system versions:

    • Latest IOS versions
    • Cisco ASA 5500 Series Adaptive Security Appliance and PIX 500 Series Security Appliance

    Outline
    Securing Networks with ASA Fundamentals (SNAF) 1.0

    • Module 1: Introducing Cisco Security Appliance Technology and Features
      • Firewalls
      • Security Appliance Essentials
    • Module 2: Introducing the Cisco ASA and PIX Security Appliance Families
      • Models and Features of Cisco Security Appliances
      • Cisco ASA Security Appliance Licensing
    • Module 3: Getting Started with Cisco Security Appliances
      • User Interface
      • File Management
      • Security Appliance Security Levels
      • Cisco ASDM Essentials and Operating Requirements
      • Preparing to Use Cisco ASDM
      • Navigating Cisco ASDM Windows
    • Module 4: Configuring a Security Appliance
      • Basic Security Appliance Configuration
      • Examining Security Appliance Status
      • Time Setting and NTP Support
      • Syslog Configuration
    • Module 5: Configuring Translations and Connection Limits
      • Transport Protocols
      • Understanding NAT
      • Understanding PAT
      • Static Translations
      • Connections and Translations
    • Module 6: Using ACLs and Content Filtering
      • ACL Configuration
      • Malicious Active Code Filtering
      • URL Filtering
      • Packet Tracer
    • Module 7: Configuring Object Grouping
      • Essentials of Object Grouping
      • Configuring and Using Object Groups
    • Module 8: Switching and Routing on Cisco Security Appliances
      • VLAN Capabilities
      • Static Routing
      • Dynamic Routing
    • Module 9: Configuring AAA for Cut-Through Proxy
      • Introduction to AAA
      • Authentication
      • Authorization
      • Accounting
      • Configuring the Local User Database
      • Installation of Cisco Secure ACS for Windows 2000
      • Cut-Through Proxy Authentication Configuration
      • Authentication for Access to Resources Example
      • Authentication Prompts and Timeouts
      • Authorization Configuration
      • Accounting Configuration
    • Module 10: Configuring the Cisco Modular Policy Framework
      • Modular Policy Framework Overview
      • Class Map Overview
      • Policy Map Overview
      • Configuring Modular Policies with Cisco ASDM
      • Configuring a Policy for Management Traffic
      • Displaying Modular Policy Framework Components
    • Module 11: Configuring Advanced Protocol Handling
      • Advanced Protocol Handling
      • Protocol Application Inspection
      • Multimedia Support
    • Module 12: Configuring Threat Detection
      • Threat Detection Overview
      • Basic Threat Detection
      • Scanning Threat Detection
      • Configuring and Viewing Threat Detection Statistics
    • Module 13: Configuring Site-to-Site VPNs Using Pre-Shared Keys
      • Secure VPNs
      • How IPSec Works
      • Preparing to Configure an IPSec VPN
      • Create IKE Policies for a Purpose
      • Define IKE Policy Parameters
      • Configure a Site-to-Site VPN Using Pre-Shared Keys
      • Modify the Site-to-Site VPN configuration
      • Test and Verify VPN Configuration
    • Module 14: Configuring Security Appliance Remote-Access VPNs
      • Introduction to Cisco Easy VPN
      • Overview of Cisco VPN Client
      • Transparent Tunneling
      • Allowing Local LAN Access
      • Adjusting the Peer Response Timeout Value
      • Configuring Remote-Access VPNs
      • Configuring Users and Groups
    • Module 15: Configuring the Cisco ASA for SSL VPN
      • SSL VPN Overview
      • Using the SSL VPN Wizard to Configure Clientless SSL VPN
      • Verifying Clientless SSL VPN Operations
    • Module 16: Configuring Transparent Firewall Mode
      • Transparent Firewall Mode Overview
      • How Data Traverses a Security Appliance in Transparent Mode
      • Configuring Transparent Firewall Mode
      • Monitoring and Maintaining Transparent Firewall Mode
    • Module 17: Configuring Security Contexts
      • Security Context Overview
      • Enabling Multiple Context Mode
      • Configuring Security Contexts
      • Managing Security Contexts
    • Module 18: Configuring Failover
      • Understanding Failover
      • Configuring Redundant Interfaces
      • Active/Standby LAN-Based Failover Configuration
      • Active/Active Failover Configuration
      • Remote Command Execution
    • Module 19: Managing the Security Appliance
      • Managing System Access
      • Configuring Command Authorization
      • Managing Configurations
      • Managing Images and Activation Keys


    Expected Duration (hours)
    30.0

    Lesson Objectives

    Securing Networks with ASA Fundamentals (SNAF) 1.0 Expert Live with Encore

  • Discuss the technology and features of Cisco security appliances
  • Identify the Cisco ASA and PIX security appliance models Describe the security appliance file management system
  • Describe security appliance security levels
  • Describe Cisco ASDM requirements and capabilities
  • Configure a security appliance for basic network connectivity
  • Configure and explain the functions of ACLs
  • Configure object groups and use them in ACLs
  • Configure logical interfaces and VLANs
  • Install and configure Cisco Secure ACS
  • Explain the Cisco Modular Policy Framework feature for security appliances
  • Describe how the security appliance implements inspection of common network applications
  • Describe threat detection and threat statistics
  • Explain how IPsec works
  • Configure an IPsec Remote-Access VPN
  • Use the SSL VPN Wizard to configure a basic Clientless SSL VPN connection
  • Explain how data traverses a security appliance in transparent mode
  • Configure a security context and allocate resources to a security context
  • Enable the stateful failover option for maximum availability
  • Recover security appliance passwords using general password recovery procedures

    • Course Number:
    LLCS0046