CSNAA: Securing Networks with ASA Advanced

Prerequisites:

SNAF (Securing Networks with ASA Fundamental)

Course Description:

Securing Networks with ASA Advanced (SNAA) v1.0 is a new course to replace the Cisco Secure Virtual Private Networks (CSVPN) & Securing Networks with PIX and ASA (SNPA) courses. In order to cover new features in ASA software version 8.0 and to fully cover the VPN features of the ASA, the content of SNPA was split into two courses, one that covers the fundamentals and on that covers more advanced topics. Content that has been moved to SNAA includes the following: configuring the ASA 5505 dual-ISP support, configuring ASA 5505 VLANs, configuring policy NAT, installing and configuring the Cisco Secure Desktop, configuring the security appliance to pass multicast traffic, configuring Layer 7 class maps and policy maps, and initializing the AIP-SSM and CSC-SSM. SNAA also utilizes the graphical user interface instead of the command line interface for explanation and discussions of configuring the ASA. The SNAA 1.0 course takes a task-oriented approach to teaching the skills to deploy, configure, and administer the Cisco ASA using a fictional company's deployment of an ASA which is based on real world scenarios.

Who should attend:

• Channel Partner / Reseller
• Customer
• Employee

Upon completing this course, the learner will be able to meet these overall objectives:

• Configure policy NAT based on traffic type.
• Describe the layer 7 modular policy framework for the security appliance and how it is configured.
• Describe the layer 7 advanced protocol handling capabilities of modular policy frame and how it is configured.
• Determine the necessary configuration for the ASA 5505 to be a VPN hardware client.
• Configure CSD and DAP for SSL VPN connections on the Cisco ASA.
• Identify the steps needed to configure, inspect, and filter traffic with the Content Security and Control SSM.
• Identify the steps needed to configure the security appliance to identify, alert, and defend against attacks.

This course includes the following modules:

Advanced ASA NAT Configuration

• ACLs, NAT 0, Policy NAT

Advanced Protocol Handling

• Modular Policy Framework
• Protocol Application Inspection
• Multimedia Protocol Handling

Dynamic Routing and Switching

• VLANs
• Dynamic Routing
• Multicast

VPNs with IPSec

• IPSec and Digital Certificates
• ASA CA Server
• LAN-to-LAN with Digital Certificates
• IPSec VPN Client
• Remote Access with Digital Certificates
• Advanced Remote Access Features
• ASA 5505 as a Hardware Client
• VPN QoS

Security Services Modules

• ASA Services Modules
• Content Security and Control
• Advanced Inspection and Prevention