Beskrivelse

Dette kursus gør dig i stand til at konfigurere og vedligeholde Cisco ASA Series Adaptive Security firewall'en på netværket. FIREWALL, Deploying Cisco ASA Firewall Features er en del af CCNP Security certificeringen.

Forudsætninger

Attendees should meet the following prerequisites:

- CCNA Certification, ICND1 and ICND2 or CCNABC Required

- CCNA Security Certification IINS Required.

- Working knowledge of Microsoft Windows OS is an advantage.

Målgruppe

Anyone who implements and maintains Cisco ASA firewalls, Network security specialists and technicians, delegates seeking CCNP Security certification.

Emner

After you complete this course you will be able to:

Evaluate the basic technology, features, and hardware models of the Cisco ASA adaptive security appliance product line

Implement and maintain basic Cisco ASA adaptive security appliance connectivity and device management plane features

Implement and maintain data plane access control features of the Cisco ASA adaptive security appliance product family

Implement and maintain Cisco ASA adaptive security appliance features that integrate itwith the local and global routing and switching infrastructure

Implement and maintain Cisco ASA adaptive security appliance virtualization and highavailability features

Evaluate Cisco ASA adaptive security appliance SSM modules, their major features, and integrate them with the Cisco ASA adaptive security appliance



Indhold

Introduction tothe Cisco ASA Adaptive Security Appliance

Introducing Cisco ASA Adaptive Security Appliance Technology and Features

Introducing the Cisco ASA Adaptive Security Appliance Family

Implementation ofBasic Connectivity and Device Management

Getting Started with the Cisco ASA Adaptive Security Appliance and Cisco ASDM

Configuring Interfaces and Static Routing

Configuring Basic Device Management Features

Configuring Management Access

Deployment of Cisco ASA Adaptive Security Appliance Access Control Features

Configuring Basic Access Control

Using Cisco ASA Adaptive Security Appliance Modular Policy Framework

Tuning Basic Stateful Inspection Features

Configuring Application-Layer Policies

Configuring Advanced Access Controls

Configuring Resource Limits and Guarantees

Configuring User-Based Policies (Cut-Through Proxy)

Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features

Deploying Network Address Translation

Configuring Cisco ASA Adaptive Security Appliance Transparent Operations

Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High Availability Features

Deploying Cisco ASA Adaptive Security Appliance Virtualization Features

Deploying Cisco ASA Adaptive Security Appliance Redundant Interfaces

Deploying Active/Standby High Availability Failover

Deploying Active/Active High Availability Failover

Integration of Cisco ASA Adaptive Security Appliance Security Service Modules

Introducingthe Cisco ASA Adaptive Security Appliance Security Service Modules

Integrating the Cisco ASA Adaptive Security Appliance AIP-SSM and AIP-SSC Modules

Integrating the Cisco ASA Adaptive Security Appliance CSC-SSM Module

Labs

Lab 2-1: Configuring Basic Connectivity

Lab 2-2: Configuring Management Features

Lab 3-1: Configuring Basic Access Control

Lab 3-2: Tuning Basic Cisco ASA Adaptive Security Appliance Stateful Inspection Features

Lab 3-3: Configuring Application-Layer Policies

Lab 3-4: Configuring Advanced Access Controls

Lab 3-5: Configuring User-Based Policies (Cut-Through Proxy)

Lab 4-1: Configuring Cisco ASA Adaptive Security Appliance NAT

Lab 4-2: Configuring Transparent Firewall Mode

Lab 5-1: Deploying a Cisco ASA Adaptive Security Appliance Active/Standby Failover

Lab 5-2: Deploying a Cisco ASA Adaptive Security Appliance Active/Active Failover

Appendixes

Appendix A: Configuring Routing on the Cisco ASA Adaptive Security Appliance

Appendix B: Lab (Optional): Configuring Dynamic Routing



Certificering

Recommended preparation for exam(s):

642-647 -Deploying Cisco ASA Firewall Solutions

FIREWALL is one of four courses required for the Cisco Certified Network Professional for Security Career Certification.