HBFITES

Who should attend

The primary audience for this course is as follows:

    Cisco customers who implement and maintain Cisco ASA security appliances

The secondary audience for this course is as follows:

    Cisco channel partners who sell, implement, and maintain ASA security appliances
    Cisco engineers who support the sale of ASA security appliances

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

    Cisco CCNA certification or the equivalent knowledge
    Basic knowledge of the Microsoft Windows operating system
    Familiarity with networking and security terms and concepts

Course Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

    Configure policy NAT based on traffic type
    Describe the layer 7 modular policy framework for the security appliance and how it is configured
    Describe the layer 7 advanced protocol handling capabilities of modular policy frame and how it is configured
    Identify the steps need to configure the security appliance to segment traffic with VLANs
    Identify the steps need to configure the security appliance to configure the ASA for dynamic routing.
    Explain the components of IPsec and the functionality of IPsec and explain what digital certificates are and how they are used
    Identify the steps needed to configure the security appliance to establish LAN-to-LAN tunnels with the digital certificate
    Identify the necessary steps to configure the IPSec VPN Client using digital certificates
    Identify the necessary steps to configure the security appliance for remote access using digital certificates
    Explain the advanced remote access features of the ASA
    Determine the necessary configuration for the ASA 5505 to be a VPN hardware client
    Identify the steps to configure QoS for VPN traffic
    List the steps needed to configure the WebVPN functionality of the security appliance
    Identify the basic clientless SSL VPN features of the security appliance
    Configure full network access SSL VPNs using the AnyConnect Client
    List the feature and functionality of the Cisco Secure Desktop
    Configure CSD and DAP for SSL VPN connections on the Cisco ASA
    Identify and list the characteristics of the services modules for the ASA
    Identify the steps needed to configure, inspect, and filter traffic with the Content Security and Control SSM
    Identify the steps needed to configure the security appliance to identify, alert, and defend against attacks

Course Content

This five-day, instructor-led, lab-intensive course, which will be delivered by HBFITES. This task-oriented course teaches the knowledge and skills needed advanced configuration, maintenance, and operation Cisco ASA 5500 Series Adaptive Security Appliances.