Cisco ASA Express Security

This course has been designed to provide an understanding of Cisco's ASA solution portfolio. Students will learn how to successfully configure various aspects of the Cisco ASA components including Cisco ASA firewall features and functions, Cisco ASA with FirePOWER Services and Cisco ASA Remote Access VPN including Clientless and AnyConnect.

Target Audience

This course is aimed at engineers new to Cisco's Next Generation Firewall products and partners looking to acquire the Cisco Express Security accreditation.

Objectives

After completing this course you should be able to:

• Describe the Cisco ASA technology
• Describe how to configure network integration and manage network settings for the Cisco ASA
• Choose, configure, and troubleshoot Cisco ASA security appliance features
• Introduce and Deploy Cisco Remote Access VPN
• Describe NGFW capabilities provided by the Cisco ASA with FirePOWER Service Module and their configuration using FireSIGHT Management Center
• Describe the features of Cisco’s ASA Cloud Web Security
• Explore Cisco ASA Active/Standby High Availability
• Describe how to configure IPS for NGFW Settings and Filtering
• Describe the Cisco ASA NGFW WSE and AVC Solutions and how to Configure Cisco ASA NGFW Objects and Policies
• Describe the features of Cisco's ASA Cloud Web Security
• Explore Cisco ASA Active/Standby High Availability

Prerequisites

Attendees should meet the following prerequisites:

• Knowledge of IP Networking and IP Header Fields
• Basic Understanding of Firewall Uses and Roles
• Basic Understanding of Firewall Functions such as NAT, Application Inspection, Packet Filtering
• Basic understanding of Common Security Threats and Mitigation Techniques such as Malware, DoS, Intrusion Prevention, URL Filtering.

Testing and Certification

Recommended as preparation for the following exams:

• 500-260 - Cisco ASA Express Security Exam

Content

Module 1: Introducing Cisco ASA Solutions

• Firewall Technologies
• Cisco ASA Adaptive Security Appliance Features

Module 2: Exploring Cisco ASA Connectivity Basics

• Preparing the Cisco ASA Adaptive Security Appliance for Network Integration
• Managing Basic Cisco ASA Adaptive Security Appliance Network Settings
• Configuring Cisco ASA Adaptive Security Appliance Routing Features
• Backing up and Restoring Cisco ASA

Module 3: Configuring ASA Basic Access Control Foundation

• Configuring Cisco ASA Adaptive Security Appliance NAT Features
• Configuring Cisco ASA Adaptive Security Appliance Basic Access Control Features

Module 4: Deploying Cisco Remote Access VPN

• Deploying Basic Clientless VPN Solutions
• Cisco AnyConnect SSL VPN Overview
• Deploying a Cisco AnyConnect Client SSL VPN Solution

Module 5: Introducing the Cisco ASA FirePOWER Services (SFR) Module

• Introducing the Cisco ASA 5500-X Series FirePOWER Services (SFR) Module
• Cisco FireSIGHT Management Center

Module 6: Introducing Cisco ASA Cloud Web Security

• Introducing Cisco ASA with Cisco Cloud Web Security
• Configuring Cisco ASA with Cisco Cloud Web Security
• Verifying Cisco ASA Cloud Web Security Operations
• Describing the Web Filtering Policy in Cisco ScanCenter
• Describing Cisco ASA Cloud Web Security AMP and CTA 

Module 7: Introducing Cisco ASA High Availability

• Overview of Cisco ASA Active/Standby High Availability
• Configuring Cisco ASA Adaptive Security Appliance Active/Standby High Availability

Labs:

• Hardware Lab 1: Preparing Cisco ASA for Network Integration and Configuring Basic Settings
• Hardware Lab 2: Configuring NAT and Basic Access Control
• Hardware Lab 3: Configure Cisco AnyConnect Client SSL VPN Solution
• Hardware Lab 4: Cisco ASA 5500-X FirePOWER Services (SFR) Module Installation and Setup
• Hardware Lab 5: Cisco FireSIGHT Management Center Configuration
• Hardware Lab 6: Cisco ASA and Cloud Web Security Integration (Optional)