FIREWALL_2 - Deploying Cisco ASA Firewall Solutions V8.4

This course is based on the ASA 8.4 code. The Deploying Cisco ASA FIREWALL Solutions (FIREWALL) v2.0 course is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. It is a five-day instructor-led course that is aimed at providing network security engineers with the knowledge and skills that are needed to implement and maintain perimeter solutions that are based on Cisco ASA security appliances. At the end of the course, students will be able to reduce risk to their IT infrastructure and applications using Cisco ASA security appliance features, and provide detailed operations support for the ASA appliance.

This course is intended for the following audience:

• Network Security Engineers (NSEs)
• Engineers that want to understand Firewall capabilities as well as migration to ASA 8.4 Image

After completing this course, you will be able to:

• Evaluate the basic firewall technology, features, hardware models, and licensing options of the Cisco ASA security appliance.
• Implement and troubleshoot basic Cisco ASA security appliance connectivity and device management plane features.
• Configure and verify Cisco ASA security appliance network integration.
• Configure and verify Cisco ASA security appliance policy.
• Configure and verify high availability and virtualization on Cisco ASA security appliances.

Cisco Certified Network Professional - Security (CCNP Security)

Module 1: Cisco ASA Adaptive Security Appliance Introduction

• Lesson 1: Introducing Cisco ASA Adaptive Security Appliance Technologies
• Lesson 2: Identifying the Cisco ASA Adaptive Security Appliance Families
• Lesson 3: Identifying Cisco ASA Adaptive Security Appliance Licensing Options

Module 2: Basic Connectivity and Device Management

• Lesson 1: Preparing the Cisco ASA Adaptive Security Appliance for Network Integration
• Lesson 2: Managing Basic Cisco ASA Adaptive Security Appliance Network Settings
• Lesson 3: Configuring Cisco ASA Adaptive Security Appliance Device Management Features

Module 3: Network Integration

• Lesson 1: Configuring Cisco ASA Adaptive Security Appliance NAT Features
• Lesson 2: Configuring Cisco ASA Adaptive Security Appliance Basic Access Control Features
• Lesson 3: Configuring Cisco ASA Adaptive Security Appliance Routing Features
• Lesson 4: Configuring the Cisco ASA Adaptive Security Appliance Transparent Firewall

Module 4: Cisco ASA Adaptive Security Appliance Policy Control

• Lesson 1: Defining the Cisco ASA Adaptive Security Appliance Modular Policy Framework
• Lesson 2: Configuring Cisco ASA Adaptive Security Appliance Connection Policy and QoS Settings
• Lesson 3: Configuring Cisco ASA Adaptive Security Appliance Advanced Application Inspections
• Lesson 4: Configuring Cisco ASA Adaptive Security Appliance User-Based Policies

Module 5: Cisco ASA Adaptive Security Appliance High Availability and Virtualization

• Lesson 1: Configuring Cisco ASA Adaptive Security Appliance Interface Redundancy Features
• Lesson 2: Configuring Cisco ASA Active/Standby High Availability
• Lesson 3: Configuring Security Contexts on the Cisco ASA Adaptive Security Appliance
• Lesson 4: Configuring Cisco ASA Active/Active High Availability

Hands-on Lab Exercises

• Lab 2-1: Preparing the Cisco ASA for Network Integration
• Lab 2-2: Configuring the Cisco ASA for Secure Network Integration
• Lab 2-3: Configuring Management Features Lab 3-1: Configuring Basic Access Control
• Lab 3-1: Configuring Cisco ASA NAT
• Lab 3-2: Configuring Cisco ASA Basic Access Control Features
• Lab 3-3: Configuring Cisco ASA Transparent Firewall
• Lab 4-1: Configuring Modular Policy Framework, Basic Stateful Inspections, and QoS
• Lab 4-2: Configuring Transparent Firewall Mode
• Lab 4-3: Configuring Cut-Through Proxy
• Lab 5-1: Configuring Active/Standby High Availability
• Lab 5-2: Configuring Active/Active High Availability

The knowledge and skills that you must have before attending this course include concepts from the following Cisco Certification Courses:

• Cisco Certified Network Associate (CCNA) certification: -Interconnecting Cisco Network Devices 1 (ICND1) -Interconnecting Cisco Network Devices 2 (ICND2)
• Cisco Certified Network Associate Security (CCNA Security) certification: -Implementing Cisco IOS Network Security (IINS)
• In addition to the above prerequisite skills, learners will benefit from a working knowledge of the Microsoft Windows operating system.