SNAF v1.

0 - Securing Networks with ASA Foundations

Course Length: 5 days Course Code: SNAF

• Cisco engineers who support the sale of ASA

Course Description security appliances p
Securing Networks with ASA Fundamentals (SNAF) v1.0
is a five-day, instructor-led, lab-intensive course, which
Prerequisites
will be delivered by Cisco Learning Partners. This task- • Cisco CCNA® certification or the equivalent
oriented course teaches the knowledge and skills knowledge
needed to configure, maintain, and operate Cisco ASA • Basic knowledge of the Microsoft Windows
5500 Series Adaptive Security Appliances. operating system
This course updates Securing Networks with PIX and • Familiarity with networking and security terms and
ASA (SNPA) v5.0. In SNAF 1.0, the ASDM 6.0 graphical concepts
user interface (GUI) is used for configuration and
monitoring. Although all lessons and labs are now GUI- Course Content
based, the commands for each configuration task are
also presented in the lessons for those who prefer to Lesson 1: Introducing Cisco Security Appliance
configure the security appliance via the command line Technology and Features
interface (CLI). In SNAF 1.0, lessons have been updated • Firewalls
to cover new features in Cisco ASA and PIX Security • Security Appliance Overview
Appliance Software Version 8.0(2), including the
following: Lesson 2: Introducing the Cisco ASA and PIX
• Threat detection Security Appliance Families
• Secure logging • Models and Features of Cisco Security Appliances
• Remote command execution in failover pairs • ASA Licensing
• Redundant interfaces
• Modular policy framework enhancements Lesson 3: Getting Started with Cisco Security
• Access control list renaming capability Appliances
• FTP support for SSL VPN • User Interface
• Onscreen keyboard for the SSL VPN • File Management
• Administrator-defined customization of all SSL VPN • Security Appliance Security Levels
user-visible content • ASDM Overview and Operating Requirements
• Personal bookmarks for SSL VPN users • Preparing to Use ASDM
• Navigating ASDM Windows
Target Audience
Lesson 4: Configuring a Security Appliance
The primary and secondary audience for this course is
as follows: • Basic Security Appliance Configuration
• Cisco customers who implement and maintain Cisco • Examining Security Appliance Status
ASA security appliances • Time Setting and NTP Support
• Cisco channel partners who sell, implement, and • Syslog Configuration
maintain ASA security appliances

www.inacom.com www.corebts.com
Lesson 5: Configuring Translations and Connection
Limits
• Transport Protocols
• Network Address Translation
• Port Address Translation
• Static Translations
• SYN Cookies and Connection Limits
• Connections and Translations
Lesson 6: Using ACLs and Content Filtering
• ACLs
• Malicious Active Code Filtering
• URL Filtering
• Packet Tracer
Lesson 7: Configuring Object Grouping
• Overview of Object Grouping
• Configuring Object Groups and Using Them in ACLs
Lesson 8: Switching and Routing on Cisco Security
Appliances
• VLAN Capabilities
• Static Routing
• Dynamic Routing
Lesson 9: Configuring AAA for Cut-Through Proxy
• Introduction to AAA
• Configuring the Local User Database
• Installing Cisco Secure ACS for Windows
• Cut-Through Proxy Authentication Configuration
• Authentication Prompts and Timeouts
• Authorization Configuration
• Accounting Configuration
Lesson 10: Configuring the Cisco Modular Policy
Framework
• Modular Policy Framework Overview
• Class Map Overview
• Policy Map Overview
• Using ASDM to Configure a Modular Policy
• Configuring a Management Policy
• Displaying Modular Policy Framework Commands
www.inacom.com
Lesson 11: Configuring Advanced Protocol Handling
• Advanced Protocol Handling
• Protocol Application Inspection
• Multimedia Support
Lesson 12: Configuring Threat Detection
• Threat Detection Overview
• Basic Threat Detection
• Scanning Threat Detection
• Configuring and Viewing Threat Detection Statistics
Lesson 13: Configuring Site-to-Site VPNs Using Pre-
Shared Keys
• Secure VPNs
• How IPsec Works
• Prepare to Configure an IPsec VPN
• Configuring a Site-to-Site VPN Using Pre-shared
Keys
• Modifying the Site-to-Site VPN Configuration
• Test and Verify VPN Configuration
Lesson 14: Configuring Security Appliance Remote-
Access VPNs
• Introduction to Cisco Easy VPN
• Overview of Cisco VPN Client
• Configuring Remote Access VPNs
• Configuring Users and Groups
Lesson 15: Configuring the Cisco ASA Security
Appliance for SSL VPN
• SSL VPN Overview
• Using the SSL VPN Wizard to Configure Clientless
SSL VPN
• Verifying Clientless SSL VPN Operations
Lesson 16: Configuring Transparent Firewall Mode
• Transparent Firewall Mode Overview
• How Data Traverses a Security Appliance in
Transparent Mode
• Configuring Transparent Firewall Mode
• Monitoring and Maintaining Transparent Firewall
Mode
www.corebts.com
Lesson 17: Configuring Security Contexts
• Security Context Overview
• Enabling Multiple Context Mode
• Configuring Security Contexts
• Managing Security Contexts
Lesson 18: Configuring Failover
• Understanding Failover
• Configuring Redundant Interfaces
• LAN-Based Active/Standby Failover Configuration
• Active/Active Failover Configuration
• Remote Command Execution
Lesson 19: Managing the Security Appliance
• Managing System Access
• Configuring Command Authorization
• Managing Configurations
• Managing Images and Activation Keys

www.inacom.com www.corebts.com