Overview

The SAEXS course provides an understanding of the Cisco ASA solution portfolio and successfully configures various aspects of the Cisco ASA components, including Cisco ASA Firewall features and functions, Cisco ASA with FirePOWER Services and Cisco ASA Remote Access VPN including Clientless and AnyConnect. 

Prerequisites:

It is strongly recommended that students have the following knowledge/skills prior to enrollment:

• Knowledge of IP networking and IP header fields
• Basic understanding of firewall uses and roles
• Basic understanding of firewall functions such as NAT, Application Inspection, Packet Filtering
• Basic understanding of common security threats and mitigation techniques such as malware, DoS, Intrusion Prevention, URL filter

Target Audience:

This course is intended for Network Security Engineers.

Course Objectives:

Upon successful completion of this course, students should be able to meet these overall objectives:

• Describe the Cisco ASA technology
• Describe how to configure network integration and manage network settings for the Cisco ASA
• Choose, configure, and troubleshoot Cisco ASA security appliance features
• Introduce and deploy Cisco Remote Access VPN
• Describe NGFW capabilities provided by the Cisco ASA with FirePOWER Service Module and their configuration using FireSIGHT Management Center
• Describe how to configure IPS for NGFW Settings and Filtering
• Describe the Cisco ASA NFWG WSE and AVC solutions and how to configure Cisco ASA NGFW Objects and Policies
• Describe the features of Cisco’s ASA Cloud Web Security
• Explore Cisco ASA Active/Standby High Availability

Course Outine:

Module 1: Introducing Cisco ASA Solutions

• Lesson 1: Firewall Technologies
• Lesson 2: Cisco ASA Adaptive Security Appliance Features

Module 2: Exploring Cisco ASA Connectivity Basics

• Lesson 1: Preparing the Cisco ASA Adaptive Security Appliance for Network Integration
• Lesson 2: Managing Basic Cisco ASA Adaptive Security Appliance Network Settings
• Lesson 3: Configuring Cisco ASA Adaptive Security Appliance Routing Features
• Lesson 4: Backing up and Restoring Cisco ASA

Module 3: Configuring ASA Basic Access Control Foundation

• Lesson 1: Configuring Cisco ASA Adaptive Security Appliance NAT Features
• Lesson 2: Configuring Cisco ASA Adaptive Security Appliance Basic Access Control Features

Module 4: Deploying Cisco Remote Access VPN

• Lesson 1: Deploying Basic Clientless VPN Solutions
• Lesson 2: Cisco AnyConnect SSL VPN Overview
• Lesson 3: Deploying a Cisco AnyConnect Client SSL VPN Solution

Module 5: Introducing the Cisco ASA FirePOWER Services (SFR) Module

• Lesson 1: Introducing the Cisco ASA 5500-X Series FirePOWER Services (SFR) Module
• Lesson 2: Cisco FireSIGHT Management Center
• Lesson 3: Module Summary

Module 6: Cisco ASA Cloud Web Security

• Lesson 1: Introducing Cisco ASA with Cisco Cloud Web Security
• Lesson 2: Configuring Cisco ASA with Cisco Cloud Web Security
• Lesson 3: Verifying Cisco ASA Cloud Web Security Operation
• Lesson 4: Describing the Web Filtering Policy in Cisco ScanCenter
• Lesson 5: Describing Cisco ASA Cloud Web Security AMP and CTA
• Lesson 6: Module Summary

Module 7: Introducing Cisco ASA High Availability

• Lesson 1: Overview of Cisco ASA Active/Standby High Availability
• Lesson 2: Configuring Cisco ASA Adaptive Security Appliance Active/Standby High Availability

LAB OUTLINE:

• Lab 1: Preparing Cisco ASA for Network Integration and Configuring Basic Settings
• Lab 2: Configuring NAT and Basic Access Control
• Lab 3: Configure Cisco AnyConnect Client SSL VPN Solution
• Lab 4: Cisco ASA 5500-X FirePOWER Services (SFR) Module Installation and Setup
• Lab 5: Cisco FireSIGHT Management Center Configuration
• Lab 6: Cisco ASA and Cloud Web Security Integration