Associated Certifications
NA
Required Exam(s)
NA
Instructorctclc admin
TypeOnsite Course
Duration
5 Days
Methods of Delivery
ILT, WEBEX, VIRTUAL
Price$3595.00
Buy NowBook Now

This course provides update training on the key features of the Cisco ASA, including the ASA FirePOWER Services Module and ASA Clustering. The main changes in SASAA v2.0 compared to SASAA v1.2 include updating the ASA release to 9.4.1. Added new content in the student guide and a new lab to cover some of the new ASA 9.3 and 9.4.1 features, and added content in the student guide on the new ASA 5506-X, 5508-X, and 5516-X. Also made few minor edits in the other modules. The ASA FirePower Services Module coverage is still based on the FirePOWER 5.3.1 software version in SASAA v2.0. The optional modules, like the end of life ASA CX, has been removed in SASAA v2.0.

Course Objectives

Who Should Attend

Prerequisite

Course Outline

Download Outline

Upon completing this course, the student will be able to meet these objectives:

  • An overview of the Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco IPS software module, Cisco ASASM, and Cisco ASA 1000V Cloud Firewall  How to implement the Cisco ASA Identity Firewall Feature, including the use of the Cisco CDA
  • How to implement the Cisco ASA CX, including the key functions of performing user identification through active or passive authentication, broad Application Visibility and Control (AVC), Web AVC, URL Filtering, and TLS/SSL decryption
  • How to configure Cisco ASA to integrate with Cisco Cloud Web Security to provide web security and filtering services through an SaaS model
  • Understand the IPv6 Enhancements in Cisco ASA Software 9.0 and later including IPv4 and IPv6 unified ACLs, NAT46, NAT64, NAT66, DHCPv6 relay, and IPv6 VPN features
  • Understand the Security Group Access Control (SGACL) feature in Cisco ASA Software 9.0 and later.
  • Examine the multicontext enhancements in Cisco ASA Software 9.0 and later
  • How to implement a Cisco ASA Cluster feature which allows as many as eight Cisco ASA appliances to be joined in a single cluster

The primary audience for this course is as follows:

  • Network engineers supporting Cisco ASA 9.x implementations

The knowledge and skills that a learner must have before attending this course are as follows:

  • Implementing Core Cisco ASA Security (SASAC) v1.0 or equivalent knowledge of the Cisco ASA

Module 1. Cisco ASA Product Family

  • Introducing the Cisco ASA 5500-X Series Next-Generation Firewalls
  • Introducing the Cisco ASAv
  • Implementing ASA 9.3 and 9.4.1 New Features
  • Introducing the Cisco ASASM

Module 2. Cisco ASA Identity Firewall

  • Describing the Cisco ASA Identity Firewall Solution
  • Setting Up Cisco CDA
  • Configuring Cisco CDA
  • Configuring Cisco ASA Identity Firewall
  • Verifying and Troubleshooting Cisco ASA Identity Firewall

Module 3. Cisco ASA FirePOWER Services

  • Installing the Cisco ASA FirePOWER Services Module
  • Managing the Cisco ASA FirePOWER Services Module Using the FireSIGHT Management Center
  • Describing the Cisco ASA 5506-X, 5508-X, and 5516-X FirePOWER Services

Module 4. Cisco ASA Cloud Web Security

  • Introducing Cisco ASA with Cisco Cloud Web Security
  • Configuring Cisco ASA with Cisco Cloud Web Security
  • Verifying Cisco ASA and Cloud Web Security Operations
  • Describing the Web Filtering Policy in Cisco ScanCenter
  • Describing Cisco ASA Cloud Web Security AMP and CTA

Module 5. Cisco ASA Clustering

  • Describing Cisco ASA Cluster Features
  • Describing Cisco ASA Cluster Terminology and Data Flows
  • Using the CLI to Configure a Cisco ASA Cluster
  • Using the ASDM to Configure a Cisco ASA Cluster
  • Verifying Cisco ASA Cluster Operations
  • Troubleshooting Cisco ASA Cluster Operations
  • Describing Cisco ASA Version 9.1.4 and Later Clustering Features

Module 6. Cisco ASA Security Group Firewall and CoA

  • Introducing Cisco Security Group Tagging
  • Configuring Cisco ASA Security Group Firewall
  • Describing the Cisco ASA 9.2.1 and Later Releases SGT Features
  • Describing the Cisco ASA 9.2.1 and Later Releases CoA Support

Labs

  • Cisco Learning Lab Remote Access
  • Cisco ASAv Basic Setup
  • Cisco ASA 9.3 and 9.4.1 New Features
  • Cisco CDA Configuration
  • Cisco ASA Identity-Based Firewall Configuration
  • Cisco ASA FirePOWER Services Module Installation
  • Cisco FireSIGHT Management Center Configuration
  • Cisco ASA Cloud Web Security Configuration
  • Cisco ASA Cluster Configuration