Introduction

The Implementing Advanced Cisco ASA Security v2.0 course provides updated training on the key features of the Cisco ASA, as well as hands on labs covering up to the ASA 9.4.1 release. The goal of the course is to be able to implement the key features of the Cisco ASA, including Cisco ASA FirePOWER Services, ASA Cloud Web Security, ASA Identity Firewall, ASA Clustering and the Virtual ASA (ASAv).

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

Implementing Core Cisco ASA Security (SASAC) OR equivalent knowledge of the Cisco ASA

Course Objectives

Upon completing this course, you should be able to meet the following objectives:

Describe the Cisco ASA 5500-X Series of next generation, midrange platforms and the Cisco ASA 5585-X dual firewall mode
Describe the Virtual Cisco ASA (ASAv)
Describe the Cisco ASASM
Implement Cisco ASA identity firewall policies
Describe the Cisco ASA Identity Firewall feature
Configure Cisco CDA to integrate with the active directory server, Cisco ASA, and syslog server
Configure the Identity firewall policies on Cisco ASA
Verify and troubleshoot identity firewall operations
Install and set up the Cisco FirePower services module (SFR)
Manage the ASA FirePower Services module using the FireSight management center
Implement Cisco ASA Cloud web security
Configure Cisco ASA to integrate with Cisco Cloud Web Security
Describe basic web filtering policy configurations in Cisco ScanCenter
Describe Cisco cloud web security advanced Malware protection and threat analytics
Implement Cisco ASA Clustering
Configure a Cisco ASA Cluster using CLI
Describe Cisco ASA Security Group Firewall and change of Authorization Support
Describe the Cisco ASA post 9.0 release new SGT features

Target Audience

The primary audience for this course is as follows:

Network engineers supporting Cisco ASA 9.x implementations

Course Content

1. Course Introduction

Overview

Course Goal and Objectives
Course Flow
Additional References
Your Training Curriculum
2. Cisco ASA Product Family
Introducing the Cisco ASA 5500-X Series Next-Generation Firewalls
Introducing the Cisco ASAv
Implementing ASA 9.3 and 9.4.1 New Features
Introducing the Cisco ASASM
3. Cisco ASA Identity Firewall
Describing the Cisco ASA Identity Firewall Solution
Setting Up Cisco CDA
Configuring Cisco CDA
Configuring Cisco ASA Identity Firewall
Verifying and Troubleshooting Cisco ASA Identity Firewall
4. Cisco ASA FirePower Service
Installing the Cisco ASA FirePower Services Module
Managing the Cisco ASA FirePower Services Module using the FireSight Management center
Describing the Cisco ASA 5506-X, 5508-X, and 5516-X FirePower Services
5. Cisco ASA Cloud Web

Security

Introducing Cisco ASA Cisco Cloud Web Security
Configuring Cisco ASA with Cisco Cloud Web Security
Verifying Cisco ASA Cloud Web Security Operations
Describing the web filtering Policy in Cisco ScanCenter
Describing Cisco ASA Cloud Web Security AMP and CTA
6. Cisco ASA Clustering
Describing the Cisco ASA cluster features
Describing Cisco ASA Cluster Terminology and Data Flows
Using the CLI to configure a Cisco ASA Cluster
Using the ASDM to configure a Cisco ASA Cluster
Verifying Cisco ASA Cluster Operations
Troubleshooting Cisco ASA Cluster Operations
Describing Cisco ASA version 9.1.4 and later clustering features
7. Cisco ASA Security Group

Firewall and COA

Introducing Cisco Security Group Tagging
Configuring Cisco ASA Security Group Firewall
Describing the Cisco ASA 9.2.1 and later releases SGT features
Describing the Cisco ASA 9.2.1 and later releases CoA support

Associated Certifications & Exam

On successful completion of this course students will receive a Torque IT attendance certificate.

Programme scope, delivery arrangements and suitability are confirmed during enquiry.