Cisco Training
Introduction | Certification | Courses & Dates | Learning Credits | Lab Sims
Securing Networks with PIX and ASA (SNPA) v5.0
Overview:
SNPA is a five day lab intensive instructor led course. This task-orientated course teaches the knowledge and skill needed to describe, configure, verify and manage the PIX and ASA security Appliance
Target Audience:
Channel Partner / Reseller /Customer /Employee
Prerequisites:
Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites: - Certification as a CCNA or the equivalent knowledge. - Basic knowledge of the Windows operating system - Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)
Course Outline
Reviewing Cisco Firewall Technology Features Firewalls
- Security Appliance Overview
Cisco PIX and ASA Security Appliance Families
- Cisco Pix Security Appliance Family
- PIX Security Appliance Licensing
- ASA 5500 Adaptive Security Appliance Licensing
- Cisco Catalyst 6500/7600 Firewall Services Module
Getting Started with Cisco Security Appliance
- User Interface
- File Management
- Adaptive Security Algorithm Security Levels
- Basic Firewall Appliance Configuration
- Examining the Firewall Appliance Status
- Time Setting and NTP Support
- Syslog Configuration
Translations and Connections
- Transport Protocols
- Network Address Translation
- Port Address Translation
- Static Command
- TCP Intercept and Connection Limits
- Connections and Translations
- Configuring Multiple Interfaces
Access Control Lists and Content Filtering
- ACLs
- Malicious Active Code Filtering
- URL Filtering
Object Grouping
- Overview of Object Grouping
- Getting Started with Object Groups
- Configure Object Groups
- Configure Nested Object Groups
Authentication, Authorization, and Accounting.
- Installation of Cisco Secure ACS for Windows 2000
- Security Appliance Access Authentication Configuration
- Cut-through Proxy Authentication Configuration
- Tunnel Access Authentication Configuration
- Authorization Configuration
- Downloadable ACLs
- Accounting Configuration
Switching and Routing
- Virtual LANS
- Static and Dynamic Routing
- OSPF
- Multicast
Modular Policy Framework
- Modular Policy Overview
- Class-Map
- Policy Map
- Service Policy
Advanced Protocol Handling
- Advanced Protocol Handling
- FTP Application Inspection
- HTTP Application Inspection
- Protocol Application Inspection
- Multimedia Support
Virtual Private Network Configuration
- Enabling a secure VPN
- How IPSec Works
- Configure VPN Connection Parameters
- IPSec Configuration Tasks
- Scale Security Appliance VPNs
Configuring Security Appliance Remote Access Using Cisco Easy VPN
- Introduction to the Cisco Easy VPN
- Overview of the Cisco VPN Client
- How the Cisco easy VPN Works
- Configuring Users and Groups
- Configuring the Easy VPN Server for Extended Authentication
- Configure Security Appliance Hub and Spoke VPNs
- Cisco VPN Client Manual Configuration tasks
- Working with the Cisco VPN Client
Configuring ASA for WebVPN
- WebVPN Feature Overview
- WebVPN End-User Interface
- Configure WebVPN General Parameters
- Configure WebVPN Servers and URLs
- Configure WebVPN Port Forwarding
- Configure WebVPN Email Proxy
- Configure WebVPN Content Filters and ACLs
Configuring Transparent Firewall.
- Transparent Firewall Mode Overview
- Enabling Transparent Firewall Mode
- Monitoring and Maintaining Transparent Firewall.
Configuring Security Contexts
- Security Context Overview
- Enabling Multiple Context Mode
- Configuring a Security Context
- Managing Security Contexts
Failover
- Understanding Failover
- Serial Cable-Based Failover Configuration
- Active/Standby LAN –Based Failover Configuration
- Active/Active Failover Configuration
Cisco Security Appliance Device Manager
- Describe ASDM and its Capabilities
- Explain ASDM hardware and software requirements
- Prepare the Security Appliance to use ASDM
- Navigate ASDM configuration windows.
- Navigate ASDM monitor windows
- Navigate ASDM multimode windows.
AIP- Security Services Module – Getting Started
- AIP-SSM Overview
- AIP-SSM SW Loading
- Initial AIP ASDM Configuration
- Configure a Security Policy on the ASA Security Appliance.
Managing Security Appliance
- Managing System Access
- Managing User Access Levels
- Managing Software, Licenses, and Configurations
- Image Upgrade and Activation Keys

External Links: Cisco System
