FIREWALL - Deploying Cisco ASA Firewall Solutions

We have enhanced this course and added depth to the standard labs, using a topology that simulates a typical production network. You'll use ASA 5520 appliances to work through configuring access control to and from your network.

Course Outline

Part of Cisco's recent announcement for the CCNP Security certification program, includes two new courses, FIREWALL and VPN which replace SNAF and SNAA.

If you have already completed some of the exams for your CCNP Security, you have a limited time to finish. For complete details, and a suggested training path for your particular situation, visit our CCNP Security page.

Learn the skills needed to configure, maintain, and operate the firewall features of the Cisco ASA 5500 SeriesAdaptive Security Appliances (ASAs).

We have enhanced this course and added depth to the standard labs, using a topology that simulates a typical production network. You'll use ASA 5520 appliances to work through configuring access control to and from your network. You will also examine the PIX firewall and the Firewall Services Module (FWSM).

A Global Knowledge Exclusive: Bonus Lab Credits

You'll receive five extra FIREWALL e-Lab credits (good for 30 days) to review a topic after class, refine your skills, or get in extra practice-whatever lab activities complete your training. The credits can also be used towards our one-of-a-kind ASA 8.3 labs.

What You'll Learn

• Technology and features of the Cisco ASA
• Cisco ASA product family
• How ASAs and Cisco PIX Security Appliances protect network devices from attacks
• Bootstrap the security appliance
• Prepare the security appliance for configuration via the Cisco Adaptive Security Device Manager (ASDM)
• Launch and navigate ASDM
• Perform essential security appliance configuration using ASDM and the CLI
• Configure dynamic and static address translations
• Configure access policy based on Access Control Lists (ACLs)
• Use object groups to simplify ACL complexity and maintenance
• Use the Modular Policy Framework to provide unique policies to specific data flows
• Handle advanced protocols with application inspection
• Deep packet inspection of application layer traffic
• Troubleshoot with Syslog, Packet Tracer, and packet capture
• Configure access-control based on authenticated users
• Configure threat detection to meet security policy requirements
• Configure the security appliance to run in transparent firewall mode
• Enable, configure, and manage multiple contexts to meet security policy requirements
• Select and configure the type of failover that best suits the network topology
• Monitor and manage an installed security appliance
• Initialize ASA Security Service Modules including the AIP-SSM and CSC-SSM

Who Needs to Attend

Anyone who implements and maintains Cisco ASA firewalls Network security specialists and technicians Candidates seeking CCNP Security certification

Course Outline

1. Cisco ASA Adaptive Security Appliance

• Technology and Features
• ASA Family

2. Basic Connectivity and Device Management

• Cisco ASA and Cisco ASDM
• Interfaces and Static Routing
• Basic Device Management Features
• Management Access

3. Cisco ASA Access Control Features

• Basic Access Control
• Modular Policy Framework
• Basic Stateful Inspection Features
• Application-Layer Policies
• Advanced Access Controls
• Resource Limits and Guarantees
• User-Based Policies

4. Cisco ASA Network Integration Features

• Network Address Translation
• Transparent Firewall Operations

5. Cisco ASA Virtualization and High Availability Features

• Virtualization Features
• Redundant Interfaces
• Active/Standby High Availability Failover
• Active/Active High Availability Failover

6. Cisco ASA Security Service Modules

• AIP-SSM and AIP-AIP-SSC Module Integration
• CSC-SSM Module Integration

Labs

• Lab 1: Enhanced - Preparing for Administration
• Lab 2: Enhanced - Fundamental Configuration
• Lab 3: Enhanced - AAA for Administrative Access
• Lab 4: Enhanced - Network Address Translation
• Lab 5: Enhanced - Basic Access Control
• Lab 6: Exclusive - Troubleshooting Tools
• Lab 7: Enhanced - Basic Protocol Inspection
• Lab 8: Enhanced - Advanced Protocol Inspection
• Lab 9: Enhanced - Advanced Access Control
• Lab 10: Enhanced - User Based Policies
• Lab 11: Enhanced - Transparent Firewall and Security Contexts
• Lab 12: Enhanced - Active/Standby Failover
• Lab 13: Enhanced - Active/Active Failover

This course has extended hours - 8:30am - 6:00pm each day - to give you the most complete training experience possible. There is a lot of in-depth material included on these exams, and we want to make sure you have the proper time to absorb and understand it.

Additional Details

Pre-Requisites

- ICND2 - Interconnecting Cisco Network Devices 2 - IINS - Implementing Cisco IOS Network Security

Certificates offered

35 Cisco Learning Credits

Cancellation Policy

We require 16 calendar days notice to reschedule or cancel any registration. Failure to provide the required notification will result in 100% charge of the course. If a student does not attend a scheduled course without prior notification it will result in full forfeiture of the funds and no reschedule will be allowed. Within the required notification period, only student substitutions will be permitted.

Reschedules are permitted at anytime with 16 or more calendar days notice. Enrollments must be rescheduled within six months of the cancel date or funds on account will be forfeited.

Map & Reviews

Global Knowledge
[ View Provider's Profile ]

Global Knowledge Toronto Bloor St
2 Bloor Street West
Suite 1200
Toronto, Ontario
Canada   M4W 3E2

Reviews

 

This course has not yet been rated by one of our members.

If you have taken a course through this vendor please log into your account and leave feedback for this vendor. You will be helping ensure our members get directed to the best training facilities.

Here are some reviews of the training vendor.

   

- do we get a certifiacate for completing the courseÉ - although the instructor did give us excercises to do I would have liked a few more - almost like a test, so that I made sure I retained and understood what was taught. I`m a learn to do by doing person and like the instrutor lead courses so I can have someone there to explain in my terms how things work. I`ll have to really use the online excercises to make sure Ì am confident when I need to do something in Excel.

Reviewed by Delores P. 2012

   

Should be time allocated for questions and answer

Reviewed by Vinod P. 2012

   

The instructor was excellent as was the hands-on learning approach. The only thing I took issue with was the fact that there were a lot of bilingual persons taking the course and they tended to ask questions in French, during this English class. The instructor was trying very hard to explain everything in both languages, but I felt that these students should have requested a French-speaking classroom setting if they wanted to speak French.

Reviewed by Sheila D. 2012

   

Very professional. Facility clean and comfortable.

Reviewed by Christine P. 2012

   

For the cost of this course, a hard copy of the course handout should be provided as the classes follows the handout word for word.

Reviewed by Caroline P. 2012

   

The facilities at Global Knowledge were great. The Instructor was very knowlegable and made it easy to learn the material. It was a very good experience:)

Reviewed by Tonia L. 2012

   

Note: We had 2 different trainers during this 3 day course. Course: Terminology should reflect North America and be consistent with our business lingo.

Reviewed by Harman M. 2012

   

Found the course very informative. I had little exposure to Sharepoint and learned a number of things I didn't know. Plan to take the next level of training

Reviewed by Michael R. 2011

   

A charged mannul would be provided for students to make notes whereever they think instructions are important as reminders

Reviewed by jinxiu z. 2011

   

The course is so expensive to be payed by oneself. In almost all the others participants their companies pay the fee.

Reviewed by Ricardo T. 2011

   

No course books were provided for us to take.

Reviewed by Hala M. 2011

   

Course was very detailed but more time would be helpful during workshops. An additional day would help lessen the course load.

Reviewed by Roydon F. 2011

   

should have discuss some case studies,,overall A+

Reviewed by Syed A. 2011

   

Our instructor was very knowlegable and he provided excellent real life stories.

Reviewed by Stephen W. 2011

   

The course was very relevant. I was able to apply the knowledge I aquired in the course to my job on the very next day. The only complaint I have is with the temperature of the room. It was freezing! Students has to wear a jacket or sweater. We were told the temp gage was shared with another classroom that was quite warm so they had turned the temp very low causing our room to be very uncomfortable.

Reviewed by Yasmine I. 2011

   

Given the cost of the course, the hardcopy of the manual should have been provided. It would have been useful to make notes alongside the material as we went along.

Reviewed by Jeff P. 2011

   

I am very disappointed with the handouts. I was told I could go online and download a copy of the manual, the problem is that I would like the printed copy of the manual. I chatted online with one of your technitian who was unable to help me. Then I was told someone would contact me by phone to help me. That never happened. When taking a training course, a person EXPECTS to leave the course with ALL the material.

Reviewed by Betty M. 2011

   

Great course provider, keep it on your roaster

Reviewed by Catherine G. 2011

   

Course content and labs were very good, everything worked as expected.

Reviewed by Francisco C. 2011

   

I really enjoyed this course and was surpised how ell everything was run...enjoyed the instructer very much (Par) and would like to take an other course with him. I wish we could have taken the work book home with us though!!!

Reviewed by gail h. 2010