Securing Networks with PIX and ASA

New Horizons Learning Centres of Australia
Brisbane, Melbourne, Newcastle, Perth, Sydney, Australia

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' Securing Networks with PIX and ASA (SNPA) v4.0 is a five-day, Instructor-led, lab-intensive course.
This task-oriented course teaches the knowledge and skills needed to configure, maintain and operate Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series Adaptive Security Appliances.

Skills Gained:

After completing this course, the student should be able to:

Describe the security appliance features, models, components and benefits.
Explain the four access modes.
Describe the security appliance file management system.
Discuss Adaptive Security Algorithm (ASA) and ASA security levels.
Configure a security appliance for basic network connectivity.
Use appropriate show commands to verify initial configuration.
Explain how to set the clock and synchronize the time on security appliances.
Configure the security appliance to send syslog messages to a syslog server.
Describe how the TCP and UDP protocols function within the security appliance.
Describe how static and dynamic translations function.
Configure the security appliance to permit outbound connections.
Explain the security appliance PAT feature.
Configure and explain the function of ACLs and NAT 0 ACLs.
Configure active code filtering (ActiveX and Java applets).
Configure the security appliance for URL filtering.
Describe the object grouping feature of the security appliance and its advantages.
Configure object and nested object groups.
Use object groups in ACLs.
Define and describe the differences between authentication, authorization and accounting.
Name the AAA protocols supported by the security appliance.
Define and configure security appliance access, cut-through proxy and tunnel access authentication.
Define and configure AAA accounting.
Install and configure basic Cisco Secure ACS functions.
Configure a class map, policy map and service policy.
Describe the need for advanced protocol handling.
Describe the inspect command.
Configure protocol inspection.
Describe how the security appliance implements FTP and HTTP protocol inspection.
Describe how the security appliance implements remote shell (rsh), SQL, SMTP, ICMP and SNMP protocol inspection.
Describe the issues with multimedia applications.
Describe how the security appliance supports multimedia call control and audio sessions.
Identify how the security appliance enables a secure VPN.
Identify the tasks and commands to configure security appliance IPSec support.
Configure a VPN between security appliances.
Describe and configure the Easy VPN Server.
Describe and configure the Easy VPN Remote using the Cisco VPN Client.
Explain the purpose of WebVPN.
Describe the WebVPN end-user interface.
Configure WebVPN general parameters, servers and URLs and port forwarding.
Define e-mail proxy servers.
Configure WebVPN content filters and ACLs.
Explain the purpose of transparent firewall mode.
Enable transparent firewall mode.
Monitor and maintain transparent firewall mode.
Explain the purpose of security contexts.
Enable and disable multiple context mode.
Configure and manage a security context.
Describe the difference between hardware and stateful failover.
Describe the difference between active/standby and active/active failover.
Define the security appliance hardware failover requirements.
Describe how active/standby failover works.
Explain the security appliance roles of primary, secondary, active and standby.
Configure active/standby cable-based and LAN-based failover.
Configure active/active failover.
Install ASDM and use it to configure the security appliance.
Use ASDM to monitor the security appliance.
Compare and contrast promiscuous and in-line modes.
Explain the steps necessary to load software on an AIP-SSM.
Configure the AIP-SSM setup parameters.
Configure a security policy on an ASA security appliance using ASDM.
Configure Telnet and SSH access to the security appliance console.
Configure command authorization.
Recover the security appliance passwords using general password recovery procedures.
Use TFTP to install and upgrade the software image on the security appliance.
Target Audience:

Cisco customers who implement and maintain PIX Security Appliance and ASA security appliances.
Cisco channel partners who sell, implement and maintain PIX Security Appliance and ASA security appliances.
Cisco systems engineers who support the sale of PIX Security Appliance and ASA security appliances.


Pre-requisites:

Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites:

Certification as a CCNA or the equivalent knowledge.
Basic knowledge of the Windows operating system.
Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications.

Outline:

The course contains these components:

Course Introduction.
Cisco Security Appliance Technology and Features.
Cisco PIX Security Appliance and ASA Adaptive Security Appliance Families.
Getting Started with Cisco Security Appliances.
Translations and Connections.
Access Control Lists and Content Filtering.
Object Grouping.
Authentication, Authorization and Accounting.
Switching and Routing.
Modular Policy Framework.
Advanced Protocol Handling.
Virtual Private Network Configuration.
Configuring Security Appliance Remote Access using Cisco Easy VPN.
Configuring ASA for WebVPN.
Configuring Transparent Firewall.
Configuring Security Contexts.
Failover.
Cisco Security Appliance Device Manager.
AIP-Security Services ModuleGetting Started.
Managing Security Appliances.
Configuring PIX Security Appliance Remote Access using Cisco Easy VPN.
Firewall Services Module.
Lab Guide.

...''

Phone:1300 794 006

School Address:

Level 6, St. Martins Tower
31 Market Street
Sydney NSW 2000 Australia

Level 4, 200 Creek Street,
Brisbane, QLD 4000

Level 2, 31 Queen Street,
Melbourne, VIC 3000

9 Denison Street,
Newcastle West NSW 2302


Jobs & Resumes: Brisbane, Melbourne, Newcastle, Perth, Sydney
Houses & Roommates: Brisbane, Melbourne, Newcastle, Perth, Sydney
Travel Agencies: Brisbane, Melbourne, Perth, Sydney

Search other schools for Securing Networks with PIX and ASA training resources.

Programming with C#
ZENworks 7 Desktop Management Administration
QoS - Implementing Cisco Quality of Service 2.2
Microsoft Visual Studio 2008
GroupWise 7.0 Administration
Routing & Switching Solutions for Systems Engineers
SUSE Linux Enterprise Server 10 Administration
Visual C#.NET
Novell Open Enterprise Server for NetWare
Programming with Microsoft Visual Basic .NET
Developing XML Web Services Using Microsoft ASP.NET
CompTIA IT Project+
Visual Studio 2008
Linux
PRINCE2 - Foundation
PRINCE2 - Practitioner
Visual Studio 2008: ADO.NET 3.5
VMware Infrastructure 3.5 Enterprise
Advanced UNIX Programming

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Facts: We serve the schools and students around the world. Major visitors come from India, United States, United Kingdom, Canada, Australia, Philippines, Malaysia, Singapore and South Africa.