This course supports network security engineers goals in choosing, configuring, and troubleshooting the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce risk to IT infrastructure and its applications.
Who Should Attend
Channel Partner / Reseller Customer Employee
Prerequisite(s) or equivalent knowledge
- Cisco® Implementing Cisco® IOS Network Security (IINS)
- Cisco® Interconnecting Cisco® Networking Devices Part 1 (ICND1)
- Cisco® Interconnecting Cisco® Networking Devices Part 2 (ICND2)
Outline
Lesson 1: Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem; Deploying Cisco ASA Adaptive Security Appliance IPsec VPN Solutions
- Evaluating the Cisco ASA Adaptive Security Appliance Software Architecture
- Deploying Cisco ASA VPN Solutions (VPN)
- Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture
- Applying Common Cisco ASA Adaptive Security Appliance Remote Access VPN Configuration Concepts
Lesson 2: Deploying Cisco ASA Adaptive Security Appliance IPsec VPN Solutions
- Deploying Basic Site-to-Site IPsec VPNs
- Deploying Certificate Authentication in Site-to-Site IPsec VPNs
- Deploying the Cisco IPsec VPN Client
- Deploying Basic Easy VPN Solutions
- Deploying Advanced Authentication in Cisco Easy VPN Solutions
- Deploying the Cisco ASA 5505 Adaptive Security Appliance as an Easy VPN Hardware Client
- Lab 2-1: Deploying a Basic Cisco ASA Adaptive Security Appliance IPsec Site-to-Site VPN
- Lab 2-2: Deploying a Certificate-Based Cisco ASA Adaptive Security Appliance IPsec Site-to-Site VPN
- Lab 2-3: Deploying Basic Easy VPN
- Lab 2-4: Deploying Advanced Easy VPN Server with Certificate-based Authentication
- Lab 2-5: Deploying the Cisco ASA 5505 Adaptive Security Appliance as a Hardware Easy VPN Client
Lesson 3: Deploying Cisco ASA Adaptive Security Appliance AnyConnect Remote Access VPN Solutions
- Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN Solution
- Advanced Deployment of the Cisco AnyConnect VPN Client
- Deploying Advanced Authentication in AnyConnect Full Tunnel SSL VPNs
- Lab 3-1: Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN Using Local Password Authentication
- Lab 3-2: Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
- Lab 3-3: Deploying the Cisco AnyConnect Client with Centralized Management
Lesson 4: Deploying Cisco ASA Adaptive Security Appliance Clientless Remote Access VPN Solutions
- Deploying a Basic Clientless VPN Solution
- Deploying Advanced Application Access for Clientless SSL VPN
- Deploying Advanced Authentication and Single Sign-On in a Clientless SSL VPN
- Customizing the Clientless SSL VPN User Interface and Portal
- Lab 4-1: Configuring Basic Clientless VPN Access
- Lab 4-2: Configuring Advanced Application Access in Clientless SSL VPNs
- Lab 4-3: Customizing the SSL VPN Portal
Lesson 5: Deploying Advanced Cisco ASA Adaptive Security Appliance VPN Solutions
- Deploying VPN Authorization, Access Control, and Accounting
- Deploying Cisco Secure Desktop in SSL VPNs
- Deploying Dynamic Access Policies
- Deploying High Availability and High Performance in SSL and IPsec VPNs
- Lab 5-1: Deploying SSL VPN Access Policies and Authorization Parameters
- Lab 5-2: Deploying Cisco Secure Desktop and DAP in SSL VPNs
- Lab 5-3: Configuring a Load Balancing SSL VPN Cluster