This course teaches the knowledge & skills to configure, maintain & operate Cisco PIX 500 Series Security Appliances & Cisco ASA 5500 Series Adaptive Security Appliances.

Duration: 5 Days

Describe the Security Appliance features, models, components & benefits
Discuss Security Appliance interface security levels
Configure a Security Appliance for basic network connectivity
Configure the Security Appliance to send syslog messages to a syslog server
Describe how the TCP & UDP protocols function with the Security Appliance
Describe how static & dynamic translations function
Explain the Security Appliance Port Address Translation (PA) feature
Configure & explain the function of ACLs & NAT 0 ACLs
Configure active code filtering (ActiveX & Java applets)
Configure the Security Appliance for URL filtering
Describe the object grouping feature of the Security Appliance & its advantages
AAA protocols supported by the Security Appliance
Configure AAA authentication for Security Appliance access
Define & configure cut-through proxy authentication & tunnel access authentication
Define & configure AAA accounting
Install & configure basic Cisco Secure ACS functions
Describe how the Security Appliance implements FTP & HTTP protocol inspection
Describe how the Security Appliance implements remote shell (rsh), SQL, SMTP, ICMP & SNMP protocol inspection
Identify the tasks & commands to configure Security Appliance IPSec support
Describe & configure the Easy VPN Server for remote access VPN using the Cisco VPN Client
Configure WebVPN general parameters, servers, URLs & Port forwarding
Monitor & maintain transparent firewall mode
Configure & manage security context
Define the Security Appliance hardware failover requirements
Configure Active/Standby Failover
Configure Active/Active Failover
Install ASDM & use it to configure the Security Appliance
Configure the AIP-SSM setup parameters
Configure a security policy on an ASA Security Appliance using ASDM
Configure Telnet & SSH access to the Security Appliance console
Recover the Security Appliance passwords using general password recovery procedures
Use TFTP to install & upgrade the software image on the Security Appliance

Course Introduction
Cisco Security Appliance Technology & Features
Cisco PIX Security Appliance & ASA Adaptive Security Appliance Families
Getting Started with Cisco Security Appliances
Translations & Connections
Access Control Lists & Content Filtering
Object Grouping
Authentication, Authorization & Accounting
Switching & Routing
Modular Policy Framework
Advanced Protocol Handling
Virtual Private Network Configuration
Configuring Security Appliance Remote Access Using Cisco Easy VPN
Configuring ASA for WebVPN
Configuring Transparent Firewall
Configuring Security Contexts
Failover
Cisco Security Appliance Device Manager
AIP-Security Services Module-Getting Started
Managing Security Appliances
Configuring PIX Security Appliance Remote Access Using Cisco Easy VPN
Firewall Services Module

Before attending this course, students should possess a Cisco Certification Network Associate (CCNA) certification or the equivalent knowledge (working knowledge of basic network security & a solid grasp to TCP/IP & fundamental networking concepts).  Students must also be familiar with encryption technologies: DES, 3DES, RSA, hashing algorithms (MD5/SHA), & IPSec, & have a basic knowledge of the Windows operating system.

This course is designed for System Engineers, Channel Partners/Resellers, & Customers.