> > > SASAA

Implementing Advanced Cisco ASA Security (SASAA)

Course Description Schedule Course Outline
 

Course Content

Fast Lane’s SASAA training course is a 5-day classroom course led by our expert SASAA instructor. It is a hands-on course that dives into every aspect of Cisco’s ASA products. Graduates of this training will be able to implement the key features of ASA, including FirePOWER services v6.0, ASA Identity Firewall, ASA Cloud Web security, ASA Clustering and virtual ASA.

Who should attend

Due to a growing cyber-criminal underworld, network security is becoming a top priority for the modern business. And as the demand for strict security software increases, so too does the need for network engineers able to implement a variety of security software to scale. That’s why this class is ideal for network engineers, network managers, network designers, network administrators and any other IT personnel tasked with maintaining, implementing and/or monitoring a company’s network security.

Do you belong in SASAA?

To get a better understanding of whether or not you should enroll in Fast Lane’s SASAA training, meet Thomas. Thomas is a network manager for a large corporation in the Research Triangle Park whose network spans across a mix of physical and virtual devices. Knowing the always evolving security needs of his company, Thomas searched for a way to implement a more agile, scalable, collaborative network. He reached out to Fast Lane and eventually enrolled in our SASAA training course. After five days of expert training and lab-based experience, Thomas successfully completed his SASAA training and returned to his company far more valuable than when he enrolled at Fast Lane. Thomas was able to implement Cisco ASA software and evolve his company’s firewall into a more flexible and sturdy environment.

Prerequisites

Implementing Core Cisco ASA Security (SASAC) or equivalent knowledge of the Cisco ASA.

Course Objectives

Upon completion of this course, you will be able to:

  • Describe the Cisco ASA 5500-X Series Next-Generation Firewalls, ASAv, ASA 5506-X, 5508-X, 5516-X, and ASASM and implement new ASA 9.4.1 features
  • Implement Cisco ASA Identity Firewall policies
  • Install and set up the Cisco Firepower Services Module (SFR)
  • Implement Cisco ASA Cloud Web Security
  • Implement cisco ASA Clustering
  • Describe Cisco ASA Security Group Firewall and Change of Authorization Support

Follow On Courses

Outline: Implementing Advanced Cisco ASA Security (SASAA)

Module 1: Cisco ASA Product Family

  • Introduction to ASA series firewalls
  • Introduction to ASAv
  • Deploy ASAv
  • ASAv Other hypervisors support, digitally signed image and management options
  • Verify ASAv VM
  • ASA 9.2.1 BGP IPv6 support
  • ASA 9.3 features
  • ASA 9.4.1 + VXLAN support
  • Describe the Cisco ASASM platforms, architecture, and features

Module 2: Cisco ASA Identity Firewall

  • ASA Identity Firewall benefits, flow and policies
  • Cisco CDA basic network configuration
  • Application status verification
  • Active directory server configuration
  • CDA user-account configuration
  • CDA GUI password policy configuration
  • Configure identity firewall policies on ASA
    • Using ASDM
    • Using CLI
  • FQDN network object configuration
  • Verify user-identity operations
  • CDA management with CLI, live log monitoring and troubleshooting

Module 3: Cisco ASA Firepower Services

  • SFR introduction
  • FireSIGHT management
  • SFR management interface, package installation and verification
  • FireSIGHT VM installation and setup
  • License requirement
  • Policy types introduction
  • Recommended rules introduction
  • Monitoring
  • ASDM and Firepower on-box FireSIGHT manager
  • Firepower dashboard, reporting, status and events viewer
  • Licensing
  • Firepower 6.0 features
  • System configurations and device platform settings
  • Firepower multidomain management

Module 4: Cisco ASA Cloud Web Security (CWS)

  • ASA with CWS introduction
  • CWS scanning processes
  • Licenses
  • ASA with CWS integration
  • CWS operations verification
  • Verify traffic redirection
  • Syslog messages
  • ScanCenter web filtering policy introduction and configuration
  • ASA CWS AMP introduction
  • CWS cognitive threat analysis
  • Threats reporting

Module 5: Cisco ASA Clustering

  • Cluster performance figures and supported platforms
  • Cluster data-interface modes and connections
  • CLL functions
  • Cluster dynamic-routing, NAT and PAT operations
  • Cluster terminology
  • TCP, asymmetric UDP, short-lived and centralized-feature traffic flows
  • Cluster management
  • Configuration with the CLI
  • Each unit configuration
  • Master unit configuration
  • Sample configuration of a two-unit cluster with spanned etherchannel and individual interface
  • Configure ASA cluster using Cisco ASDM
  • Cluster licensing
  • Verification types
  • Troubleshoot ASA cluster operations
  • Cluster features of v9.1.4, v9.2.1, v9.3.1 and v9.4.1

Module 6: Cisco ASA Security Group Firewall and Change of Authorization (Optional)

  • Cisco secure access architecture
  • SG Firewall configuration
  • SGACL operations monitoring
  • SGT features (post 9.0 releases)
  • Change of authorization introduction
  • Chang of authorization CLI and ASDM configurations

Labs:

  • Access the Remote Cisco Learning Lab Environment
  • Set Up and Test the ASAv
  • Implement New Features in ASA 9.3 and 9.4
  • Configure the Cisco CDA
  • Configure ASA IDFW
  • Cisco ASA Firepower Services Module Installation
  • Cisco Firepower Management Center Configuration
  • Configure ASA CWS
  • Cisco ASA Cluster Configuration
Classroom Training
Modality: C

Duration 5 days

Price
  • United States: US$ 3,995
  • Cisco Learning Credits: 40 CLC
Enroll now
Online Training
Modality: L

Duration 5 days

Price
  • United States: US$ 3,995
  • Cisco Learning Credits: 40 CLC
Enroll now
 
Click City Name To Book Schedule
This is an Instructor-Led Classroom course
This is an Instructor-Led Online (ILO) course. These sessions are conducted via WebEx in a VoIP environment and require an Internet Connection and headset with microphone connected to your computer or laptop.
This is a FLEX course, which is delivered simultaneously in two modalities. Choose to attend the Instructor-Led Online (ILO) virtual session or Instructor-Led Classroom (ILT) session.
  *   This class is delivered by a partner.
United States
Jul 9-13, 2018 Online Training 09:00 US/Central * Enroll
Jul 9-13, 2018 Online Training 09:00 US/Mountain * Enroll
Jul 16-20, 2018 Herdon 09:00 US/Eastern * Enroll
Jul 23-27, 2018 Online Training 09:00 US/Central * Enroll
Jul 30-Aug 3, 2018 Online Training 09:00 US/Central Enroll
Aug 6-10, 2018 Columbia 09:00 US/Eastern * Enroll
Aug 6-10, 2018 Online Training 09:00 US/Central * Enroll
Aug 20-24, 2018 New York 09:00 US/Eastern * Enroll
Sep 10-14, 2018 Online Training 09:00 US/Mountain * Enroll
Sep 10-14, 2018 Online Training 09:00 US/Central * Enroll
Canada
Jul 30-Aug 3, 2018 Online Training 09:00 Canada/Central Enroll
Aug 20-24, 2018 Montreal 08:30 US/Eastern Course language: French * Enroll
Nov 5-9, 2018 This is a FLEX event Ottawa, ON 09:00 Canada/Eastern Enroll
Online Training Time zone: Canada/Eastern Enroll
Europe
Germany
Aug 13-17, 2018 Berlin Enroll
Sep 17-21, 2018 Hamburg Course language: English Enroll
Oct 15-19, 2018 Munich Enroll
Nov 5-9, 2018 Frankfurt Enroll
Dec 10-14, 2018 Düsseldorf Enroll
Austria
Sep 24-28, 2018 Vienna (iTLS) Course language: English Enroll
Bulgaria
Oct 22-26, 2018 This is a FLEX event Sofia Course language: English Enroll
Online Training Time zone: Europe/Sofia Enroll
France
Jul 23-27, 2018 Paris Enroll
Oct 22-26, 2018 Paris Enroll
Italy
Jul 23-27, 2018 Milan Enroll
Nov 5-9, 2018 Rome Enroll
Portugal
Oct 15-19, 2018 Lisbon Enroll
Spain
Sep 10-14, 2018 Madrid Enroll
Dec 10-14, 2018 Madrid Enroll
Switzerland
Jul 23-27, 2018 Zurich Enroll
United Kingdom
Sep 24-28, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Dec 10-14, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Latin America
Brazil
Jul 23-27, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Sep 24-28, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Dec 3-7, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Chile
Aug 6-10, 2018 Online Training Time zone: America/Santiago Enroll
Oct 22-26, 2018 Online Training Time zone: America/Santiago Enroll
Mexico
Sep 10-14, 2018 Online Training Time zone: America/Mexico_City Enroll
Nov 12-16, 2018 Online Training Time zone: America/Mexico_City Enroll
Asia Pacific
Australia
Jul 30-Aug 3, 2018 This is a FLEX event Sydney Enroll
Online Training Time zone: Australia/Sydney Enroll
Oct 8-12, 2018 This is a FLEX event Melbourne Enroll
Online Training Time zone: Australia/Melbourne Enroll
Dec 17-21, 2018 This is a FLEX event Sydney Enroll
Online Training Time zone: Australia/Sydney Enroll
Middle East
Saudi Arabia
Nov 11-15, 2018 Riyadh Course language: English Enroll
United Arab Emirates
Aug 5-9, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Nov 4-8, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Africa
Egypt
Oct 7-11, 2018 Cairo Course language: English Enroll
Dec 23-27, 2018 Cairo Course language: English Enroll