Courses Detailed

Upon completing this course, you will be able to:

• Explain the features of Cisco ASA 5500-X Series Next-Generation Firewalls, ASASM, ASA 1000V Cloud Firewall and Cisco ASAv
• Install and set up the Cisco ASAv
• Implement Cisco ASA Identity Firewall policies by using Cisco CDA and Cisco ASA
• Install and set up the Cisco SFR (FirePOWER Services) Module
• Implement Cisco ASA and Cisco Cloud Web Security integration
• Implement a Cisco ASA cluster
• Install and set up the Cisco CX (NGFW Services) Module (optional module)
• Describe the IPv6 features in Cisco ASA Software Release 9.0 (optional module)
• Describe the multicontext enhancements in Cisco ASA Software Release 9.0 (optional module)
• Describe SGFW support in Cisco ASA Software Release 9.0 (optional module)
• Describe CoA support (optional module)

The primary audience for this course is as follows:

• Network engineers supporting Cisco ASA 9.x implementations

The knowledge and skills that a learner must have before attending this course are as follows:

• FIREWALL v1.0 or FIREWALL v2.0 or SASAC v1.0 or an equivalent knowledge of the Cisco ASA

Course Outline

Module 1: Cisco ASA Product Family
Module 2: Cisco ASA Identity Firewall
Module 3: Cisco ASA FirePOWER (SFR) Module
Module 4: Cisco ASA Cloud Web Security Integration
Module 5: Cisco ASA Cluster
Module 6: Cisco ASA CX (Next-Generation Firewall Services) (Self-Study/Optional)
Module 7: Cisco ASA Multicontext Enhancements (Self-Study/Optional)
Module 8: Cisco ASA Security Group Firewall (Self-Study/Optional)
Module 9: Cisco ASA IPv6 Enhancements (Self-Study/Optional)

Lab Outline

Lab1-1:Remote Lab Environment Access
Lab1-2:Cisco ASAv Basic Setup
Lab2-1: CDA Configuration
Lab2-2: ASA IDFW Configuration
Lab3-1: Cisco ASA 5500-X Series FirePOWER Module Installation and Setup
Lab4-1: Cisco ASA and and Cloud Web Security Integration
Lab5-1: ASA Cluster Configuration
Lab 6-1: ASA CX and PRSM (v9.1.2) Exploration (Optional)
Lab 6-2: ASA CX Access Policy Configuration (Optional)
Lab 6-3: ASA CX Identity Policy Configuration (Optional)
Lab 6-4: ASA CX Decryption Policy Configuration (Optional)
Lab 6-5: PRSM Administration (Optional)
Lab 6-6: ASA NGFW Services Version 9.2.1 New Features (Optional)

The Implementing Advanced Cisco ASA Security (SASAA) v1.2 is an instructor-led course that provides an updated training with labs on the key features on the Cisco ASA (covering up to the ASA 9.2.2 release). The goal of the course is to implement the key features of the Cisco ASA, including Cisco FirePOWER Services, ASA Cloud Web Security, ASA Identity Firewall, ASA Clustering and the Virtual ASA (ASAv). Optional modules in this course also include the Cisco ASA Next Gen Firewall Services (CX).