Deploying Cisco ASA VPN Solutions

Course details

The Deploying Cisco ASA VPN Solutions (VPN) course aims at providing network security engineers with the knowledge and skills that they need to implement and maintain Cisco ASA adaptive security appliance-based perimeter solutions. Successful graduates will be able to use Cisco ASA features to reduce the risk to the IT infrastructure and applications and to provide detailed operations support for the Cisco ASA security appliance.

Target Audience

This course is designed for:

• Anyone who implements and maintains VPN features on the Cisco ASA
• Those seeking CCNP Security certification

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe the general properties of the Cisco ASA security appliance VPN subsystem
• Implement and maintain Cisco clientless remote access Secure Sockets Layer (SSL) VPNs on the Cisco ASA security appliance VPN gateway
• Implement and maintain Cisco AnyConnect client-based remote access SSL VPNs on the Cisco ASA security appliance VPN gateway, according to policies and environmental requirements
• Implement and maintain Cisco remote access IP Security (IPsec) VPNs on the Cisco ASA VPN gateway, according to policies and environmental requirements
• Implement and maintain site-to-site VPN solutions on the Cisco ASA security appliance VPN gateway, according to policies and environmental requirements
• Deploy endpoint security with Cisco Secure Desktop and dynamic access policy (DAP), and deploy and manage high-availability and high-performance features of the Cisco ASA security appliance

Course Outline

Cisco ASA Adaptive Security Appliance VPN Architecture and Common Components

• Evaluating the Cisco ASA VPN Subsystem Architecture
• Evaluating the Cisco ASA Software Architecture
• Implementing Profiles, Group Policies, and User Policies
• Implementing PKI Services

Cisco ASA Adaptive Security Appliance Clientless Remote Access SSL VPN Solutions

• Deploying Basic Clientless VPN Solutions
• Deploying Advanced Application Access for Clientless SSL VPNs
• Deploying Advanced Authentication and SSO for Clientless SSL VPNs
• Customizing the Clientless SSL VPN User Interface and Portal

Cisco AnyConnect Remote Access SSL Solutions

• Deploying a Basic Cisco AnyConnect Full-Tunnel SSL VPN Solution
• Deploying an Advanced Cisco AnyConnect Full-Tunnel SSL VPN Solution
• Deploying Advanced Authentication, Authorization, and Accounting in Cisco Full-Tunnel VPNs

Cisco ASA Adaptive Security Appliance Remote Access IPsec VPNs

• Deploying Cisco Remote Access VPN Clients
• Deploying Basic Cisco Remote Access IPsec VPN Solutions

Cisco ASA Adaptive Security Appliance Site-to-Site IPsec VPN Solutions

• Deploying Basic Site-to-Site IPsec VPNs
• Deploying Advanced Site-to-Site IPsec VPNs

Endpoint Security and High Availability for Cisco ASA VPNs

• Implementing Cisco Secure Desktop and DAP for SSL VPNs
• Deploying High-Availability Features in Cisco ASA Adaptive Security Appliance VPNs