Managing Advanced Cisco SSL VPN (CAVPN) Masaken Sheraton, Cairo

Course details

This course focuses on providing advanced knowledge and features of Secure Sockets Layer (SSL) VPNs on the Cisco Adaptive Security Appliance (ASA). Learners will be able to evaluate various deployment options for SSL VPNs and configure advanced features using the Cisco Advanced Security Device Manager (ASDM) GUI.

Objectives:

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe client-based and clientless VPN solutions
• Explain the relationship between tunnel groups, group and user policies, connection profiles, and dynamic access policies
• Describe basic and advanced features of the clientless WebVPN solution, including smart tunnels, web ACLs, plug-ins, auto-signon, bookmarks, and portal customization
• Describe basic and advanced features within Cisco AnyConnect client version 3.0, including firewall policy push, Trusted Network Detection (TND), login scripts and profile editor
• Describe the features and benefits of Cisco Secure Desktop and
• understand the differences between the prelogin policies and Host Scan; use Cisco Secure Desktop to integrate Endpoint Assessment and Advanced Endpoint Assessment (AEA)
• Configure dynamic access policies (DAPs)
• Explain how the username credential can be automatically populated and how the connection profile can be chosen automatically using the prefill and certificate mapping features in the Cisco ASA appliance
• Describe the process required to enroll the Cisco ASA appliance with a third-party certificate authority (CA) and how to enroll and retrieve user-based certificates to provide mutual authentication

Content:

• Feature Mapping and Scenario Discussion
• Initializing ASA and Preparing for PKI and AAA Support
• Connection Profile and Group Policy Configuration
• Enhanced Clientless WebVPN Features
• Enhanced Cisco AnyConnect Client Features
• Cisco Secure Desktop Deployment and Prelogin Assessment
• Dynamic Access PoliciesSecuring Resources with Webtype and
• Network ACLs
• Cisco Secure Desktop Endpoint Assessment
• Certificate-Based Authentication
• Scaling SSL VPN