Description

The Implementing Advanced Cisco ASA Security (SASAA) v2.1 is a 5-day instructor-led course that updates the learners on the key features of the Cisco ASA, including the ASA FirePOWER Services Module and ASA Clustering. The goal of the course is to learn how to implement some of the ASA and ASAv features such as Identity Firewall, FirePOWER Services, ASA Cloud Web Security, Clustering and various ASA post 9.2.2 release new features.
The main changes in SASAA v2.1 compared to SASAA v2.0 include updating the ASA FirePower Services Module coverage with the Firepower 6.0.0 software version.

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:
  • Describe the Cisco ASA 5500-X Series Next-Generation Firewalls, ASAv, ASA 5506-X, 5508-X, 5516-X, ASASM and implement new ASA 9.4.1 features
  • Implement Cisco ASA Identity Firewall policies
  • Install and set up the Cisco FirePOWER Services Module (SFR)
  • Implement Cisco ASA Cloud Web Security
  • Implement Cisco ASA Clustering
  • Describe Cisco ASA Security Group Firewall and Change of Authorization Support

Outline

The course contains these components:
  • Cisco ASA Product Family
    • Introducing the Cisco ASA 5500-X Next-Generation Firewalls
    • Lab: Cisco Learning Lab Remote Access
    • Introducing the Cisco ASAv
    • Lab: Cisco ASAv Basic Setup
    • Implementing ASA 9.3 and 9.4.1 New Features
    • Lab: Cisco ASA 9.3 and 9.4.1 New Features
    • Introducing the Cisco ASASM
  • Cisco ASA Identity Firewall
    • Describing the Cisco ASA Identity Firewall Solution
    • Setting Up Cisco CDA
    • Configuring Cisco CDA
    • Lab: Cisco CDA Configuration
    • Configuring Cisco ASA Identity Firewall
    • Verifying and Troubleshooting Cisco ASA Identity Firewall
    • Lab: Cisco ASA Identity-Based Firewall Configuration
  • Cisco ASA FirePOWER Services
    • Installing the Cisco ASA FirePOWER Services Module
    • Lab: Cisco ASA FirePOWER Services Module Installation
    • Managing the Cisco ASA FirePOWER Services Module Using the FireSIGHT Management Center
    • Describing the Cisco ASA 5506-X, 5508-X, and 5516-X FirePOWER Services
    • Configuring ASA Firepower Services v6.0 New Features
    • Lab: Cisco Firepower Management Center Configuration
  • Cisco ASA Cloud Web Security
    • Introducing Cisco ASA Cisco Cloud Web Security
    • Configuring Cisco ASA with Cisco Cloud Web Security
    • Verifying Cisco ASA Cloud Web Security Operations
    • Describing the Web Filtering Policy in Cisco ScanCenter
    • Describing Cisco ASA Cloud Web Security AMP and CTA
    • Lab: Cisco ASA Cloud Web Security Configuration
  • Cisco ASA Clustering
    • Describing Cisco ASA Cluster Features
    • Describing Cisco ASA Cluster Terminology and Data Flows
    • Using the CLI to Configure a Cisco ASA Cluster
    • Using the ASDM to Configure a Cisco ASA Cluster
    • Verifying Cisco ASA Cluster Operations
    • Troubleshooting Cisco ASA Cluster Operations
    • Describing Cisco ASA Version 9.1.4 and Later Clustering Features
    • Lab: Cisco ASA Cluster Configuration
  • (Optional) Cisco ASA Security Group Firewall and Change of Authorization (CoA)
    • Introducing Cisco Security Group Tagging
    • Configuring Cisco ASA Security Group Firewall
    • Describing the Cisco ASA 9.2.1 and Later Releases SGT Features
    • Describing the Cisco ASA 9.2.1 and Later Releases CoA Support

Prerequisite Knowledge

The knowledge and skills that a learner should possess before attending this course are as follows: