Securing Networks with PIX and ASA

Course contentReviewing Cisco Firewall Technology Features

• Firewalls
• Security Appliance Overview

CiscoPIXandASASecurity Appliance Families

• Cisco Pix Security Appliance Family
• PIXSecurity Appliance Licensing
• ASA5500 Adaptive Security Appliance Licensing
• Cisco Catalyst 6500/7600 Firewall Services Module

Getting Started with Cisco Security Appliance

• User Interface
• File Management
• Adaptive Security Algorithm Security Levels
• Basic Firewall Appliance Configuration
• Examining the Firewall Appliance Status
• Time Setting andNTPSupport
• Syslog Configuration

Translations and Connections

• Transport Protocols
• Network Address Translation
• Port Address Translation
• Static Command
• TCPIntercept and Connection Limits
• Connections and Translations
• Configuring Multiple Interfaces

Access Control Lists and Content Filtering

• ACLs
• Malicious Active Code Filtering
• URLFiltering

Object Grouping

• Overview of Object Grouping
• Getting Started with Object Groups
• Configure Object Groups
• Configure Nested Object Groups

Authentication, Authorization, and Accounting

• Installation of Cisco SecureACSfor Windows 2000
• Security Appliance Access Authentication Configuration
• Cut-through Proxy Authentication Configuration
• Tunnel Access Authentication Configuration
• Authorization Configuration
• Downloadable ACLs
• Accounting Configuration

Switching and Routing

• VirtualLANS
• Static and Dynamic Routing
• OSPF
• Multicast

Modular Policy Framework

• Modular Policy Overview
• Class-Map
• Policy Map
• Service Policy

Advanced Protocol Handling

• Advanced Protocol Handling
• FTPApplication Inspection
• HTTPApplication Inspection
• Protocol Application Inspection
• Multimedia Support

Virtual Private Network Configuration

• Enabling a secureVPN
• How IPSec Works
• ConfigureVPNConnection Parameters
• IPSec Configuration Tasks
• Scale Security Appliance VPNs

Configuring Security Appliance Remote Access Using Cisco EasyVPN

• Introduction to the Cisco EasyVPN
• Overview of the CiscoVPNClient
• How the Cisco easyVPNWorks
• Configuring Users and Groups
• Configuring the EasyVPNServer for Extended Authentication
• Configure Security Appliance Hub and Spoke VPNs
• CiscoVPNClient Manual Configuration tasks
• Working with the CiscoVPNClient

ConfiguringASAfor WebVPN

• WebVPN Feature Overview
• WebVPN End-User Interface
• Configure WebVPN General Parameters
• Configure WebVPN Servers and URLs
• Configure WebVPN Port Forwarding
• Configure WebVPN Email Proxy
• Configure WebVPN Content Filters and ACLs

Configuring Transparent Firewall

• Transparent Firewall Mode Overview
• Enabling Transparent Firewall Mode
• Monitoring and Maintaining Transparent Firewall

Configuring Security Contexts

• Security Context Overview
• Enabling Multiple Context Mode
• Configuring a Security Context
• Managing Security Contexts

Failover

• Understanding Failover
• Serial Cable-Based Failover Configuration
• Active/StandbyLAN-Based Failover Configuration
• Active/Active Failover Configuration

Cisco Security Appliance Device Manager

• DescribeASDMand its Capabilities
• ExplainASDMhardware and software requirements
• Prepare the Security Appliance to useASDM
• NavigateASDMconfiguration windows.
• NavigateASDMmonitor windows
• NavigateASDMmultimode windows

AIP- Security Services Module - Getting Started

• AIP-SSM Overview
• AIP-SSM SW Loading
• InitialAIPASDMConfiguration
• Configure a Security Policy on theASASecurity Appliance

Managing Security Appliance

• Managing System Access
• Managing User Access Levels
• Managing Software, Licenses, and Configurations
• Image Upgrade and Activation Keys