by Jimmy Larsson | Publisher: Infinite Skills | Release Date: September 2016 | ISBN: 9781491969656

This is a best practices course on how to set-up, manage, and troubleshoot firewalls and VPNs using the Cisco ASA (Adaptive Security Appliance). Drawing on his 15 years of experience implementing Cisco firewalls, instructor Jimmy Larsson shows you the actual hands-on commands and configurations he uses in real life situations.The course is targeted at first time Cisco ASA users and those with some ASA experience looking to fill the gaps in their knowledge. Larsson recommends that learners have access to a Cisco firewall in order to practice the methods covered in the course. Gain the practical knowledge required to set-up and manage Cisco firewalls and VPNs Explore ASA hardware models, CLI basics, and core firewall configuration practices Acquire a thorough understanding of how network address translation works Learn basic and advanced methods for configuring the AnyConnect client VPN solution Discover how to configure, manage, and troubleshoot site-to-site VPN tunnels Understand packet capture and how to use troubleshooting tools like Packet Tracer Get exposed to advanced methods for enhancing firewall functionalityJimmy Larsson runs Secyourity AB, a network security company focused on Cisco-based security products and solutions. He's been in IT since 1990 working for companies such as ATEA and LAN Assistans. He's certified in Cisco CCNA Routing & Switching, CCNA Security, CCNP Routing & Switching, CCNP Security, Check Point CCSE, and ISC2 CISSP in Information Security.

1. Introduction
   • Welcome To The Course 00:01:07
   • About The Author 00:00:52
2. Introduction To The Firewall
   • ASA Hardware Models 00:04:07
   • CLI Basics Part - 1 00:06:20
   • CLI Basics Part - 2 00:05:41
3. Basic Configuration
   • Interface Configuration 00:05:37
   • 5505 Switchports 00:03:06
   • Security Levels 00:02:49
   • Same Security Level 00:04:16
   • The Course Lab Environment 00:04:37
   • Implementing Access Lists Part - 1 00:04:24
   • Implementing Access Lists Part - 2 00:05:27
   • Introduction To NAT 00:07:48
   • Fixup Protocol ICMP 00:03:53
   • Management Access Part - 1 00:06:41
   • Management Access Part - 2 00:06:11
   • Firewall Local DHCP Server 00:03:23
   • A Basic Firewall Configuration Part - 1 00:06:49
   • A Basic Firewall Configuration Part - 2 00:05:37
   • An Introduction To ASDM Part - 1 00:03:47
   • An Introduction To ASDM Part - 2 00:06:43
4. Network Address Translation In Depth
   • Network Address Translation Part - 1 00:05:57
   • Network Address Translation Part - 2 00:04:27
   • Network Address Translation Part - 3 00:06:40
   • Network Address Translation Part - 4 00:08:08
   • NAT And Access Lists 00:02:57
5. Anyconnect Client VPN Setup
   • Two Types Of VPN Connections 00:01:31
   • Two Types Of VPN Clients 00:02:32
   • SSL Certificates Part - 1 00:10:00
   • SSL Certificates Part - 2 00:06:30
   • Download Anyconnect Files From Cisco 00:04:08
   • Upload .Pkg Files To ASA 00:04:46
   • Default Licenses In ASA 00:06:39
   • Configuring The .Pkg-Files To Use 00:03:33
   • Activating Anyconnect (Enabling) 00:07:34
   • Logging And Debugging Anyconnect 00:05:50
   • Connecting But No Traffic Flow 00:03:55
   • Fix NAT To Make It Work 00:03:27
   • Internet Access Via The Tunnel 00:03:51
   • Split Tunneling 00:04:59
   • Making The User Select Connection Profile 00:05:49
   • VPN Filter 00:05:25
   • Client Profile Editor 00:06:12
   • LDAP Authentication Of Users 00:08:04
   • Dynamic Access Policies Part - 1 00:06:23
   • Dynamic Access Policies Part - 2 00:07:58
6. IPSEC VPN
   • The Life Of An IPSEC-Tunnel 00:09:36
   • Information Needed 00:05:07
   • Configuring Phase 1 Parameters 00:10:07
   • Configuring Phase 2 Parameters 00:05:00
   • Proxy ACL And Crypto Map Configuration 00:04:52
   • Finalising The VPN Configuration 00:03:55
   • Testing The Tunnel 00:08:22
   • Modifying NAT To Make The Tunnel Work 00:11:42
7. Troubleshooting Tools
   • Logging And Debugging 00:13:12
   • Packet Tracer 00:04:35
   • Packet Capture 00:08:27
8. Advanced Topics
   • Transparent Mode 00:06:16
   • Multi Context 00:03:45
   • Failover 00:05:23
   • Trunks And Etherchannels 00:05:23
9. Conclusion
   • Wrap Up And Thank You 00:01:19