Deploying Cisco ASA VPN Solutions

Introduction

The Deploying Cisco ASA VPN Solutions (VPN) 1.0 course is an instructor-led five-day course which supports network security engineers goals in choosing, configuring, and troubleshooting the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce risk to IT infrastructure and its applications.

Course objectives

Upon completing this course, the learner will be able to meet these overall objectives:

Evaluate the Cisco ASA adaptive security appliance VPN subsystem
Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
Deploy advanced Cisco ASA adaptive security appliance VPN solutions

Target Audience

The primary audience for this course is as follows:

Network Security Engineers (NSEs) involved in VPN design, implementation and maintenance.
Cisco customers who implement and maintain Cisco ASA (adaptive security appliance) based VPN solutions.

The secondary audience for this course is as follows:

Cisco channel partners who sell, implement, and maintain Cisco ASA security appliances
Cisco engineers who support the sale of Cisco ASA security appliances

Pre-Requisites

The knowledge and skills that a learner must have before attending this course are as follows:

Cisco Certified Network Associate (CCNA) certification or the equivalent knowledge
Cisco Certified Network Associate Security (CCNA Security) certification or the equivalent knowledge
Working knowledge of the Microsoft Windows operating system

Course Outline

Day 1: Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem; Deploying Cisco ASA Adaptive Security Appliance IPsec VPN Solutions

Course Introduction
Lesson 1-1: Evaluating the Cisco ASA Adaptive Security Appliance Software Architecture
Deploying Cisco ASA VPN Solutions (VPN)
Lesson 1-2: Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture
Lesson 1-3: Applying Common Cisco ASA Adaptive Security Appliance Remote Access VPN Configuration Concepts
Lesson 2-1: Deploying Basic Site-to-Site IPsec VPNs
Lab 2-1: Deploying a Basic Cisco ASA Adaptive Security Appliance IPsec Site-to-Site VPN
Lesson 2-2: Deploying Certificate Authentication in Site-to-Site IPsec VPNs
Lab 2-2: Deploying a Certificate-Based Cisco ASA Adaptive Security Appliance IPsec Site-to-Site VPN
Day 2: Deploying Cisco ASA Adaptive Security Appliance IPsec VPN Solutions

Review of Day 1

Lesson 2-3: Deploying the Cisco IPsec VPN Client
Lesson 2-4: Deploying Basic Easy VPN Solutions
Lab 2-3: Deploying Basic Easy VPN
Lesson 2-5: Deploying Advanced Authentication in Cisco Easy VPN Solutions
Lab 2-4: Deploying Advanced Easy VPN Server with Certificate-based Authentication
Lesson 2-6: Deploying the Cisco ASA 5505 Adaptive Security Appliance as an Easy VPN Hardware Client
Lab 2-5: Deploying the Cisco ASA 5505 Adaptive Security Appliance as a Hardware Easy VPN Client

Day 3: Deploying Cisco ASA Adaptive Security Appliance AnyConnect Remote Access VPN Solutions

Review of Day 2
Lesson 3-1: Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN Solution
Lab 3-1: Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN Using Local Password Authentication
Lesson 3-2: Advanced Deployment of the Cisco AnyConnect VPN Client
Lab 3-2: Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
Lesson 3-3: Deploying Advanced Authentication in AnyConnect Full Tunnel SSL VPNs
Lab 3-3: Deploying the Cisco AnyConnect Client with Centralized Management

Day 4: Deploying Cisco ASA Adaptive Security Appliance Clientless Remote Access VPN Solutions

Review of Day 3
Lesson 4-1: Deploying a Basic Clientless VPN Solution
Lab 4-1: Configuring Basic Clientless VPN Access
Lesson 4-2: Deploying Advanced Application Access for Clientless SSL VPN
Lab 4-2: Configuring Advanced Application Access in Clientless SSL VPNs
Lesson 4-3: Deploying Advanced Authentication and Single Sign-On in a Clientless SSL VPN
Lesson 4-4: Customizing the Clientless SSL VPN User Interface and Portal
Lab 4-3: Customizing the SSL VPN Portal

Day 5: Deploying Advanced Cisco ASA Adaptive Security Appliance VPN Solutions

Review of Day 4
Lesson 5-1: Deploying VPN Authorization, Access Control, and Accounting
Lab 5-1: Deploying SSL VPN Access Policies and Authorization Parameters
Lesson 5-2: Deploying Cisco Secure Desktop in SSL VPNs
Lesson 5-3: Deploying Dynamic Access Policies
Lab 5-2: Deploying Cisco Secure Desktop and DAP in SSL VPNs
Lesson 5-4: Deploying High Availability and High Performance in SSL and IPsec VPNs
Lab 5-3: Configuring a Load Balancing SSL VPN Cluster