http://www.cbtnuggets.com/webapp/product?id=480
Cisco CCSP Security -- Exam-Pack 642-524 SNAF
Securing Networks with ASA Foundation
Includes 20 Videos
Trainer: Michael J. Shannon (Trainer Comments)
Running Time: 11 Hours
Why not secure your communications by thwarting attacks before business services get disrupted? Cisco's Adaptive Security Appliance provides you with easy-to-deploy solutions to your security concerns. In fact, you get comprehensive multilayer security, while lowering your overall deployment and operations costs. After watching this video series, you'll be ready to take on the tasks of a Cisco Firewall and VPN specialist. Trainer Michael Shannon covers everything you'll need to know for securing your network with ASA Foundation. ASA is a single-box solution that includes:
- Cataloging & verifying VPNs
- Transparent firewalls
- Virtual firewalls
- ASA managementand monitoring
- Layer 2/3 advanced protocol inspection
In addition to giving you practical, hands-on instruction, the training in Exam-Pack 642-524: SNAF maps to exam objectives, preparing you for the simulation- and knowledge-based SNAF exam requirements. Exam 642-524: SNAF is one of four exams required to earn the Cisco Certified Security Professional certification and is also a part of the Cisco Firewall and VPN specialist certification program.
Prerequisite
A thorough understanding of Cisco networking such as CCNA certification (through June 24, 2009) or CCNA Security certification or equivalent knowledge is recommended before viewing these videos.
Cisco CCSP SNAF: Securing Networks with ASA Foundation Certification (Exam-Pack 642-524)Contents:
- Introduction to SNAF
- ASA Features and Technology
- PIX and ASA Product Line
- Security Appliance basics
- Configuring the ASA
- Translations and Connection (Part 1)
- Translations and Connection (Part 2)
- ACLs and Content Filtering
- Object Grouping
- Switching and Routing
- Cut-Through Proxy
- Cisco Modular Policy Framework
- Advanced Protocol Handling and Threat Detection
- Site-to-Site VPNs with PSKs (free video!)
- Remote-Access VPN Configuration
- Cisco SSL VPN for the ASA
- Transparent Firewall Mode
- Security Contexts
- Configuring Failover
- Security Appliance Management
Here's what you'll learn in each video of the CCSP-SNAF series:
Video 1 - "Introduction to SNAF"
- This opening nugget is an overview of the exam objectives as well as a look at the entire nugget series. Video 2 - "ASA Features and Technology"
- Here we explore the functionality of the three types of firewalls are used to secure our network infrastructure. You will learn the technology and features of Cisco various security appliances. Video 3 - "PIX and ASA Product Line"
- This nugget is a survey of the different Cisco ASA and PIX security appliance models. The Cisco ASA security appliance licensing options are also covered as well. Video 4 - "Security Appliance basics"
- In this knowledge packed SNAF nugget we'll find out about the four main access modes, appliance file management system, security levels, ASDM requirements and capabilities, using the CLI to configure and verify basic network settings, prepare the ASA for configuration via Cisco ASDM, and finally verification of ASA configuration and licensing via Cisco ASDM. Video 5 - "Configuring the ASA"
- This vital nugget explores the configuration of ASA for basic network connectivity which includes verifying the initial configuration, setting the clock and synchronizing the time on a security appliance. You'll also configure a security appliance to send syslog messages to a syslog server. Video 6 - "Translations and Connection (Part 1)"
- This important SNAF module describes how the TCP and UDP protocols function within the security appliance. In addition the dynamic address translations are defined and configured. Video 7 - "Translations and Connection (Part 2)"
- This follow-up nugget describes and configures port address translation along with static address translations. The process of setting connection limits is also covered. Video 8 - "ACLs and Content Filtering"
- This nugget will introduce you to the explanation and configuration appliance ACLs. You will configure active code filtering (Microsoft ActiveX and Java applets) as well as configure the security appliance for URL filtering. Video 9 - "Object Grouping"
- Welcome to the wonderful and optimizing world of object grouping. Learn all about the object grouping feature of the security appliance and its advantages - an advantage you'll see time and again throughout this nugget series. You will also learn to configure object groups and use them in ACLs. Video 10 - "Switching and Routing"
- In this gem we cover the configuration of logical interfaces and VLANs on the switching side and on the routing side we look at static routes, static route tracking, and the dynamic routing capabilities of Cisco security appliances and configure passive RIP routing. Video 11 - "Cut-Through Proxy"
- This one explores AAA functions, local user database configuration, installation and configuration of Cisco Secure ACS, cut-through proxy authentication, and configuring user authorization using downloadable ACLs. Video 12 - "Cisco Modular Policy Framework"
- MPF is a powerful policy language for the ASA and in this nugget you'll learn about the Cisco Modular Policy Framework feature set; the functionality of class maps, policy maps and service policies; how to use the Cisco ASDM to configure a service policy rule and a policy for management traffic, Finally, the technique for displaying Cisco Modular Policy Framework component will be covered. Video 13 - "Advanced Protocol Handling and Threat Detection"
- This SNAF nugget combines two powerful features. The topics covered include: the need for advanced protocol handling; how the security appliance implements inspection of common network applications; the issues with multimedia applications and how the security appliance supports multimedia call control and audio sessions; threat detection and threat statistics; and basic threat detection, scanning threat detection, and viewing threat detection statistics. Video 14 - "Site-to-Site VPNs with PSKs"
- Here we explore how security appliances enable a secure VPN. We also look at: how IPSec works; preparing to configure an IPSec VPN; configuring a VPN between security appliances; implementing the Site-to-Site VPN menus in Cisco ASDM to modify a configured site-to-site VPN; and testing and verifying a site-to-site VPN configuration. Video 15 - "Remote-Access VPN Configuration"
- In this nugget you'll learn about Cisco Easy VPN, the Cisco VPN Client, configuring an IPSec Remote-Access VPN; and configuring users and groups. Video 16 - "Cisco SSL VPN for the ASA"
- Here is a continuation of the VPN theme as we look at SSL VPN and its purpose. We will use the SSL VPN Wizard to configure a basic Clientless SSL VPN connection and finally verify SSL VPN operations. Video 17 - "Transparent Firewall Mode"
- This SNAF module will explain the purpose of transparent firewall mode as well as how data traverses a security appliance in transparent mode. You will learn how to enable transparent firewall mode along with monitoring and maintaining transparent firewall mode. Video 18 - "Security Contexts"
- Here is where the scalability, power, and extensibility of the ASA are really seen through the newest virtualization technology. We will discover the purpose of security contexts and how to enable and disable multiple context mode. Also we will configure a security context and allocate resources to a security context. In the final section of this nugget we will manage a security context. Video 19 - "Configuring Failover"
- This SNAF nugget module describes the difference between hardware and stateful failover as well as the difference between active/standby and active/active failover. You'll learn about the security appliance failover hardware requirements and how active/standby failover works. The security appliance roles of primary, secondary, active, and standby will be covered as well as how active/active failover works. Then you will see how the ADSM is used to configure active/standby LAN-based failover and active/active failover. Video 20 - "Security Appliance Management"
- The final nugget of this series covers the following maintenance topics: configuring telnet access to the security appliance; configuring SSH access to the security appliance; configuring command authorization; recovering security appliance passwords using general password recovery procedures; and finally installing and upgrading the software image on the security appliance.
All trademarks and copyrights are the property of their respective holders.
|
SetHome
Bookmark
Contact
Size:480.24 MB 
