VPN: Deploying Cisco ASA VPN Solutions

Prerequisites:

Course Description:

This five-day course aims to provide delegates with the knowledge and skills required to configure, maintain and operate VPN solutions based on the Cisco ASA 5500 Series Adaptive Security Appliance (ASA) including: Site to Site IPsec VPN, Remote access SSL VPN.

On completion of this course, delegates will be able to:

• Evaluate the Cisco ASA adaptive security appliance VPN subsystem
• Deploy Cisco ASA adaptive security appliance IPsec VPN solutions
• Deploy Cisco ASA adaptive security appliance Cisco AnyConnect remote access VPN solutions
• Deploy Cisco ASA adaptive security appliance clientless remote access VPN solutions
• Deploy advanced Cisco ASA adaptive security appliance VPN solutions

This course includes the following modules:

Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem

• Evaluating the Cisco ASA Adaptive Security Appliance Software Architecture
• Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture
• Applying Common Cisco ASA Adaptive Security Appliance Remote Access VPN Configuration Concepts

Deploying Cisco ASA Adaptive Security Appliance IPsec VPN Solutions

• Deploying Basic Site-to-Site IPsec VPNs
• Deploying Certificate Authentication in Site-to-Site IPsec VPNs
• Deploying the Cisco IPsec VPN Client
• Deploying Basic Easy VPN Solutions
• Deploying Advanced Authentication in Cisco Easy VPN Solutions
• Deploying the Cisco ASA 5505 Adaptive Security Appliance as an Easy VPN Hardware Client

Deploying Cisco ASA Adaptive Security Appliance AnyConnect Remote

• Access VPN Solutions
• Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN Solution
• Advanced Deployment of the Cisco AnyConnect VPN Client
• Deploying Advanced Authentication in AnyConnect Full Tunnel SSL VPNs

Deploying Cisco ASA Adaptive Security Appliance Clientless Remote

• Access VPN Solutions
• Deploying a Basic Clientless VPN Solution
• Deploying Advanced Application Access for Clientless SSL VPN
• Deploying Advanced Authentication and Single Sign-On in a Clientless SSL VPN
• Customizing the Clientless SSL VPN User Interface and Portal

Deploying Advanced Cisco ASA Adaptive Security Appliance VPN Solutions

• Deploying VPN Authorization, Access Control, and Accounting
• Deploying Cisco Secure Desktop in SSL VPNs
• Deploying Dynamic Access Policies
• Deploying High Availability and High Performance in SSL and IPsec VPNs

Labs

• Lab 2-1: Deploying a Basic Cisco ASA IPsec Site-to-Site VPN
• Lab 2-2: Deploying a Certificate-Based Cisco ASA IPsec Site-to-Site VPN
• Lab 2-3: Deploying Basic Easy VPN
• Lab 2-4: Deploying Advanced Easy VPN Server with Certificate-based Authentication
• Lab 2-5: Deploying the Cisco ASA 5505 as a Hardware Easy VPN Client
• Lab 3-1: Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN using Local Password Authentication
• Lab 3-2: Configuring a Basic AnyConnect Full Tunnel SSL VPN Using the Local CA
• Lab 3-3: Deploying the Cisco AnyConnect Client with Centralized Management
• Lab 4-1: Configuring Basic Clientless VPN Access
• Lab 4-2: Configuring Advanced Application Access in Clientless SSL VPNs
• Lab 4-3: Customizing the SSL VPN Portal
• Lab 5-1: Deploying SSL VPN Access Policies and Authorization Parameters
• Lab 5-2: Deploying Cisco Secure Desktop and DAP in SSL VPNs
• Lab 5-3: Configuring a Load Balancing SSL VPN Cluster