Deploying Cisco ASA VPN Solutions

This course is designed for anyone who implements and maintains VPN features on the Cisco ASA as well as those individuals seeking VPN specialisation or CCNP Security certification.

After you complete this course you will be able to:

• Describe the general properties of the Cisco ASA security appliance VPN subsystem
• Implement and maintain Cisco clientless remote access Secure Sockets Layer (SSL) VPNs on the Cisco ASA security appliance VPN gateway
• Implement and maintain Cisco AnyConnect client-based remote access SSL VPNs on the Cisco ASA security appliance VPN gateway, according to policies and environmental requirements
• Implement and maintain Cisco remote access IP Security (IPsec) VPNs on the Cisco ASA VPN gateway, according to policies and environmental requirements
• Implement and maintain site-to-site VPN solutions on the Cisco ASA security appliance VPN gateway, according to policies and environmental requirements
• Deploy endpoint security with Cisco Secure Desktop and dynamic access policy (DAP), and deploy and manage high-availability and high-performance features of the Cisco ASA security appliance

Cisco ASA Adaptive Security Appliance VPN Architecture and Common Components

• Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture
• Evaluating the Cisco ASA Adaptive Security Appliance Software Architecture
• Implementing Profiles, Group Policies, and User Policies
• Implementing PKI Services

Cisco ASA Adaptive Security Appliance Clientless Remote Access SSL VPN Solutions

• Deploying Basic Clientless VPN Solutions
• Deploying Advanced Application Access for Clientless SSL VPNs
• Deploying Advanced Authentication and SSO for Clientless SSL VPNs
• Customizing the Clientless SSL VPN User Interface and Portal

Cisco AnyConnect Remote Access SSL Solutions

• Deploying a Basic Cisco AnyConnect Full-Tunnel SSL VPN Solution
• Deploying an Advanced Cisco AnyConnect Full-Tunnel SSL VPN Solution
• Deploying Advanced Authentication, Authorization, and Accounting in Cisco Full-Tunnel VPNs

Cisco ASA Adaptive Security Appliance Remote Access IPsec VPNs

• Deploying Cisco Remote Access VPN Clients
• Deploying Basic Cisco Remote Access IPsec VPN Solutions

Cisco ASA Adaptive Security Appliance Site-to-Site IPsec VPN Solutions

• Deploying Basic Site-to-Site IPsec VPNs
• Deploying Advanced Site-to-Site IPsec VPNs

Endpoint Security and High Availability for Cisco ASA VPNs

• Implementing Cisco Secure Desktop and DAP for SSL VPNs
• Deploying High-Availability Features in Cisco ASA Adaptive Security Appliance VPNs

Labs

• Lab 2-1: Configuring Basic Clientless VPN Access on the Cisco ASA Security Appliance
• Lab 2-2: Configuring Advanced Application Access for Clientless SSL VPNs
• Lab 2-3: Customizing the SSL VPN Portal on the Cisco ASA Security Appliance
• Lab 3-1: Configuring Basic Cisco AnyConnect Client Full-Tunnel SSL VPNs Using Local Password Authentication
• Lab 3-2: Deploying the Cisco AnyConnect Client with Centralized Management
• Lab 3-3: Configuring Basic Cisco AnyConnect Full-Tunnel SSL VPNs Using Local CA and SCEP Proxy
• Lab 4-1: Deploying Basic Remote Access IPsec VPN with IKEv2
• Lab 5-1: Deploying a Basic Cisco ASA Security Appliance IPsec IKEv1 Site-to-Site VPN
• Lab 6-1: Deploying Cisco Secure Desktop in Cisco SSL VPNs
• Lab 6-2: Configuring a Load-Balancing SSL VPN Cluster

The following courses are recommended for further study :

• SECURE - Securing Cisco Routers and Switches
• IPS - Implementing Cisco Intrusion Prevention System