Securing Networks with PIX and ASA

General information Code: SD-SNPA Duration: 5 days Price: 2 890 € HT Public concerned This course is addressed to the technicians, to engineers and to administrators networks, like with the persons in charge of security. Prérequis To have followed course SND Securing Cisco Network Devices. To be certified CCNA or to have an equivalent level To have good knowledge of TCP/IP and techniques of coding and authentification To be familiarized with the concepts of safety measures networks Objectives With the exit of the formation, the trainee will be able to describe, configure, check and manage the products of the family of Pix Firewall and family ASA Means Support of official course given to the trainees. 1 PC by anybody	Description This course is intended to the technicians, to engineers and to administrators networks who wish to be able to describe, configure, check and manage the products of the family of Pix Firewall and family ASA. It is recommended to the trainees to have followed course SND Securing Cisco Network Devices, to be certified CCNA or to have an equivalent level, to have good knowledge of TCP/IP and techniques of coding and authentification and to be familiarized with the concepts of safety measures networks. Test and Certification: This course prepares with certification CCSP Cisco Certified Security Professional like with specialization CQS Pix Firewall.
	Modulate 1 Technologies and characteristic of Firewall Modulate 2 Family of Firewalls Cisco Pix and ASA - various models Pix and ASA Modulate 3 To start with Pix and the ASA - User interface - Configuration of Firewall. Examination of the state of Firewall - Parameter setting of time and support of NTP - Levels of safety ASA - Syslog Configuration Modulate 4 Conversions and Connections - NAT (Network Address Translations) dynamic and static - function TCP Intercept - Connections and Redirection of port - Configuration of multiple interfaces Modulate 5 (ACLs) and filtering access control lists of contents - Access control lists (ACLs) - Use of the lists access controls - Filtering of malicious active code. Filtering of URL Modulate 6 Grouping of objects - Configuration of the groups of object Modulate 7 AAA (Authentification, Authorization and Accounting) - Installation of Cisco Secure ACS - Configuration of the authentification and L ' authorization - Remote loading of ACLs - Breakdown service of configuration AAA Modulate 8 Routing and commutation - Functionality VLAN - static Routing and dynamics: protocol RIP and OSPF - multicast Modulate 9 Modular policies - Principles and installation of these modular policies Modulate 10 Assumption of responsibility of advanced protocols - advanced Protocols - Multi-media Support	Modulate 11 Configuration of the virtual private network (VPN) - Installation of a protected VPN - Tasks of configuration of Ipsec - customer VPN Cisco. Evolution of the VPN containing Pix Modulate 12 Configuration of the distant access with Easy VPN - Presentation and configuration of the waiter Easy VPN - Characteristics of distant Easy VPN - Presentation and configuration of customer VPN 4.01 Modulate 13 Configuration of WebVPN with the ASA - Presentation of WebVPN - Installation with equipment ASA Module 14 Configuration of Firewall of level 2 - Presentation and configuration Modulate 15 Configuration of the contexts of safety measures - Presentation of the multiple mode of context - Configuration and management Modulate 16 The Redundancy - Principle of redundancy - Configuration of FailOver and Lan FailOver - Installation of FailOver in actif/actif mode Modulate 17 Cisco Security Appliance Device Manager - Pre-necessary with the use of the ASDM - Use of the ASDM to configure Firewall Pix and ASA, to create of VPNs site-àsite, to create a distant access to VPN Modulate 18 The module of service AIP-SSM - Presentation, installation and installation of a policy of basic safety Modulate 19 Maintenance of the system - distant Access - Authorization of orders. SNMP - Management tools. Keys of activation - Restoration of the password and update of the software image