IMPLEMENTING THE CISCO ADAPTIVE SECURITY APPLIANCE

IMPLEMENTING THE CISCO ADAPTIVE SECURITY APPLIANCE

1. ASA Firewall

   • Features
     • ASA virtualization
     • High availability with failover
     • Identity firewall
     • Threat control and containment services
   • Operation
     • Routed Mode
     • Transparent Mode
   • Security Level Control
     • Network Access
     • Inspection Engines
     • Application Filtering

2. Object-groups

   • Objects
     • Network
       • Host
       • Subnet
       • Range
     • Services
       • Protocol
       • ICMP - ICMPv6
       • TCP - UDP ports
   • Objects-Groups
     • Network
     • Service
     • Security
     • ICMP-type
     • User

3. ACL

   • Types filtering
     • Through-traffic
     • To-the-box-traffic
   • Types
     • Extended
     • Standard
     • EtherType
     • Webtype
     • IPv6

4. NAT

   • Types
     • Dynamic NAT
     • Dynamic PAT
     • Static NAT
     • Policy NAT
   • Deployments
     • Inside
     • Outside
     • Bidirectional

5. MPF

   • Framework
     • Class Maps
     • Policiy Maps
     • Service Policy
   • Steps
     • 1. (Optional) Configure extended ACLs
     • 2. Configure the class map to identify traffic
     • 3. Configure a policy map to apply actions to those class maps
     • 4. Configure a service policy to attach the policy map to an interface

6. Basic Configuration

   • Settings and Services
     • Interfaces
       • Logical VLAN Interfaces
       • Physical switch ports
     • Default Static Route
     • Remote Access Services
       • Telnet
       • SSH

Bilder und Dateien der Mindmap