Advanced Cisco Adaptive Security Appliance

Advanced Cisco Adaptive Security Appliance

1. combines into one software image

   • VPN concentrator
   • IPS
   • firewall

2. Advanced ASA Firewall Feature

   • Identity firewall
     • Active Directory
   • ASA virtualization
     • security context
   • High availability with failover
     • Provide device redundancy.
   • Threat control and containment services
     • Advanced IPS features

3. The ASA is a dedicated firewall appliance

   • Security levels are sometimes called trust levels

4. Two firewall modes of operation available on ASA

   • Routed Mode
   • Transparent Mode

5. Objects

   • An object can be defined with a particular IP address, an entire subnet, a range of addresses, a protocol, or a specific port or range of ports.
     • There are two types of objects that can be configured:
       • Network Object
         • IP´s
       • Service Object
         • Protocols
   • Object Groups
     • Network
     • Service
     • ICMP-Type
     • Security
     • User

6. ASA ACL Filtering

   • To-the-box-traffic filtering
   • Through-traffic filtering

7. the following must be configured

   • Inside logical VLAN interface
   • Ethernet 0/1 physical port
   • Enable the ASA Web Server
   • Permit access to the ASA Web Server