Cisco ASA Firewall Training - Cisco Firewall Training

Welcome to our comprehensive Cisco ASA Firewall Training course! Get ready to dive into the world of network security with expert instructors guiding you every step of the way. With real-labs available 24*7, you’ll gain hands-on experience to master Cisco Firewall technology. Plus, with our placement assistance and official Cisco curriculum, you’ll be well-equipped for success in the cybersecurity field. Join us and take your career to new heights!

What you'll learn in this course

The Cisco ASA Firewall Training provides in-depth instruction on firewall management and configuration, imparting crucial network security skills. Participants cover fundamental concepts and Cisco ASA firewall features, progressing from IPv4 routing to dynamic routing protocols such as RIP, EIGRP, OSPF, and BGP. The training also includes IPv6 routing, NAT, and practical sessions on configuring SSL and IPSec VPNs, focusing on site-to-site configurations. Additionally, participants learn about VPN load balancing, Transparent Firewall functionality, Security Contexts, Failover configurations, and the Modular Policy Framework (MPF). By course end, participants gain proficiency in clustering and ASA OS 9.x features, readying them for the CCNP Security and CCIE Security ASA Firewall exams.

How you'll benefit

Comprehensive Understanding: Gain a thorough understanding of firewall concepts, ASA features, and their practical applications, providing a solid foundation in network security.
Hands-on Experience: Engage in practical labs covering a wide range of topics, from basic ASA configurations to advanced routing protocols, VPN setups, NAT configurations, and firewall clustering.
Advanced Security Implementations: Learn how to configure IPSec VPNs, SSL VPNs, VPN load balancing, transparent firewalls, security contexts, failover configurations, and Modular Policy Framework (MPF) for advanced security measures.
Preparation for Certification Exams: Acquire the knowledge and skills necessary to excel in the CCNP Security and CCIE Security ASA Firewall examinations, enhancing career prospects in the field of network security.

Who should enroll

IT Professionals Seeking Career Advancement
Cisco Networking Professionals
Network Engineers/System Administrators
Network Security Engineers
Security Technicians
Network Security Support Engineers
TAC Engineers
Network Security Professionals
Cybersecurity Enthusiasts

Course Prerequisites

Basic Networking Knowledge
Cisco IOS CLI Familiarity
Understanding of TCP/IP Protocols
General IT Security Awareness
Cisco CCNA Certification or Equivalent Experience (Beneficial)
Familiarity with the various Cisco router and firewall command modes

Associated certifications

CCNP Security
CCIE Security
Cisco Certified Specialist – Security Core

Job Profiles after Cisco ASA Firewall Training

Network Security Engineer
VPN Administrator
Security Consultant
IT Security Analyst
Network Administrator
Cybersecurity Specialist
Systems Engineer (Security)
Senior Network Analyst
IT Manager (Security)
Security Operations Center (SOC) Analyst

Cisco ASA Firewall Course Outline

Firewall Introduction
Introduction:-Packet Filtering
Introduction:-Proxy Server
Introduction:-StateFul Firewall
Introduction:-Transparent Firewall
Cisco ASA Introduction
Introduction:-ASA Features
Introduction:-Proprietary Operating System (P)
Introduction:-State Full Firewall
Introduction:-User Based Authentication
Introduction:-Protocols & Application Inspection
Introduction:-Modular Policy Frame Work
Introduction:-Virtual Private Network
Introduction:-Virtual Firewall
Introduction:-Web Based Management
Introduction:-Transparent Firewall
Introduction:-Stateful Failover (P)
Introduction:-IPv6
Introduction:-Clustering
Introduction:-VPN LoadBalancing (P)
Cisco ASA Lab Setup
Basics With GUI and CLI
Labs:-How to set Hostname
Labs:-How to Set enable password
Labs:-How to Assign IP address to interface
Labs:-How to Assign security-level
Labs:-How to Enable Telnet
Labs:-How to Enable SSH
Labs:-How to Enable HTTP
Labs:-How to Take Backup of ASA
Labs:-How to Upgrade ASA
Labs:-How to Recover ASA password
IPv4 Static & Default Routing CLI
RIP Implementation CLI
RIP Labs:-Basic
RIP Labs:-Passive-interface
RIP Labs:-Redistribute
RIP Labs:-Default-information originate
RIP Labs:-Distribute
RIP Labs:-Authentication
RIP Labs:-Version custmization
RIP Troubleshoot
EIGRP Implementation CLI
EIGRP Labs:-Basic
EIGRP Labs:-Neighbour Table Verification
EIGRP Labs:-Topology Table Verification
EIGRP Labs:-Routing Table verification
EIGRP Labs:-Passive-interface
EIGRP Labs:-Redistribute
EIGRP Labs:-Static Neighbourship
EIGRP Labs:-Distribute-list
EIGRP Labs:-AD Changing
EIGRP Labs:-Authenticaton
EIGRP Labs:-Summrization
EIGRP Troubleshoot
OSPF Implementation CLI
OSPF Labs:-Basic
OSPF Labs:-Neighbour Table Verification
OSPF Labs:-Topology TableVerification
OSPF Labs:-Routing Table verification
OSPF Labs:-Virtual-link
OSPF Labs:-Redistribute
OSPF Labs:-External Summrization
OSPF Labs:-Inter-area summrization
OSPF Labs:-Authentication
OSPF Labs:-Hello & Dead Interval
OSPF Labs:-Stub Area
OSPF Labs:-Totally Stub
OSPF Labs:-Totally NSSA
OSPF Labs:-OSPF AD Changing
OSPF Labs:-Default-information originate
IPv4 OSPF Troubleshoot
BGP Implementation CLI
BGP Labs:-Basic
BGP Labs:-Neighbour Table Verification
BGP Labs:-Topology TableVerification
BGP Labs:-Routing Table verification
IPv4 BGP Troubleshoot
SLA CLI
ASA Access-Control List
Introduction:-ACL
Introduction:-Standard ACL
Introduction:-Extended ACL
Introduction:-Named ACL
Introduction:-Time Based ACL
Introduction:-Object-Group
Introduction:-Network Object-Group
Introduction:-Protocol Object-Group
Introduction:-Service Object-Group
Introduction:-ICMP Object-Group
IPv6 Static & Default Routing CLI
OSPFv3 Implementation CLI
OSPFv3 Labs:-Basic
OSPFv3 Labs:-Neighbour Table Verification
OSPFv3 Labs:-Topology TableVerification
OSPFv3 Labs:-Routing Table verification
OSPFv3 Labs:-Virtual-link
OSPFv3 Labs:-Redistribute
OSPFv3 Labs:-External Summrization
OSPFv3 Labs:-Inter-area summrization
OSPFv3 Labs:-Hello & Dead Interval
OSPFv3 Labs:-Stub Area
OSPFv3 Labs:-Totally Stub
OSPFv3 Labs:-Totally NSSA
OSPFv3 Labs:-AD Changing
OSPFv3 Labs:-Default-information originate
OSPFv3 Troubleshoot
Network Address Translation (NAT) on IPv4
Introduction:-NAT
Introduction:-NAT Types
Introduction:-Static NAT
Introduction:-Dynamic NAT
Introduction:-PAT
Introduction:-Static PAT
Introduction:-Twice NAT
Introduction:-Identity NAT
Labs:-Static NAT
Labs:-Dynamic NAT
Labs:-PAT
Labs:-Static PAT
Labs:-Twice NAT
Labs:-Identity NAT
ASA Packet Flow
User Authentication/CTP
Introduction:-CTP
Introduction:-CTP Working
Introduction:-AAA
Introduction:-TACACS+
Introduction:-RADIUS
Labs:-CTP/User Authentication
Network Address Translation (NAT) on IPv6
Labs:-Static NAT
Labs:-Dynamic NAT
Labs:-PAT
Labs:-Static PAT
Labs:-Twice NAT
Labs:-Identity NAT
IPSec Introduction
Introduction:-IPsec VPN Features
Introduction:-Confidentiality
Introduction:-Integrity
Introduction:-Data Origin Authentication
Introduction:-Anti-Replay
Introduction:-IPsec Protocols
Introduction:-ESP (Encapsulating Security Payload)
Introduction:-AH (Authentication Header)
Introduction:-IKE (Internet Key Exchange)
Introduction:-IKE Modes
Introduction:-Main Mode
Introduction:-Aggressive Mode
Introduction:-Quick Mode
Introduction:-IKE Phases
Introduction:-Phase1
Introduction:-Phase1.5
Introduction:-Phase2
Introduction:-Internet security association key management protocol (ISAKMP)
Introduction:-IKE Versions
Introduction:-IKE Versions 1
Introduction:-IKE Versions 2
Introduction:-IPsec Modes
Introduction:-Transport mode
Introduction:-Tunnel mode
Introduction:-NAT Transversal
Introduction:-NAT Transversal Steps
Introduction:-NAT-T Support
Introduction:-NAT-T Detection
Introduction:-NAT-T Decision
Introduction:-Security Association & Components
Introduction:-Diffie-Hellman Key Exchange
Introduction:-Security Parameter Index
Introduction:-ESP (Encapsulating Security Payload) Deatiled
Introduction:-AH (Authentication Header) Deatiled
IPv4 Site-Site VPN (ASA-ASA)
IPv4 Site-Site VPN With IKEv1
IPv4 Site-Site VPN With IKEv2
IPv4 Site-Site VPN With Cisco Router
IPv4 Site-Site VPN With Overlapping Subnets
IPv4 Site-Site VPN With Certificate Authentication
IPv4 Site-Site VPN Troubleshoot
IPv6 Site-Site VPN
IPv4 Site-Site VPN With Fortinet
SSL VPN
Introduction:-Secure Socket Layer VPN
Introduction:-SSL Modes
Introduction:-Clientless Mode
Introduction:-Thin Client Mode
Introduction:-Thick Client Mode
Introduction:-SSL VPN Requirements
Introduction:-Working
Labs:-Clientless
Labs:-Thin
Labs:-Thick
IPv4 VPN Load balancing
Introduction:-VPN Load Balancing
Introduction:-Limitation
Introduction:-VPN Load Balancing Terminology
Introduction:-Cluster
Introduction:-Master
Introduction:-Member
Introduction:-VPN Load Balancing Working
Introduction:-Virtual Cluster Agent (VCA).
Lab:-
Transparent Firewall
Introduction:-Transparent Firewall
Introduction:-ASA Modes
Introduction:-Advantages
Introduction:-Limitations
Introduction:-Difference between Switching &Transparent Firewall
Labs:-
Security Context
Introduction:-Context
Introduction:-Context Requirement
Introduction:-Context Use
Introduction:-Advantages
Introduction:-Limitations
Introduction:-Context Terminology
Labs:-Context
Labs:-Context Channing
Failover or High availability (HA)
Introduction:-Failover
Introduction:-Failover Types
Introduction:-Failover Implementation types
Introduction:-Failover System Requirements
Introduction:-Failover and Stateful Failover Links
Introduction:-Device Initialization and configuration
Introduction:-Stateless (Regular) and Stateful Failover
Introduction:-Things not replicated during failover
Introduction:-Failover Health Monitoring
Introduction:-Interface Monitoring
Labs:-IPv4
Labs:-IPv6
Modular Policy Framework
Introduction:-MPF
Introduction:-MPF Function
Introduction:-Inspection of connection
Introduction:-Connection restriction
Introduction:-Traffic Prioritization
Introduction:-Traffic Policing
Introduction:-MPF Components
Introduction:-ICMP Inspection
Introduction:-FTP Inspection
Introduction:-SMTP Inspection
Introduction:-DNS Inspection
Introduction:-TFTP Inspection
Introduction:-HTTP Inspection
Introduction:-SIP Inspection
Introduction:-SCCP Inspection
Introduction:-CTIQBE Inspection
Labs:-Inspection of connection
Labs:-Connection restriction
Labs:-Traffic Prioritization
Labs:-Traffic Policing
Labs:-ICMP Inspection
Labs:-FTP Inspection
Labs:-DNS Inspection
Labs:-TFTP Inspection
Labs:-HTTP Inspection
Labs:-SIP Inspection
Labs:-SCCP Inspection
Labs:-CTIQBE Inspection
Clustering
Introduction:-Clustering
Introduction:-Clustering Terminology
Introduction:-Unit Health Monitoring
Introduction:-Interface monitoring
Introduction:-Data Path Connection State Replication
Introduction:-Connection Roles
Introduction:-Owner
Introduction:-Director
Introduction:-Forwarder
Labs:-
ASA Management
Labs:-ASA as DHCP Server
Labs:-ASA as DHCP Relay-Agent
Labs:-Redundant-Interface
Labs:-EtherChannel
Labs:-uRPF
Labs:-Fragmentation Disable
Cisco ASA OS 9.x Features
Labs:-IPv6 NAT
Labs:-IPv6 Routing
Labs:-IPv6 Failover
Labs:-IPv6 Site-Site VPN
Labs:-Dynamic Routing in Context
Labs:-IPv6 SSL VPN

₹ 21,900

₹ 17,900

Join Free Demo

Get brochure

Course Features

Total Duration : 30 Hrs (2 Months)
Batches Available : Weekdays/Weekends
Training Level : Advanced
Lab Access: Yes, 24*7
Training Mode: Classroom & Online
Language: English, Hindi
Interview Questions: Yes
Exam Practice Questions: Yes
Training Certificate: Yes
Students Enrolled: 3297
Placement Assistance: Yes

EVENTS

Stay Ahead with Our Upcoming Training

Course	Start Date	Time (in IST)	Mode	Type	Enrollment
CCNP Security	January 4, 2025	12:00 pm - 2:00 pm	Online/Offline	Upcoming	Enroll Now
CCNP Security	January 6, 2025	5:00 pm - 7:00 pm	Online/Offline	Upcoming	Enroll Now
CCNP Security	January 18, 2025	3:00 pm	Online/Offline	Upcoming	Enroll Now
CCNP Security	February 3, 2025	9:00 am - 11:00 am	Online/Offline	Upcoming	Enroll Now
CCNP Security	February 24, 2025	5:00 pm - 7:00 pm	Online/Offline	Upcoming	Enroll Now
CCNP Security	March 17, 2025	9:00 am - 11:00 am	Online/Offline	Upcoming	Enroll Now