Are you sure you want to cancel your subscription?

If you cancel, your subscription will remain active through the paid term. You will be able to reactivate the subscription until that date.

Sorry to see you go

Your subscription will remain active until . If you change your mind, you may rectivate your subscription anytime before that date.

Are you sure you want to reactivate?
Welcome Back!

Your subscription has been reactivated and you will continue to be charged on .

Reactivate Subscription

Thank you for choosing to reactivate your subscription. In order to lock in your previous subscription rate, you owe: .

Your Subscription term is from - .

Questions? Call Sales.

Payment Due:

Auto-Renew Subscription

To auto-renew your subscription you need to select or enter your payment method in "Your Account" under Manage Payments.

Click continue to set up your payments.

CBT Nuggets License Agreement

Unless otherwise stated all references to “training videos” or to “videos” includes both individual videos within a series, entire series, series packages, and streaming subscription access to CBT Nuggets content. All references to CBT or CBT Nuggets shall mean CBT Nuggets LLC, a Delaware limited liability company located at 44 Country Club Road, Ste. 150, Eugene, Oregon.

A CBT Nuggets license is defined as a single user license. Accounts may purchase multiple users, and each user is assigned a single license.

  • GRANT OF LICENSE. CBT Nuggets grants you a non-transferable, non-exclusive license to use the training videos contained in this package or streaming subscription access to CBT content (the “Products”), solely for internal use by your business or for your own personal use. You may not copy, reproduce, reverse engineer, translate, port, modify or make derivative works of the Products without the express consent of CBT. You may not rent, disclose, publish, sell, assign, lease, sublicense, market, or transfer the Products or use them in any manner not expressly authorized by this Agreement without the express consent of CBT. You shall not derive or attempt to derive the source code, source files or structure of all or any portion of the Products by reverse engineering, disassembly, decompilation or any other means. You do not receive any, and CBT Nuggets retains all, ownership rights in the Products. The Products are copyrighted and may not be copied, distributed or reproduced in any form, in whole or in part even if modified or merged with other Products. You shall not alter or remove any copyright notice or proprietary legend contained in or on the Products.
  • TERMINATION OF LICENSE. Once any applicable subscription period has concluded, the license granted by this Agreement shall immediately terminate and you shall have no further right to access, review or use in any manner any CBT Nuggets content. CBT reserves the right to terminate your subscription if, at its sole discretion, CBT believes you are in violation of this Agreement. CBT reserves the right to terminate your subscription if, at its sole discretion, CBT believes you have exceeded reasonable usage. In these events no refund will be made of any amounts previously paid to CBT.
  • DISCLAIMER OF WARRANTY AND LIABILITY. The products are provided to you on an “as is” and “with all faults” basis. You assume the entire risk of loss in using the products. The products are complex and may contain some nonconformities, defects or errors. CBT Nuggets does not warrant that the products will meet your needs, “expectations or intended use,” that operations of the products will be error-free or uninterrupted, or that all nonconformities can or will be corrected. CBT Nuggets makes and user receives no warranty, whether express or implied, and all warranties of merchantability, title, and fitness for any particular purpose are expressly excluded. In no event shall CBT Nuggets be liable to you or any third party for any damages, claim or loss incurred (including, without limitation, compensatory, incidental, indirect, special, consequential or exemplary damages, lost profits, lost sales or business, expenditures, investments, or commitments in connection with any business, loss of any goodwill, or damages resulting from lost data or inability to use data) irrespective of whether CBT Nuggets has been informed of, knew of, or should have known of the likelihood of such damages. This limitation applies to all causes of action in the aggregate including without limitation breach of contract, breach of warranty, negligence, strict liability, misrepresentation, and other torts. In no event shall CBT Nuggets’ liability to you or any third party exceed $100.00.
  • REMEDIES. In the event of any breach of the terms of the Agreement CBT reserves the right to seek and recover damages for such breach, including but not limited to damages for copyright infringement and for unauthorized use of CBT content. CBT also reserves the right to seek and obtain injunctive relief in addition to all other remedies at law or in equity.
  • MISCELLANEOUS. This is the exclusive Agreement between CBT Nuggets and you regarding its subject matter. You may not assign any part of this Agreement without CBT Nuggets’ prior written consent. This Agreement shall be governed by the laws of the State of Oregon and venue of any legal proceeding shall be in Lane County, Oregon. In any proceeding to enforce or interpret this Agreement, the prevailing party shall be entitled to recover from the losing party reasonable attorney fees, costs and expenses incurred by the prevailing party before and at any trial, arbitration, bankruptcy or other proceeding and in any appeal or review. You shall pay any sales tax, use tax, excise, duty or any other form of tax relating to the Products or transactions. If any provision of this Agreement is declared invalid or unenforceable, the remaining provisions of this Agreement shall remain in effect. Any notice to CBT under this Agreement shall be delivered by U.S. certified mail, return receipt requested, or by overnight courier to CBT Nuggets at the following address: 44 Club Rd Suite 150, Eugene, OR 97401 or such other address as CBT may designate.

CBT Nuggets reserves the right, in its sole discretion, to change, modify, add, or remove all or part of the License Agreement at any time, with or without notice.

Billing Agreement

  • By entering into a Billing Agreement with CBT Nuggets, you authorize CBT Nuggets to use automatic billing and to charge your credit card on a recurring basis.
  • You agree to pay subscription charges on a monthly basis, under the following terms and conditions:
    • CBT Nuggets will periodically charge your credit card each monthly billing cycle as your subscription charges become due;
    • All payments are non-refundable and charges made to the credit card under this agreement will constitute in effect a "sales receipt" and confirmation that services were rendered and received;
    • To terminate the recurring billing process and/or arrange for an alternative method of payment, you must notify CBT Nuggets at least 24 hours prior to the end of the monthly billing cycle;
    • You will not dispute CBT Nugget’s recurring billing charges with your credit card issuer so long as the amount in question was for periods prior to the receipt and acknowledgement of a written request to cancel your account or cancel individual licenses on your account.
  • You guarantee and warrant that you are the legal cardholder for the credit card associated with the account, and that you are legally authorized to enter into this recurring billing agreement.
  • You agree to indemnify, defend and hold CBT Nuggets harmless, against any liability pursuant to this authorization.
  • You agree that CBT Nuggets is not obligated to verify or confirm the amount for the purpose of processing these types of payments. You acknowledge and agree that Recurring Payments may be variable and scheduled to occur at certain times.
  • If your payment requires a currency conversion by us, the amount of the currency conversion fee will be determined at the time of your payment. You acknowledge that the exchange rate determined at the time of each payment transaction will differ and you agree to the future execution of payments being based on fluctuating exchange rates.

CBT Nuggets reserves the right, in its sole discretion, to change, modify, add, or remove all or part of the Billing Agreement at any time, with or without notice.

Cisco CCNP Security (formerly known as CCSP) SNAA 642-515

Securing Networks with ASA Advanced

Course Duration: 12:55:32
Cisco Security: Cisco Certification and Getting the Most from this Series
With every new program, there is typically an included "Read Me First" text file. In the same sense, consider this nugget the "Watch Me First" of the series. This nugget presents the strategies you can use for getting the most from the series, changes to the Cisco certification program, and the ideal lab equipment to use for the series.
Foundations: Access Lists and NAT
Nothing better to get moving in the Cisco realm than the core configurations of Access Control Lists (ACLs) and Network Address Translation (NAT). This nugget focuses not only on reviewing the core concepts, but demonstrating the configuration of ACLs and ACL Entries (ACEs) using the ASDM. The nugget then moves to the order of operation on the ASA and how it impacts your design and configuration along with core NAT configurations.
Foundations: Access Lists and NAT, Part 2
The ACLs and NAT continue on as Jeremy focuses on configuring the various types of NAT in the ASDM: NAT 0 Exceptions, Port Forwarding, Static Policy NAT, and Dynamic Policy NAT.
Controlling Traffic: Cisco Modular Policy Framework
Of course, one of the primary goals of the Cisco ASA platform is to control network traffic. Cisco has taken this control to an entirely new level with their Modular Policy Framework (MPF) model of configuration. This nugget walks through the concepts behind MPF and demonstrates the three, core configuration items: class-maps, policy-maps, and service policies.
Controlling Traffic: Cisco Modular Policy Framework, Part 2
In this nugget, Jeremy takes the Cisco Modular Policy Framework (MPF) to an entirely new level as he walks through multiple, practical examples which culminate by walking through Layer 7 (Application Layer) firewall inspection principles and demonstrations. By time you're done here, you'll be saying, "I LOVE REGULAR EXPRESSIONS!!!" (we hope).
Protocol Inspection: Advanced Protocols
You now know that the Cisco ASA has the ability to look deeper into a packet than simple L3 and L4 data. This nugget discusses the application inspection capabilities of the ASA, focusing on using application inspection with the FTP protocol.
Protocol Inspection: Advanced Protocols, Part 2
The Application Layer inspection continues into the HTTP, Instant Messaging, ESMTP, DNS, and ICMP protocols.
Routing and Switching: ASA VLAN Interaction
Cisco ASA Firewalls have the ability to interact with switch VLANs. This opens an entire realm of firewall possibilities from filtering within your corporate network to isolating companies in an off-site hosting facility. This nugget walks through the concepts and configuration behind implementing VLANs using Cisco ASA Firewalls.
Routing and Switching: Dynamic Routing Protocols
ASA's are routers too! You'll be chanting this mantra once you've completed this nugget which is focused on the configuration of RIP, OSPF, and EIGRP on ASA Firewalls. We've also thrown in a little route redistribution just for fun.
VPN Technology: IPSec and Digital Certificates
In this nugget, Jeremy lays the foundation IPSec and certificate concepts necessary to understand the process used when building certificate-based VPN connections.
VPN Technology: Configuring Site-to-Site VPNs with Digital Certificates
Fasten your seat belts for pure Site-to-Site VPN configuration using Certificate-based authentication! In this nugget, Jeremy goes above and beyond and shows the complete setup of a Microsoft Windows 2003 Certificate Authority (CA) server, installs both CA and Identity certificates on two ASA 5510s, then builds and verifies the Site-to-Site VPN between two locations.
VPN Technology: Certificate-Based Remote Access VPNs
Now that you've seen the concept of certificate-based site-to-site VPNs, you can now apply the idea to remote access VPNs using the Cisco VPN client! This nugget is nearly all configuration based as Jeremy builds and tests the power of using certificates to authenticate remote access VPN users.
VPN Technology: Advanced Remote Access VPN Features
Whether you call it "Advanced VPN Features" or "Optional VPN Features," this nugget is full of configurations you can apply to your VPN connections. Topics covered include load balancing, split tunneling, backup ASA servers, NAT Transparency (NAT-T), reverse route injection (RRI), VPN Hairpinning, and personal firewall options.
VPN Technology: ASA5505 as Easy VPN & VPN Quality of Service
There are many situations where you may find yourself configuring an ASA5505 behind another NAT device (so the outside IP address is private). How do you establish a site-to-site VPN in this situation? That's where Cisco Easy VPN comes to the rescue! This nugget focuses on both Cisco Easy VPN and VPN Quality of Service (QoS).
SSL VPNs: Understanding SSL / WebVPN Technology
SSL VPNs (or WebVPNs) represent an exciting new development in remote access VPN technology. This nugget is dedicated to describing exactly what this exciting new development means to you along with the three different types of SSL VPNs supported by Cisco: Clientless, Thin Client, and Full Network Access using SVC or Anyconnect.
SSL VPNs: Configuring Clientless VPNs
In this nugget, Jeremy lives in the live ASDM interface as you are taken through the configuration and demonstration of virtually every option behind Clientless and Thin Client SSL VPN connections.
SSL VPNs: Configuring Anyconnect VPNs
Cisco Anyconnect dominates completely any other vendor's SSL VPN client. At least, that is Jeremy's unbiased opinion. In this nugget, Jeremy builds upon the previous Clientless SSL VPN by adding the Anyconnect client capability.
SSL VPNs: Configuring Anyconnect VPNs, Part 2
The Cisco Anyconnect demonstrations continue. This nugget explores the Anyconnect configuration with using client and server certificates generated by the local CA of the Cisco ASA.
SSL VPNs: Understanding and Installing Cisco Secure Desktop
In order to provide Cisco administrators some control of the "anytime, anywhere" freedom provided by SSL VPNs, Cisco has created the Cisco Secure Desktop (CSD). In this nugget, Jeremy explains the concepts and installation procedure of CSD.
SSL VPNs: Configuring Cisco Secure Desktop
Feel the TRUE POWER of CSD. This nugget is dedicated to the complete configuration and demonstration of nearly every CSD feature. By time you're done here, you'll be running to implement CSD for your network.
SSMs: Understanding AIP-SSM and CSC-SSM
In addition to the plethora of core functionality offered by the ASA, Cisco also offers "add on modules" known as Security Service Modules (SSMs). This nugget covers the different SSMs (4GE-SSM, SSM-10, SSM-20) along with the two implementations: CSC-SSM and AIP-SSM.

No Bookmarks

Note: The exam covered by this training retired in April 2011. However, the series retains considerable value as an IT resource.

Take your ASA skills to the next level! In this video series, Jeremy Cioara focuses on ASA's graphic interface (called the ASDM).

By the time you've finished watching, you'll feel like a network star on SSLVPNs (the next-generationVPN connection for remote users), Certificate-based VPNs and application layer inspection.

Plus, you'll be fully prepared to add killer SSLVPN technology to your cooperate network, feel a lot more comfortable working with Cisco's graphic interface and be ready for the 642-515 SNAA certification exam.

This forum is for community use – trainers will not participate in conversations. Share your thoughts on training content and engage with other members of the CBT Nuggets community. For customer service questions, please contact our support team. The views expressed in comments reflect those of the author and not of CBT Nuggets. We reserve the right to remove comments that do not adhere to our community standards.

comments powered by Disqus
Community Standards

We encourage you to share your wisdom, opinions, and questions with the CBT Nuggets community. To keep things civil, we have established the following policy.

We reserve the right not to post comments that:
contain obscene, indecent, or profane language; contain threats or defamatory statements; contain personal attacks; contain hate speech directed at race, color, sex, sexual orientation, national origin, ethnicity, age, religion, or disability; contributes to a hostile atmosphere; or promotes or endorses services or products. Non-commercial links, if relevant to the topic, are acceptable. Comments are not moderated, however, all comments will automatically be filtered for content that might violate our comment policies. If your comment is flagged by our filter, it will not be published.

We will be continually monitoring published comments and any content that violates our policies will be removed. Users who repeatedly violate our comments policy may be prohibited from commenting.
Jeremy Cioara

Jeremy Cioara

CBT Nuggets Trainer

Cisco CCNA, CCDA, CCNA Security, CCNA Voice, CCNP, CCSP, CCVP, CCDP, CCIE R&S; Amazon Web Services CSA; Microsoft MCP, MCSE, Novell CNA, CNE; CompTIA A+, Network+, iNet+

Area of Expertise:
Cisco network administration and development. Author or coauthor of numerous books, including: CCNA Voice 640-461 Official Cert Guide; CCNA Voice Official Exam Certification Guide (640-460 IIUC); CCENT Exam Prep (Exam 640-822); CCNA Exam Cram (Exam 640-802) 3rd Edition; and CCNA Voice 640-461 Official Cert Guide.

Course Features

Speed Control

Play videos at a faster or slower pace.


Pick up where you left off watching a video.


Jot down information to refer back to at a later time.

MP3 Downloads

Listen to videos anytime, anywhere
Your browser cannot access Virtual Labs
Add training to a playlist
or create a new list
Add to current playlist
or add to an existing list
Add to new playlist