NUGGET ALERT:

New Series Release

Back

Cisco CCNP Security (formerly known as CCSP) SNAF 642-524

Securing Networks with ASA Foundation

Michael Shannon

CBT Nuggets Trainer

"I really enjoy the way that computers can bring people together, move information quickly and empower learning. I come from three generations of teachers. My great-grandmother had a huge influenc... Read more.

Note: The exam covered by this training retires on April 9, 2011. Follow us as we replace this training with CCNP Security training.

Why not secure your communications by thwarting attacks before business services get disrupted? Cisco's Adaptive Security Appliance provides you with easy-to-deploy solutions to your security concerns. In fact, you get comprehensive multilayer security, while lowering your overall deployment and operations costs.

After watching this video series, you'll be ready to take on the tasks of a Cisco Firewall and VPN specialist. Trainer Michael Shannon covers everything you'll need to know for securing your network with ASA Foundation.

In addition to giving you practical, hands-on instruction, the training in Exam-Pack 642-524: SNAF maps to exam objectives, preparing you for the simulation- and knowledge-based SNAF exam requirements.
  • Videos
  • Purchase Options
Title Duration
Introduction to SNAF
This opening nugget is an overview of the exam objectives as well as a look at the entire nugget series.
00:10:04
ASA Features and Technology
Here we explore the functionality of the three types of firewalls used to secure our network infrastructure. You will learn the technology and features of Cisco's various security appliances.
00:31:08
PIX and ASA Product Line
This nugget is a survey of the different Cisco ASA and PIX security appliance models. The Cisco ASA security appliance licensing options are also covered.
00:28:15
Security Appliance Basics
In this knowledge-packed SNAF nugget we'll find out about the four main access modes, appliance file management system, security levels, and ASDM requirements and capabilities using the CLI to configure and verify basic network settings, prepare the ASA for configuration via Cisco ASDM, and verification of ASA configuration and licensing via Cisco ASDM.
00:39:53
Configuring the ASA
This vital nugget explores the configuration of ASA for basic network connectivity which includes verifying the initial configuration, setting the clock and synchronizing the time on a security appliance. You'll also configure a security appliance to send syslog messages to a syslog server.
00:39:24
Translations and Connections (part 1)
This important SNAF module describes how the TCP and UDP protocols function within the security appliance. In addition, the dynamic address translations are defined and configured.
00:37:21
Translations and Connections (part 2)
This follow-up nugget describes and configures port address translation along with static address translations. The process of setting connection limits is also covered.
00:50:11
ACLs and Content Filtering
This nugget will introduce you to the explanation and configuration appliance ACLs. You will configure active code filtering (Microsoft ActiveX and Java applets) as well as configure the security appliance for URL filtering.
00:41:02
Object Grouping
Welcome to the wonderful and optimizing world of object grouping. Learn all about the object grouping feature of the security appliance and its advantages - an advantage you'll see time and again throughout this nugget series. You will also learn to configure object groups and use them in ACLs.
00:18:10
Switching and Routing with the ASA
In this gem we cover the configuration of logical interfaces and VLANs on the switching side and on the routing side we look at static routes, static route tracking, and the dynamic routing capabilities of Cisco security appliances and configure passive RIP routing.
00:33:12
Cut-Through Proxy
This one explores AAA functions, local user database configuration, installation and configuration of Cisco Secure ACS, cut-through proxy authentication, and configuring user authorization using downloadable ACLs.
00:41:24
Cisco Modular Policy Framework (MPF)
MPF is a powerful policy language for the ASA, and in this nugget you'll learn about the Cisco Modular Policy Framework feature set; the functionality of class maps, policy maps and service policies; how to use the Cisco ASDM to configure a service policy rule and a policy for management traffic. Finally, the technique for displaying Cisco Modular Policy Framework component will be covered.
00:41:02
Advanced Protocol Handling & Threat Detection
This SNAF nugget combines two powerful features. The topics covered include: the need for advanced protocol handling; how the security appliance implements inspection of common network applications; the issues with multimedia applications and how the security appliance supports multimedia call control and audio sessions; threat detection and threat statistics; and basic threat detection, scanning threat detection, and viewing threat detection statistics.
00:45:31
Site-To-Site VPNs with PSKs
Here we explore how security appliances enable a secure VPN. We also look at: how IPSec works; preparing to configure an IPSec VPN; configuring a VPN between security appliances; implementing the Site-to-Site VPN menus in Cisco ASDM to modify a configured site-to-site VPN; and testing and verifying a site-to-site VPN configuration.
00:49:09
Remote Access VPN Configuration
In this nugget you'll learn about Cisco Easy VPN, the Cisco VPN Client, configuring an IPSec Remote-Access VPN; and configuring users and groups.
00:42:30
Cisco SSL VPN for the ASA
Here is a continuation of the VPN theme as we look at SSL VPN and its purpose. We will use the SSL VPN Wizard to configure a basic Clientless SSL VPN connection and, finally, verify SSL VPN operations.
00:27:22
Transparent Firewall Mode
This SNAF module will explain the purpose of transparent firewall mode as well as how data traverses a security appliance in transparent mode. You will learn how to enable transparent firewall mode along with monitoring and maintaining transparent firewall mode.
00:31:34
Security Contexts
Here is where the scalability, power, and extensibility of the ASA are really seen through the newest virtualization technology. We will discover the purpose of security contexts and how to enable and disable multiple context mode. Also we will configure a security context and allocate resources to a security context. In the final section of this nugget, we will manage a security context.
00:35:03
Configuring Failover
This SNAF nugget module describes the difference between hardware and stateful failover as well as the difference between active/standby and active/active failover. You'll learn about the security appliance failover hardware requirements and how active/standby failover works. The security appliance roles of primary, secondary, active, and standby will be covered as well as how active/active failover works. Then you will see how the ADSM is used to configure active/standby LAN-based failover and active/active failover.
00:44:55
Security Appliance Management
The final nugget of this series covers the following maintenance topics: configuring telnet access to the security appliance; configuring SSH access to the security appliance; configuring command authorization; recovering security appliance passwords using general password recovery procedures; and installing and upgrading the software image on the security appliance.
00:33:58
Which option is right for you?
Buy a Single Series
"Focus your training on one series, for one month, for one low price."
StreamOne
StreamOne SUBSCRIPTION
StreamOne is your monthly option for streaming access to Cisco CCNP Security (formerly known as CCSP) SNAF 642-524. One multi-user license gives you and a small team access to one full series. Cancel at any time. A StreamOne subscription gives you plenty of time to explore the benefits of CBT Nuggets, while paying for just the specific series you want.
MULTI-USER
$199
per license
$499
EDM
Download
Download Cisco CCNP Security (formerly known as CCSP) SNAF 642-524.
$499
DVD
DVD
Have Cisco CCNP Security (formerly known as CCSP) SNAF 642-524 delivered on DVD.
 
Buy an Annual Subscription to Everything IT
"Eliminate your limitations. An IT Nuggets streaming subscription puts our complete IT training library at the fingertips of IT pros."
All topics. From admin to programming.
Image
IT Nuggets
Productivity for Companies and IT Advancement for Professionals
Get access to better training, and never lose it, with an IT Nuggets subscription. IT Nuggets is a multi-user product that supports all levels of your IT department, even as employees come and go. One locked-in rate gets you access to our IT training catalog, which is updated regularly and automatically at no additional charge. As long as your subscription is maintained, the rate won't change, and neither will your budget. Our full IT library is designed for Pros to keep current for career advancement and companies that want their IT Pros to reach their full potential.
YEARLY
MULTI-USER
$1999
per license
Bookmarks

No Bookmarks