This is a new course to replace the former CSVP and SNPA courses. In order to cover new features in ASA software version 8.0 and to fully cover the VPN features of the ASA, the content of SNPA was split into two courses, one that covers the fundamentals and on that covers more advanced topics.
Content that has been moved to SNAA includes the following:
• Configuring the ASA 5505 dual-ISP support
• Configuring ASA 5505 VLANs
• Configuring policy NAT
• Installing and configuring the Cisco Secure Desktop
• Configuring the security appliance to pass multicast traffic
• Configuring Layer 7 class maps and policy maps
• Initializing the AIP-SSM and CSC-SSM
SNAA also utilizes the graphical user interface instead of the command line interface for explanation and discussions of configuring the ASA. The SNAA 1.0 course takes a task-oriented approach to teaching the skills to deploy, configure, and administer the Cisco ASA using a fictional company's deployment of an ASA which is based on real world scenarios.
This course prepares learners for the Exam 642-515 and is an optional part of the new CCSP certification. Alternatively, students can take part in one of the courses CANAC - Implementing Cisco NAC Appliance or MARS - Implementing Monitoring, Analysis and Response System.
Course Contents
The Course Management section of the Course Administration Guide includes these topics:
• Overview
• Course Instruction Details
• Course Evaluations
Knowledge Prerequisites
SNAF - Securing Networks with ASA Foundation
Course Objective
Upon completing this course, the learner will be able to meet these overall objectives:
• Configure policy NAT based on traffic type.
• Describe the layer 7 modular policy framework for the security appliance and how it is configured.
• Describe the layer 7 advanced protocol handling capabilities of modular policy frame and how it is configured.
• Determine the necessary configuration for the ASA 5505 to be a VPN hardware client.
• Configure CSD and DAP for SSL VPN connections on the Cisco ASA.
• Identify the steps needed to configure, inspect, and filter traffic with the Content Security and Control SSM.
• Identify the steps needed to configure the security appliance to identify, alert, and defend against attacks.
Alternatives
Students wishing to complete a CCSP certification can alternatively take part in one of the courses CANAC - Implementing Cisco NAC Appliance or MARS - Implementing Monitoring, Analysis and Response System.
SNAA
