32
Cisco Training Solutions Deploying Cisco ASA VPN Solutions 1.0 13 мая 2011 Даниил Кириллов CCSI # 33384 [email protected] www.flane.ru

Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

  • Upload
    others

  • View
    20

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Cisco Training Solutions

Deploying Cisco ASA VPN Solutions 1.0

13 мая 2011

Даниил Кириллов

CCSI # 33384

[email protected]

www.flane.ru

Page 2: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Certification Levels

Page 3: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Teacher Introducing

Даниил Кириллов

CCSI #33384

Cisco:

CCNP, CCIP, CCDP, CCSP, CCNP Voice, CCNP Security, CCNA Wireless,

ICP Proctor

Microsoft:

MCITP Server Administrator 2008

Courses:

ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS,

IUWNE, DESGN, ARCH, IINS, SECURE, FIREWALL, VPN, IPS, ICOMM,

CVOICE, CIPT1, CIPT2, CAPPS, TVOICE, CAT6KS, CAT6KM, IP6FD,

ACESM, MPLST, AMPLS

Page 4: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Certification Areas

Routing & Switching

Storage Networking

Service Provider

Service Provider Operations

Security

Voice

Wireless

Design

Page 5: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Путь к CCIE Security

Cisco Certified

Security Professional

IPS

SNAF

SNAA

SNRS

Old Road to CCIES

CCNA Security

IINS

CCIE Security

MARS CANAC Cisco Certified Network

Professional Security

IPS

FIREWALL

VPN

SECURE

CCNA Security

IINS

CCIE Security

640-553

642-504

642-524

642-533

642-515

640-553

642-637

642-617

642-627

642-647

642-545 642-591

350-018 350-018

New Road to CCIES

Cisco Certified Network Associate (640-802)

Page 6: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Deploying Cisco ASA VPN Solutions

Learner Skills and Knowledge

Cisco CCNA certification

Interconnecting Cisco Network Devices Part 1 (ICND 1)

Interconnecting Cisco Network Devices Part 2 (ICND 2)

Cisco CCNA Security certification

Implementing Cisco IOS Network Security (IINS)

Familiarity with networking and security terms and concepts

Securing Networks with Cisco Routers and Switches (SECURE)

Working knowledge of the Microsoft Windows operating system

Course Goal

“To provide network security engineers with the knowledge and skills that they

need to deploy VPN Solutions based on the Cisco ASA

Adaptive Security Appliance”

Page 7: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Course Modules

Evaluation of

the Cisco ASA

VPN Subsystem

Course

Introduction A

M

P

M

Day 1 Day 2 Day 3 Day 4 Day 5

Deployment of

the Cisco ASA

IPSec VPN

Solutions

Deployment of

the Cisco ASA

IPSec VPN

Solutions

(Cont.)

Deployment of

the Cisco ASA

IPSec VPN

Solutions

(Cont.)

Deployment of

the Cisco ASA

AnyConnect

Remote Access

VPN Solutions

Deployment of

the Cisco ASA

Advanced VPN

Solutions

Deployment of

the Cisco ASA

Clientless

Remote

Access VPN

Solutions

(Cont.)

Deployment of

the Cisco ASA

Clientless

Remote

Access VPN

Solutions

Deployment of

the Cisco ASA

AnyConnect

Remote Access

VPN Solutions

(Cont.)

Lunch

Deployment of

the Cisco ASA

Advanced VPN

Solutions

(Cont.)

Page 8: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Day 1

Lessons

1. Evaluating the Cisco ASA Architecture

2. Evaluating the Cisco ASA VPN Subsystem Architecture

3. Applying Common Cisco ASA Remote Access Configuration

Concepts

4. Deploying Basic Site-to-Site IPSec VPN

5. Deploying Certificate Authentication in Site-to-Site IPSec VPN

Labs

1. Deploying a Basic Cisco ASA IPSec Site-to-Site VPN

2. Deploying a Certificate-based Cisco ASA IPSec Site-to-Site

VPN

Page 9: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Day 2

Lessons

1. Deploying Cisco VPN Client

2. Deploying Basic Cisco Easy VPN Solutions

3. Deploying Advanced Authentication in Cisco Easy VPN

Solutions

4. Deploying the Cisco ASA 5505 as Cisco Easy VPN Remote

Labs

1. Deploying Basic Cisco Easy VPN

2. Deploying Advanced Cisco Easy VPN Server with Certificate-

based Authentication

3. Deploying the Cisco ASA 5505 as Cisco Easy VPN Remote

Page 10: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Day 3

Lessons

1. Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN

Solutions

2. Deploying Advanced Cisco AnyConnect VPN Client

3. Deploying Advanced Authentication in Cisco AnyConnect Full

Tunnel SSL VPNs

Labs

1. Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN

Using Local Password Authentication

2. Deploying the Cisco AnyConnect VPN Client with Centralized

Management

3. Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN

Using the Local CA

Page 11: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Day 4

Lessons

1. Deploying a Basic Clientless VPN Solutions

2. Deploying Advanced Application Access for Clientless SSL VPN

3. Deploying Advanced Authentication and SSO for Clientless SSL

VPN

4. Customizing the Cientless SSL VPN User Interface and Portal

Labs

1. Configuring Basic Clientless VPN Access on the Cisco ASA

2. Configuring Advanced Application Access in Clientless SSL

VPN

3. Customizing the SSL VPN Portal on the Cisco ASA

Page 12: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Day 5

Lessons

1. Deploying VPN Authorization, Access Control and Accounting

2. Deploying Cisco Secure Desktop in SSL VPNs

3. Deploying Dynamic Access Policies

4. Deploying High Availability and High Performance in SSL and

IPSec VPNs

Labs

1. Deploying SSL VPN Access Policies and Authorization

Parameters

2. Deploying Cisco Secure Desktop and DAP in SSL VPNs

3. Configuring a Load Balancing SSL VPN Cluster

Page 13: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

VPN Lab Topology

Page 14: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 15: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 16: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 17: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 18: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 19: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 20: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 21: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 22: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 23: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 24: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 25: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 26: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 27: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 28: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network
Page 29: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Specialist Programs

Cisco Network Admission Control

Specialist

Cisco IPS Specialist

Cisco VPN

Security Specialist

Cisco ASA

Security Specialist

FIREWALL

Cisco Firewall

Security Specialist

Cisco IOS

Security Specialist

FIREWALL

VPN

SECURE

Implementing IOS Network Security

CANAC

SECURE

VPN

IPS

Page 31: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Спасибо за внимание!

Page 32: Cisco Training Solutions - flane.ru · MCITP Server Administrator 2008 Courses: ICND1, ICND2, CCNAX, ROUTE, SWITCH, TSHOOT, QOS, BGP, MPLS, ... New Road to CCIES Cisco Certified Network

Cisco Training Solutions

Deploying Cisco ASA VPN Solutions 1.0

13 мая 2011

Даниил Кириллов

CCSI # 33384

[email protected]

www.flane.ru