Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture

Transcription

1 Deploying Cisco ASA VPN Solutions Volume 1 Course Introduction Learner Skills and Knowledge Course Goal and Course Flow Additional Cisco Glossary of Terms Your Training Curriculum Evaluation of the Cisco ASA Adaptive Security Appliance VPN Subsystem Module Evaluating the Cisco ASA Adaptive Security Appliance Software Architecture Cisco ASA Adaptive Security Appliance Access Control Model Refresher Cisco ASA Adaptive Security Appliance Packet Routing Refresher Cisco ASA Adaptive Security Appliance NAT Refresher Cisco ASA Adaptive Security Appliance AAA Refresher Evaluating the Cisco ASA Adaptive Security Appliance VPN Subsystem Architecture PKI Technology The Public Key of the CA Certificate Revocation Lists Online Certificate Status Protocol AAA Based Certificate Authorization Public Key Exchange Scalability What does a PKI Enable? Comparison of Cisco ASA Adaptive Security Appliance VPN Technologies IPsec Security Associations IKE Phases IKE Main and Aggressive Mode SSL/TLS Session Establishment and Key Management Cisco Secure Desktop IPsec and NAT VPN Termination on Cisco ASA Adaptive Security Appliance Network Interfaces Packet Flow in Cisco ASA Adaptive Security Appliance VPN Functions

2 Cisco ASA Adaptive Security Appliance VPN Access Control Model Cisco ASA Adaptive Security Appliance VPN Licensing Applying Common Cisco ASA Adaptive Security Appliance Remote Access VPN Configuration Concepts Cisco ASA Adaptive Security Appliance VPN Policy Configuration Connection Profiles Group Polices External Policy Storage RADIUS Attribute Reference Module Deployment of Cisco ASA Adaptive Security Appliance IPsec VPN Solutions Model Deploying Basic Site to Site IPsec VPNs Configuring Basic Peer Authentication Configuring Transmission Protection Troubleshooting a Cisco ASA Adaptive Security Appliance Site to Site VPN Deploying Certificate Authentication in Site to Site IPsec VPNs Deploying Certificate Based Authentication Configuring PKI Based Peer Authentication Deploying the Cisco VPN Client Evaluating Cisco VPN Client Features Installing Cisco VPN Client Software Configuring Cisco VPN Client Profiles Adjusting the Peer Response Timeout Value Configuring Advanced Profile Settings Deploying Basic Cisco Easy VPN Solutions

3 Configuring Basic Cisco ASA Adaptive Security Appliance Cisco Easy VPN Server Features Cisco VPN Client and IKE Policies Crypto Maps Configuring Group PSK Authentication Configuring Extended User Authentication Configuring Client Network Settings Configuring Basic Access Control and Split Tunneling Configuring the Cisco VPN Client Troubleshooting Basic Cisco Easy VPN Operation Deploying Advanced Authentication in Cisco Easy VPN Solutions Deploying Cisco VPN Client Certificate Authentication Configuring Hybrid Authentication Deploying Advanced PKI Integration Troubleshooting PKI Integration Deploying the Cisco ASA 5505 Adaptive Security Appliance as Cisco Easy VPN Remote Choosing Cisco Easy VPN Remote Modes Deploying a Basic Cisco Easy VPN Remote Profile Configuring Advanced Cisco Easy VPN Remote Features Cisco Easy VPN Remote Side Cisco Easy VPN Server Side Troubleshooting the Cisco Easy VPN Remote Module

4 Deploying Cisco ASA VPN Solutions Volume 2 Deployment of Cisco ASA Adaptive Security Appliance AnyConnect Remote Access VPN Solutions Module Deploying a Basic Cisco AnyConnect Full Tunnel SSL VPN Solution Configurations Choices, basic Procedures, and Required Input Parameters Configuring Basic Cisco ASA Adaptive Security Appliance SSL VPN Gateway Features Configuring Local Password Based User Authentication Configuring Client IP Address Management, Basic Access Control, and Split Tunneling Installing and Configuring the Cisco AnyConnect Client Web Launch (Via SSL VPN Clientless Session) Manual Installation Troubleshooting Basic Full Tunnel SSL VPN Operation Installing DART with Cisco AnyConnect Manually installing DART on the Host Deploying Advanced Cisco AnyConnect VPN Client Deploying DTLS Managing Cisco AnyConnect Software Configuring Cisco AnyConnect Client Profiles Deploying Advanced Cisco AnyConnect Operating System Integration Options Customizing the Cisco AnyConnect User Interface Microsoft Windows Linux Mac OS X Deploying Advanced Authentication in Cisco AnyConnect Full Tunnel SSL VPNs Deploying External AAA Authentication Deploying Certificate Based Client Authentication Using the Cisco ASA Adaptive Security Appliance Local CA Deploying Advanced PKI Integration Deploying Multiple Client Authentication

5 Module Deployment of Cisco ASA Adaptive Security Appliance Clientless Remote Access VPN Solutions Module Deploying a Basic Clientless VPN Solution Configuration Choices, Basic Procedure, and Required Input Parameters Configuring Basic Cisco ASA Adaptive Security Appliance SSL VPN Gateway Features Configuring Local Password Based User Authentication Configuring Basic Portal Features and Access Control Troubleshooting Clientless SSL VPNs Deploying Advanced Application Access for Clientless SSL VPN Configuring Application Plug Ins Specifying Applet Settings Configuring Smart Tunnels Configuring Port Forwarding Troubleshooting Advanced Application Access Deploying Advanced Authentication and SSO in a Clientless SSL VPN Deploying Client Certificate Based Authentication Deploying Advanced Gateway PKI Integration, External Certificate Authorization, and Double Authentication Troubleshooting PKI Integration Deploying Clientless SSL VPN SSCO Customizing the Clientless SSL VPN User Interface and Portal Deploying Basic Navigation Customization Deploying Full Portal Customization Deploying Portal Localization Deploying Portal Help Customization

6 Cisco AnyConnect Portal Integration Module Deploying Cisco ASA VPN Solutions Volume 3 Deployment of Advanced Cisco ASA Adaptive Security Appliance VPN Solutions Module Deploying VPN Authorization, Access Control, and Accounting Deploying Local Authorization Deploying External Authorization Configuring Session Accounting Troubleshoot Authorization and Accounting of a Clientless SSL VPN Deploying Cisco Secure Desktop in SSL VPNs Installing, Enabling, and Customizing Cisco Secure Desktop Configuring Prelogin Criteria Configuring Prelogin Policies Basic Host Scan Endpoint Assessment Advanced Endpoint Assessment Configuring Advanced Endpoint Assessment Troubleshooting Cisco Secure Desktop Operation for Clientless Connections Deploying Dynamic Access Policies Configuring DAP Aggregating DAP Records Integrating Cisco Secure Desktop with DAP Using LUA Expressions in DAP Troubleshooting DAP

7 Deploying High Availability and High Performance in SSL and IPsec VPNs Deploying Redundant Peering Deploying Cisco ASA Adaptive Security Appliance Active/Standby Failover Deploying Dynamic Routing Based VPN Failover Deploying Cisco ASA Adaptive Security Appliance VPN Clustering Deploying High Availability and High Performance Using Network SLB Deploying VPN QoS Troubleshooting Cisco ASA Adaptive Security Appliance VPN Failover and Clustering Module Deploying External Authentication in Cisco AnyConnect Full Tunnel SSL VPNs Deploying Certificate Based Client Authentication Using External CAs LDAP Password Management

8 Deploying Cisco ASA VPN Solutions Lab Guide This guide represents the instructions and other information concerning the lab activities for this course. You can find the solutions in the Lab Activity Answer Key. Outline This guide includes these activities: Lab 2 1: Deploying a basic Cisco ASA Adaptive Security Appliance IPsec Site to Site VPN Lab 2 2: Deploying a Certificate Based Cisco ASA Adaptive Security Appliance IPsec Site to Site VPN Lab 2 3: Deploying Basic Cisco Easy VPN Lab 2 4: Deploying Advanced Cisco Easy VPN Server with Certificate Based Authentication Lab 2 5: Deploying the Cisco ASA 5505 Adaptive Security Appliance as Cisco Easy VPN Remote Lab 3 1: Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN Using Local Password Authentication Lab 3 2: Deploying the Cisco AnyConnect Client with Centralized Management Lab 3 3: Configuring a Basic Cisco AnyConnect Full Tunnel SSL VPN Using the Local CA Lab 4 1: Configuring Basic Clientless VPN Access on the Cisco ASA Adaptive Security Appliance Lab 4 2: Configuring Advanced Application Access in Clientless SSL VPNs Lab 4 3: Customizing the SSL VPN Portal on the Cisco ASA Adaptive Security Appliance Lab 5 1: Deploying SSL VPN Access Policies and Authorization Parameters Lab 5 2: Deploying Cisco Secure Desktop and DAP in SSL VPNs Lab 5 3: Configuring a Load Balancing SSL VPN Cluster Answer Key