Cisco FIREWALL 2.0: Configuring Cisco ASA Management Features

Overview/Description
It is important to understand how to deploy basic management features on the Cisco ASA. These device management features include configuring: the device name, the system time, event and session logging, the device software, and the device licensing. This course identifies how to select management access choices, procedures, input parameters, and design and implementation guidelines. It also explains how to configure and verify time settings and support for NTP and logging settings and NetFlow on the Cisco ASA. The course covers the file system and configuration management, as well as software and activation key management on the Cisco ASA . You can access the Cisco ASA management interface locally, using the console connection, or you can access it remotely over an IP network. Configuring remote management access in a secure fashion is of paramount importance to ensure the integrity of the ASA in a possibly hostile environment, such as when management paths use an untrusted network. This course describes how to configure remote management access to the ASA, and how to configure and use administrator authentication, authorization, and accounting (AAA) features. The course concludes with guidelines and procedures on troubleshooting the configured management access functions.

Target Audience
Anyone wishing to obtain the Cisco Certified Network Professional CCNP Security designation. Cisco Network Security Engineers responsible for the selection, configuration, and the troubleshooting of the majority of Cisco ASA Adaptive Security Appliance perimeter security features to reduce risk to IT infrastructure and its applications within their networking environments. Established IT professionals with a good understanding of networking and Cisco technology, installation, troubleshooting and monitoring of devices used to maintain integrity, confidentiality and availability of data and network devices that Cisco uses in its security infrastructure, as well as working knowledge of the Microsoft Windows operating system. Candidates who have completed the Cisco Certified Network Associate (CCNA) Certification and the Cisco Certified Network Associate Security Certification (CCNA Security).

Expected Duration (hours)
3.5

Lesson Objectives

Cisco FIREWALL 2.0: Configuring Cisco ASA Management Features

recognize how to configure and verify basic management settings on the Cisco ASA

identify the configuration tasks involved in deploying basic device management features

describe how to manage the file system and configuration of the Cisco ASA

describe how to manage software and activation keys on the Cisco ASA

recognize how to configure time settings and support for NTP on the Cisco ASA

recognize how to verify time settings and support for NTP on the Cisco ASA

identify subsystem logging message formats and severity levels

identify how to configure event and session logging

recognize the commands used to verify event and session logging

recognize how to troubleshoot event and session logging

configure Cisco ASA logging to the Syslog server and Cisco ASDM

recognize how to configure Telnet and SSH access management channels on Cisco ASA Adaptive Security Appliances

recognize how to configure HTTPS and SNMP access management channels on Cisco ASA Adaptive Security Appliances

recognize important CLI commands used to configure remote management channels on Cisco ASA Adaptive Security Appliances

enable SSH access to the Cisco ASA security appliance

recognize how to troubleshoot remote management channels

recognize how to configure local and remote AAA authentication for management access on the Cisco ASA

recognize how to configure local and remote AAA authorization for management access on the Cisco ASA

describe how to verify and troubleshoot AAA for management access on the Cisco ASA