CISCO ASA FTD Firewall – a part of FIREWALL MASTERY 5IN1 – Oct 2021

Module 1: NGFW overview & Cisco ASA/FTD Features

• [THEORY] Why do we need Firewall in spite of ACL in Router
• [THEORY] Stateful Inspection
• [THEORY] CheckPoint UTM Features

Module 2: CISCO ASA/FTD Components Overview

• [THEORY] Firewall / Gateway/ Enforcement Module (NG Appliances)
• [THEORY] Management Server (Smart-1 Appliances)
• [THEORY] Log Server

Module 3: CISCO ASA/FTD Installation Scenarios

• [THEORY] Standalone Installation (2 Tier)
• [THEORY] Distributed Installation (3 Tier)
• [THEORY] Standalone vs Distributed

Module 4: CISCO ASA/FTD Standalone (2-Tier) Installation

• [LABS] Installation of CISCO ASA/FTD ISO (FW + Management) in PNET Site-A setup
• [LABS] Installation of Smart Console at Site-A on Windows PC
• [LABS] Enabling Blades on CISCO ASA/FTD Objects
• [LABS] Configure Network Interfaces & Topology (Anti-Spoofing concept)
• [LABS] Configure Routing (static & Default Routes)
• [LABS] Login to the Console and install Default Policy

Module 5: CISCO ASA/FTD Distributed (3-Tier) Installation

• [LABS] Installation of CISCO ASA/FTD ISO (FW) in PNET Site-B setup
• [LABS] Installation of CISCO ASA/FTD ISO (Management) in PNET Site-B setup
• [LABS] Adding a Gateway to the Security Management Server (SIC Integration)
• [LABS] SIC Troubleshooting
• [THEORY] Expert Mode & CLISH
• [LABS] Expert Mode & CLISH

Module 6: Managing Administrators

• [THEORY] Add Permission Profile
• [LABS] Add Permission Profile
• [THEORY] Add Administrator and Add Permission Profile
• [LABS] Add Administrator and Add Permission Profile
• [THEORY] Database Lock concepts
• [LABS] Database Lock concepts

Module 7: Policies

• [LABS] Add a Site-C Firewall to Management Server at Site B
• [LABS] Add a Policy for Site-C Firewall on Management Server B
• [LABS] Add a Policy for Site-B to Site-C connectivity
• [THEORY] Policy Objects ( Nodes, Host, Network, Groups, Address Ranges, Services etc.)
• [LABS] Policy Objects ( Nodes, Host, Network, Groups, Address Ranges, Services etc.)
• [LABS] Add Internet Access Rule

Module 8: Policies (contd.)

• [LABS] Add FW Management Rules
• [LABS] Add DMZ Access Rules
• [THEORY] Policy Layers (Introduction)
• [THEORY] Ordered Layers and Inline Layers
• [LABS] Ordered Layers and Inline Layers
• [THEORY] Policy Optimization for performance
• [THEORY] Implied rules & Global Properties
• [LABS] Implied rules & Global Properties
• [THEORY] Stealth Rule, Clean-up Rule
• [LABS] Stealth Rule, Clean-up Rule

Module 9: Logs Management and Adminsitration

• [THEORY] Log Files & Troubleshootin (Filters, etc)
• [LABS] Log Files & Troubleshootin (Filters, etc)
• [THEORY] Log files Management
• [LABS] Log files Management

Module 10: Network Address Translation

• [THEORY] NAT Theory & Concepts
• [THEORY] Auto NAT (Hide & Static) Lab
• [LABS] Auto NAT (Hide & Static) Lab
• [THEORY] Manual NAT (Hide & Static) Lab
• [LABS] Manual NAT (Hide & Static) Lab
• [THEORY] PAT Concepts
• [THEORY] No-NAT Concept

Module 11: CheckPoint Clustering

• [LABS] Add Cluster object
• [LABS] Add Cluster Members
• [LABS]Configure Clustering
• [LABS] Test Clustering
• [LABS] High-Availabilitiy and Load Sharing scenarios

Module 12: HTTPS Inspection

• [THEORY] SSL Concept & HTTPS Inspection
• [LABS] Configure HTTPS Inspection
• [LABS] Generate HTTPS Cerificate and install the Certificate on Nodes
• [LABS] Enable HTTPS Inspection Blade & Deploy Policy for SSL Decrytion
• [LABS] Test SSL Decryption

Module 13: UTM Features

• [LABS] Application Control
• [LABS] URL filtering
• [LABS] Conetent Awareness
• [LABS] DLP
• [THEORY] Threat Prevention Policy (Concept and Overview)
• [THEORY] IPS (Concept and overview)

Module 14: Identity Awareness

• [THEORY] User based Access rule with authenticated Access
• [LABS] User based Access rule with authenticated Access
• [LABS] Client Authentication
• [LABS] Install AD server at Site-b
• [LABS] Enable Identity Awareness Blade
• [LABS] Configure Identity Awareness rules based on Access objects

Module 15: VPN

• [THEORY] VPN Theory
• [LABS] VPN Site-A to Site-B configuration (Lab)
• [LABS] Remote Access VPN
• [LABS] Mobile Access / SSL VPN
• [LABS] VPN tunnel Utility

Module 16: Backup & Restore (contd.)

• [LABS] Backup, Restore & Snapshot through Web GUI
• [LABS] Backup, Restore & Snapshot through CLI

Module 18: Licensing (overview)

• [THEORY] Central License
• [THEORY] Local License
• [THEORY]Smart update for Licenses& Contracts

Module 17: Command Line Interface (CLI)

• [THEORY] cpconfig
• [LABS] cpconfig
• [THEORY] cpstop and cpstart commands, cprestart
• [LABS] cpstop and cpstart commands, cprestart
• [THEORY] configure interfaces
• [LABS] configure interfaces
• [THEORY] configure routes
• [LABS] configure routes
• [THEORY] Some More commands
• [LABS] Some More commands