Deploying Cisco ASA VPN Solutions (VPN)

Learning@Cisco
Datasheet

The Deploying Cisco ASA VPN Solutions (VPN) v1.0 curriculum includes an instructor-led course presented by Cisco Authorized Learning Partners. This five-day course aims to provide network security engineers with the knowledge and skills needed to configure Cisco Virtual Private Network (VPN) solutions with the Cisco ASA security appliance. Students will learn the skills they need to choose, configure, and troubleshoot the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce the risk to IT infrastructure and its applications using Cisco ASA Software Version 8.2. This curriculum is part of the official Cisco CCNP Security curriculum and covers the skills that are required for CCNP Security certification, Cisco ASA Security Specialist certification and Cisco VPN Security Specialist certification.

Deploy Cisco ASA adaptive security appliance, Cisco AnyConnect, and Cisco IOS SSL VPN remote access solutions Deploy Cisco ASA adaptive security appliance and clientless Secure Sockets Layer (SSL) VPN remote access solutions Deploy advanced Cisco ASA adaptive security appliance VPN solutions

Technical Skills Covered

Students will learn these technical skills:

Deploying a basic Cisco ASA adaptive security appliance IPsec site-to-site VPN Deploying a certificate-based Cisco ASA adaptive security appliance IPsec site-to-site VPN Deploying a basic Cisco Easy VPN Deploying an advanced Cisco Easy VPN Server with certificate-based authentication Deploying the Cisco ASA 5505 Adaptive Security Appliance as a hardware Cisco Easy VPN client Configuring a basic Cisco AnyConnect full-tunnel SSL VPN using local password authentication Configuring a basic Cisco AnyConnect full-tunnel SSL VPN using the local certificate authority Deploying the Cisco AnyConnect SSL VPN client with centralized management Configuring basic clientless SSL VPN access Configuring advanced application access in clientless SSL VPNs Customizing the SSL VPN portal Deploying SSL VPN access policies and authorization parameters Deploying Cisco Secure Desktop and Dynamic Access Policy (DAP) in SSL VPNs Configuring a load balancing SSL VPN cluster

Intended Targeted Audiences

The primary audiences for this curriculum are network security engineers within the following: Cisco channel partner organizations Cisco customer organizations Cisco service and support organizations

Curriculum Objectives

Upon completing this curriculum, the learner should be able to meet these overall objectives: Evaluate the Cisco ASA adaptive security appliance VPN subsystem Deploy Cisco ASA adaptive security appliance IP Security (IPsec) VPN solutions

2011 Cisco and/or its affiliates. All rights reserved.

Deploying Cisco ASA VPN Solutions (VPN)

Cisco Network Security Engineer Curriculum
This curriculum is part of the recommended preparation for the CCNP Security certification, Cisco ASA Specialist certification, and Cisco VPN Security Specialist certification.

Learning@Cisco
Datasheet

Recommended Prerequisites for the VPN Curriculum

Completion of the CCNA Security certification requires the prerequisite exams and recommended training shown in Table 1. Table 1 Required Exams and Recommended Training
Required Exams 640-802 or 640-822 & 640-816 Exam Name and Recommended Training

security product certification for engineers, consultants, and architects who configure advanced Cisco ASA adaptive security appliance firewall and VPN solutions, including access control, advanced application inspection and control, IPSec remote access VPN, clientless SSL remote access VPN, AnyConnect full-tunnel SSL VPN, IPSec site-to-site VPNs, high availability, and failover features (see Table 2). Table 2 Cisco ASA Specialist Exams and Recommended Training
Required Exams 642-617

Exam Name and Recommended Training

Deploying Cisco ASA Firewall Solutions (FIREWALL) Deploying Cisco ASA VPN Solutions (VPN)

CCNA Composite or Interconnecting Cisco Network Devices 1 (ICND1) Interconnecting Cisco Network Devices 2 (ICND2)

642-647

Cisco VPN Security Specialist

Cisco offers numerous VPN solutions and configurations. Cisco VPN solutions are widely deployed in many of todays networks. Many enterprises and service providers deploy these numerous VPN solutions at any given time for their various customers and organizations, from simple point-to-point tunneling to multilayer, dynamic, highavailability VPNs. Cisco VPN security specialists can configure, maintain, troubleshoot, and support these various VPN solutions using Cisco IOS Software and the robust Cisco ASA adaptive security appliance (see Table 3). Table 3 Cisco VPN Security Specialist Exams and Recommended Training
Required Exams 642-637 Exam Name and Recommended Training Securing Networks with Cisco Routers and Switches (SECURE) Deploying Cisco ASA VPN Solutions (VPN)

640-553

Implementing Cisco IOS Network Security (IINS)

Cisco Adaptive Security Appliance Specialist

The Cisco ASA Security Specialist certification recognizes security professionals who have attained specialized, in-depth expertise and proven knowledge of the recommended best practices in designing, implementing, maintaining, and troubleshooting network security solutions using the Cisco ASA adaptive security appliance technologies. The Cisco ASA adaptive security appliance is a best-of-class security appliance, widely deployed, and in use at leading enterprises and service providers worldwide. The Cisco ASA Security Specialist certification is recognized as the benchmark

642-647

2011 Cisco and/or its affiliates. All rights reserved.

Deploying Cisco ASA VPN Solutions (VPN)

CCNP Security Certification
The CCNP Security Program is a three-year certification program intended to recognize the Cisco network security engineers who have the necessary skills to test, deploy, configure, maintain, and troubleshoot Cisco network security appliances and Cisco IOS Software devices that establish the security posture of the network. Prior to attempting the CCNP Security certification or any of its associated specialist certifications, it is required that an individual has met the requirements for the Cisco CCNA Security certification and has at least one to three years of experience in the field of network security (see Table 4). Table 4 CCNP Security Exams and Recommended Training

Learning@Cisco
Datasheet

Delivered by

Cisco Authorized Learning Partners worldwide 14 individual labs

Lab exercises

Features and Benefits of Cisco Authored Professional Curriculum

Subject matter experts around the world develop authored Cisco training from Cisco employee, partner, and customer organizations to align to the specific job tasks of professional-level network engineers who use current Cisco products and solutions. Cisco Authorized Learning Partners deliver authored Cisco curriculum utilizing certified instructors with a blend of lectures, labs, self-paced lessons, and assessments (see Table 6). Table 6 Cisco Authored Professional Curriculum
Primary Features Customer-centered design Primary Benefits Input from Cisco employees, customers, and partners confirms relevancy Curriculum aligns to specific tasks of network engineers Mix of classroom and self-paced lessons offers flexibility Hands-on practice strengthens skills

Required Exams 642-637

Exam Name and Recommended Training

Securing Networks with Cisco Routers and Switches (SECURE) Implementing Cisco Intrusion Prevention System (IPS) Deploying Cisco ASA Firewall Solutions (FIREWALL) Deploying Cisco ASA VPN Solutions (VPN)

642-627

642-617

Job role focus

642-647

Blended learning curriculum Extensive lab exercises End-of-module assessments Worldwide availability Cisco Authorized Learning Partners Aligned to certification

Course Specifications
Table 5 shows the details of the Deploying Cisco ASA VPN Solutions (VPN) v1.0 course. Table 5 Deploying ASA VPN Solutions (VPN) v1.0 Course Details
Course name Short identifier Associated certifications Associated exam Deploying Cisco ASA VPN Solutions VPN CCNP Security, Cisco ASA Security Specialist, Cisco VPN Security Specialist 642-647 Deploying Cisco ASA VPN Solutions (VPN), 120 minutes; Available at all worldwide Pearson VUE testing centers Duration 5 days (classroom or virtual classroom)

Review reinforces learning objectives

Consistent curriculum in all regions Certified instructors deliver Cisco approved content Establishes structured professional development and industry recognition of skills and knowledge Assurance of latest technologies, knowledge, skills, and best practices of Cisco solutions and architectures

Current Cisco solutions and architectures

2011 Cisco and/or its affiliates. All rights reserved.

Accept Only the Best

Only Cisco Authorized Learning Partners deliver the official Cisco security curriculum. Authorized training ensures that you will gain the knowledge and expertise that you need to be successful in todays competitive IT business environment. Cisco Learning Partners offer a comprehensive set of training resources, from instructor-led courses to remote-access labs and e-learning solutions to improve technology expertise. Other benefits include the following:

Learning skills on the latest Cisco products and software: Authorized learning partners expose students to the latest revisions and newest products to help accelerate their skills for years to come. Consistent expertise: Certified Cisco instructors assure students and businesses the same level of expertise, quality, and service from one class to the next. Updated training: Cisco Authorized Learning Partners are aware of the latest product and technology updates, exam changes, and teaching methods. High student satisfaction: Cisco Authorized Learning Partners are required to maintain a high level of satisfaction ratings.

Additionally, Cisco Learning Partners accept Cisco learning credits to cover fees for the Cisco security training curriculum. For more information and to check if these credits are available in your country, visit www.cisco.com/go/learningcredits.

Learn More
For more information or to register for this program, visit http://www.ciscolearningnetwork.com