56
SASAC Wokingham June 2017 1 June 16, 2017 Implementing Core Cisco ASA Security SASAC Instructor: Graham Tuthill Location: Wokingham 12th June 2017 Start at 9:30 Can you check you have digital course material

SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

1

June 16, 2017

Implementing Core Cisco ASA Security

SASAC

Instructor: Graham Tuthill

Location: Wokingham

12th June 2017

Start at 9:30 Can you check you have digital course material

Page 2: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

2

June 16, 2017

Course Times:Mon 9:30 to 4:30Tue 9:00 to 4:30Wed 9:00 to 4:30Thu 9:00 to 4:30Fri 9:00 ?

WiFi Code808­080­808

My Websitedefaultgateway.co.uk

Breaks:Morn 10:45/15 minsLunch 12:30/35 minsAft 2:45/15 mins

Local PC PasswordPa$$w0rd

Page 3: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

3

June 16, 2017

Page 4: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

4

June 16, 2017

DariuszMo

RichardRobertAlex

Page 5: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

5

June 16, 2017

Page 6: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

6

June 16, 2017

Page 7: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

7

June 16, 2017

Page 8: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

8

June 16, 2017

Page 9: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

9

June 16, 2017

Page 10: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

10

June 16, 2017

Page 11: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

11

June 16, 2017

Page 12: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

12

June 16, 2017

Page 13: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

13

June 16, 2017

Page 14: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

14

June 16, 2017

Page 15: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

15

June 16, 2017

Page 16: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

16

June 16, 2017

Complete Lab 2­1 by 9:00 am tomorrow

We are finished today with theory 

Page 17: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

17

June 16, 2017

Page 18: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

18

June 16, 2017

Page 19: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

19

June 16, 2017

Page 20: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

20

June 16, 2017

Page 21: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

21

June 16, 2017

Complete Lab 3­1 NAT (Object & Manual)by11:50

Page 22: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

22

June 16, 2017

Page 23: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

23

June 16, 2017

Page 24: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

24

June 16, 2017

Page 25: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

25

June 16, 2017

Page 26: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

26

June 16, 2017

Page 27: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

27

June 16, 2017

Page 28: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

28

June 16, 2017

Page 29: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

29

June 16, 2017

Page 30: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

30

June 16, 2017

Complete Lab 3­2 by 9:00 am WednesdayAccess Control

Outside Server is accessed usingroot/Ci5coAdmin

Task 3 Step 2 The lab is correct with the IP addreses used as they are delibrately getting you to enter errors in the ACL to troubleshoot

Page 31: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

31

June 16, 2017

Page 32: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

32

June 16, 2017

Page 33: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

33

June 16, 2017

Page 34: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

34

June 16, 2017

Page 35: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

35

June 16, 2017

Page 36: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

36

June 16, 2017

Page 37: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

37

June 16, 2017

Complete Lab 4­1 by 12:00

Page 38: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

38

June 16, 2017

Page 39: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

39

June 16, 2017

Page 40: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

40

June 16, 2017

Complete Lab 4­2 Task 1 and Task 3 (Tidy up)

Complete by 2:15 pm and remember to read the lab tips provided on the remote lab page.

Page 41: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

41

June 16, 2017

Page 42: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

42

June 16, 2017

Page 43: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

43

June 16, 2017

Page 44: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

44

June 16, 2017

Page 45: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

45

June 16, 2017

Page 46: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

46

June 16, 2017

Page 47: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

47

June 16, 2017

Page 48: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

48

June 16, 2017

Complete Lab 6­1 by 11:30 or earlier (Include Coffee break)

Read the provided Lab Tips

If you have problems logging on with the Clientless SSLCheck you have not exceeded the license count of two

Go into the ASDM monitoring and logut any SSL VPNs and try again

If you have any issues logging onto the CAtry .\administrator

It looks like they have not cleared the flash out so you will getmessages like key­pair exists and bookmarks exist, just createwith a different name

Page 49: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

49

June 16, 2017

Complete Labs 6­1/6­2/6­3 by about 1:30 including Lunch

Please read the Lab Tips provided by remote labsfor each Lab (Provided on as a button on the topology page of the remote lab)

In addition if you cannot understand the LDAP mapping noteprovided in the lab tips please refer to my website which has a screen shot of the correct config.

Page 50: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

50

June 16, 2017

Page 51: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

51

June 16, 2017

We will restart at 3:00 pm 

Use the time for a short coffee break and to complete the labs of module 6

or

Start Lab 7­1 if you have completed Module 6 Labs

Page 52: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

52

June 16, 2017

Page 53: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

53

June 16, 2017

We will start tomorrow at 9:30 with the next module 8High Availability

The only Lab tomorrow is Lab 8­1 and it does not rely on any of the previous labs, but is does rely on sharing and pods being in Sync

There are three labs for Module 7Lab 7­1 (25 mins)Lab 7­2 ( 35­40 mins)Lab 7­3  (10­15 mins)

I will start the Adobe session tomorrow at 7:30 and start the theory at 9:30

Page 54: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

54

June 16, 2017

Page 55: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

55

June 16, 2017

Page 56: SASAC Implementing Core Cisco ASA Security...SASAC Wokingham June 2017 53 June 16, 2017 We will start tomorrow at 9:30 with the next module 8 High Availability The only Lab tomorrow

SASAC Wokingham June 2017

56

June 16, 2017