Cisco ASA Firewall Fundamentals

Explore firewall concepts, types, and roles as enforcement points between trusted and untrusted networks, including proxy, application, and personal firewalls, and how they control inbound and outbound traffic.

Compare stateful and stateless firewalls, showing how stateful firewalls use a state table to permit or deny traffic, with return traffic allowed from trusted to untrusted zones.

Learn how private ip addresses become globally routable via static, dynamic, and policy-based nat on Cisco ASA firewalls, including object nats, nat pools, and pat.

Deploy Cisco ASA in routed mode by default with layer 3 interfaces. Switch to transparent mode with layer 2 interfaces to inspect traffic, via the configuration command firewall transparent.

Learn how security contexts enable multi context mode on a Cisco ASA firewall, allowing one physical device to host multiple virtual firewalls by allocating interfaces.

Explore IPsec VPN concepts including site-to-site and remote access, encryption, hashing, authentication, interesting traffic defined by an ACL, phase one and two negotiations, Diffie-Hellman, and transport versus tunnel modes.

Explore how to deploy and manage clientless ssl vpn and anyconnect on a Cisco asa, including certificate setup, portal customization, group policies, split tunneling, and posture assessment.

Establish a site-to-site vpn tunnel between an RSA and a Cisco CSR router, using command-line and gui tools to configure phase one, phase two, and nat exclusions.