CCNA Security 640-554 By Eng-Ahmed Sultan

1. 09- Configuring Cisco ASA
Ahmed Sultan
CCNA | CCNA Security | CCNP Security | JNCIA-Junos | CEH
© 2009 Cisco Learning Institute. 1

2. What is Cisco ASA ?
• ASA in Cisco ASA stands for Adaptive Security Appliance.
• Cisco ASA is a security device that combines firewall, intrusion
prevention, and virtual private network (VPN) capabilities.
• ASA is valuable and flexible in that it can be used as a security
solution for both small and large networks.
• Cisco ASA can do the following and more:
- Anti virus
- Anti spam
- IDS/IPS engine
- VPN device
- SSL device
- Content inspection
© 2009 Cisco Learning Institute. 2

3. Cisco ASA Models
© 2009 Cisco Learning Institute. 3

4. ASA Security Levels
© 2009 Cisco Learning Institute. 4

5. Emulate ASA on GNS3 (Lab)
Firewall# config t
Firewall(config)# interface Ethernet 0/0
Firewall(config-if)# ip address 10.10.10.1 255.255.255.0
Firewall(config-if)# nameif Management
Firewall(config-if)# security-level 100
Firewall(config-if)# no shutdown
© 2009 Cisco Learning Institute. 5

6. Configure ASA Using ASDM (Lab)
• Make sure your PC is ready to talk to Firewall.
• Copy ASDM image to Firewall (TFTP server).
• Set the Firewall to Load ASDM at next reboot.
- Firewall(config)# asdm image flash:asdm-647.bin
- Firewall(config)# http server enable
- Firewall(config)# http 10.10.10.2 255.255.255.255 Management
- Firewall(config)# username ahmedsultan password cisco privilege 15
• Launch your browser and go to https://10.10.10.1
• Download and Install ASDM App from website.
© 2009 Cisco Learning Institute. 6

7. Configure ASA Using ASDM (Lab)
© 2009 Cisco Learning Institute. 7