Cisco ASA

fluk3d

Our company is looking at deploying Cisco ASA products and I'm fairly familiar with routers/switches however; do you guys have any suggestions on some resources I could use to quickly get familiar with the product line configuration, administration etc...

I've been around various types of firewalls in the past, checkpoint, fortigate, sonicwall so it shouldn't be that different to me

SubnetZero

For free resources check our Cisco ASA configuration guides

8.4

Cisco ASA 5500 Series Configuration Guide using the CLI, 8.4  [Cisco ASA 5500 Series Adaptive Security Appliances] - Cisco Systems

8.3

Cisco ASA 5500 Series Configuration Guide using the CLI, 8.3  [Cisco ASA 5500 Series Adaptive Security Appliances] - Cisco Systems

If you are looking to purchase books try

Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance (2nd Edition)

http://www.amazon.com/Cisco-ASA-All---One-Appliance/dp/1587058197/ref=sr_1_1?ie=UTF8&qid=1328897402&sr=8-1

Cisco ASA and PIX Firewall Handbook

http://www.amazon.com/Cisco-ASA-PIX-Firewall-Handbook/dp/1587051583/ref=sr_1_2?ie=UTF8&qid=1328897402&sr=8-2

HTH

fluk3d

^ Thanks!

Any CBTs that come to mind?

SubnetZero

Yes!

For FREE stuff check out these

Cisco ASA 5500 Series Adaptive Security Appliances Online Learning Modules - Cisco Systems

There are plenty of ASA training videos out there for purchase but they are geared towards certifications and cover a broad range of topics besides just the ASA (e.g. IOS firewalls, CBAC, ZoneBased, VPNs, IDS/IPS, access controls using ACS, etc.)

INE CCIE Security Course

CCIE Security Video Courses - Cisco Certification Training Series

IPexpert CCNP Security Course

CCNP Security Video Training | IPexpert Inc.

IPexpert CCIE Security Course

CCIE Security Video on Demand Course | IPexpert Inc.

CBT nuggets CCNP Security FIREWALL course

Cisco CCNP Security (formerly known as CCSP) FIREWALL 642-617 Video Training Online | CBT Nuggets

Turgon

SubnetZero wrote: »

Yes!

For FREE stuff check out these

Cisco ASA 5500 Series Adaptive Security Appliances Online Learning Modules - Cisco Systems

There are plenty of ASA training videos out there for purchase but they are geared towards certifications and cover a broad range of topics besides just the ASA (e.g. IOS firewalls, CBAC, ZoneBased, VPNs, IDS/IPS, access controls using ACS, etc.)

INE CCIE Security Course

CCIE Security Video Courses - Cisco Certification Training Series

IPexpert CCNP Security Course

CCNP Security Video Training | IPexpert Inc.

IPexpert CCIE Security Course

CCIE Security Video on Demand Course | IPexpert Inc.

CBT nuggets CCNP Security FIREWALL course

Cisco CCNP Security (formerly known as CCSP) FIREWALL 642-617 Video Training Online | CBT Nuggets

Thanks for these links. Im going to take a look. One thing I have considered is renting some racktime on a vendor CCIE security rack to have access to firewalls and such, but Im unsure what software I may need to download to use the environment. Plus I have no CCIE security workbook.

SubnetZero

Turgon wrote: »

Thanks for these links. Im going to take a look. One thing I have considered is renting some racktime on a vendor CCIE security rack to have access to firewalls and such, but Im unsure what software I may need to download to use the environment. Plus I have no CCIE security workbook.

Nothing wrong with that, knowledge is power!

That being said you're currently studying for your route/switch, no? If so STAY focused on that and stay away from CCIE Security until you're done with R&S, you don't want to lose focus by getting side tracked by this stuff!

Otherwise you can pickup CCIE security workbooks on the cheap and then practice on QEMU for FREE!
How to emulate Cisco ASA | GNS3

However QEMU has it's limitations and when you really want to learn it I would suggest renting racks from IPE, INE, or CCB

For CCIE Security you wouldn't need any software besides RDP or VNC (to remote into the ACS server) and putty, securecrt, etc.

From the ACS you will have access to the ACS via web browser as well as ASDM for the ASA's, etc.

There is SO much for us to learn it NEVER ends!!!

Turgon

SubnetZero wrote: »

Nothing wrong with that, knowledge is power!

That being said you're currently studying for your route/switch, no? If so STAY focused on that and stay away from CCIE Security until you're done with R&S, you don't want to lose focus by getting side tracked by this stuff!

Otherwise you can pickup CCIE security workbooks on the cheap and then practice on QEMU for FREE!
How to emulate Cisco ASA | GNS3

However QEMU has it's limitations and when you really want to learn it I would suggest renting racks from IPE, INE, or CCB

For CCIE Security you wouldn't need any software besides RDP or VNC (to remote into the ACS server) and putty, securecrt, etc.

From the ACS you will have access to the ACS via web browser as well as ASDM for the ASA's, etc.

There is SO much for us to learn it NEVER ends!!!

Thanks. No worries of being side tracked here. I just want some ASA gametime for a few hours in a month or so's time. It would be good to work with a lab with 6500's and FWSMs, ACE as well as ASAs, but I dont think there are commercial labs available?

SubnetZero

https://labops-out.cisco.com/labops/accelerate/default.asp

You may find something like that here ^ however I have no idea how one acquires access? Do you work for Gold Cisco Partner by chance?

Turgon

SubnetZero wrote: »

https://labops-out.cisco.com/labops/accelerate/default.asp

You may find something like that here ^ however I have no idea how one acquires access? Do you work for Gold Cisco Partner by chance?

I do indeed.

fluk3d

I found this while searching google

Cisco Firewall Video Mentor (Video Learning)

Might come in handy for someone