Cisco Secure Firewall Advanced Features, Operations & Management (CSFAF)
At Course Completion
- Describe the advanced features of a Next-Generation Firewall
- Explain the newly release features
- Configure advanced and newly released features
- Understand advanced packet flow analysis
Audience Profile
Network Security Administrators
Network Security Engineers
Network Security Managers
Security Sales Engineers
Security System Engineers
Anyone else who wants to learn about Cisco Secure Firewall
Prerequisites
<strong>Prerequisites:</strong>
Before taking this course, it would be good to have a basic understanding of Cisco Secure Firewall and some hands-on experience working on the device (Cisco Secure Firewall). If you don’t have the pre-requisites described above, then a good way to prepare for this course is to attend our course ’Introduction to Cisco Secure Firewall’.
Outline
Next-Generation Features of Cisco Secure Firewall (CSF)
- Security Intelligence (SI)
- File Control and Advanced Malware Protection
- Malware and File Policy
- Overview of Intrusion Prevention and Snort Rules
- Firepower Recommendations
Cisco Secure Firewall Redundancy
- Overview of High Availability (HA)
- Discuss active / standby HA
External Threat Intelligence
- Overview of external feeds
- Describe incidents
- Explain Cisco Threat Intelligence Director (CTID)
- Understanding subscription of CTID to external feeds
Domain Management
- Introduction to multi-tenancy using domains
- Managing domains
- Creating new domains
- Moving devices between domains
VPNs
- Site-to-Site VPN
- RA-VPN
SNORT3
- Introduction to Snort3
- Explain Elephant Flow
- Discuss Snort3 recommendations
- Explain rule actions
Advance Packet Flow Analysis
- Using the ’Packet-Tracer’ feature
- Using the ’Capture with Trace’ feature
What’s New in 7.x
- VPN Load Balancing for FMC-managed devices
- Explain FQDN NAT
- Understand network wildcard mask object
- Discuss direct Internet access
- Describe AnyConnect with SAML external browser
- Explain encrypted visibility engine
- Discuss enhancement in TLS (focus on TLS 1.3)
Lab Exercises
- Configuring CTID
- Configure FQDN NAT
- Using Wildcard Mask
- Configure Direct Internet Access (DIA) with Policy Based Routing (PBR)
- Configure Site-to-Site VPN
- Configuring AnyConnect VPN
- Configuring and detecting Elephant Flow using Snort3
- Configuring Snort3 Firepower recommendations
- Configuring additional rule actions for Snort3
- Configuring and validating enhanced Captive Portal
- Setting up an Encrypted Visibility Engine for reports, events, and telemetry
- TLS 1.3 ESNI extension (overview/ no hands-on)
- Advance Packet Flow Analysis
- Configure High Availability (Active / Standby)
- Remote deployments, selective deployment, and rollbacks (overview/ no hands-on
Sorry! It looks like we haven’t updated our dates for the class you selected yet. There’s a quick way to find out. Contact us at 502.265.3057 or email info@training4it.com
Request a Date