Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention

The SFWIPA training shows you how to deploy Cisco Secure Firewall Threat Defense system as a data center or Internet Edge firewall with VPN support, including identity-based policies, SSL decryption, remote-access VPN, site-to-site VPN, advanced IPS, and automation via APIs.

Describe Cisco Secure Firewall Threat Defense

Describe advanced deployment options on Cisco Secure Firewall Threat Defense

Describe advanced device settings

Configure dynamic routing on Cisco Secure Firewall Threat Defense

Configure advanced NAT on Cisco Secure Firewall Threat Defense

Configure SSL decryption policy

Deploy Remote Access VPN

Deploy identity-based policies

Deploy site-to-site IPsec-based VPN

Deploy advanced access control settings

Describe advanced event management

Describe available integrations

Troubleshoot traffic flow using advanced options

Describe benefits of automating configuration and operations via APIs

Describe configuration migration from Cisco ASA

System Installers, System Integrators, System Administrators, Network Administrators, Solutions Designers

No formal prerequisites. Recommended: TCP/IP knowledge, basic routing protocols, familiarity with Cisco Secure Firewall Threat Defense basics.

Course Outline
Introducing Cisco Secure Firewall Threat Defense
Describing Advanced Deployment Options
Configuring Advanced Device Settings
Configuring Dynamic Routing
Configuring Advanced NAT
Configuring SSL Policy
Deploying Remote Access VPN
Deploying Identity-Based Policies
Deploying Site-to-Site VPN
Configuring Snort Rules and Network Analysis Policies
Describing Advanced Event Management
Describing Integrations
Troubleshooting Advanced Traffic Flow
Automating Cisco Secure Firewall Threat Defense
Migrating to Cisco Secure Firewall Threat Defense

Lab Outline
Deploy Advanced Connection Settings
Configure Dynamic Routing
Configure SSL Policy
Configure Remote Access VPN
Configure Site-to-Site VPN
Customize IPS and NAP Policies
Configure Cisco Secure Firewall Threat Defense Integrations
Troubleshoot Cisco Secure Firewall Threat Defense
Migrate Configuration from Cisco Secure Firewall ASA