CCSP

Securing Networks with ASA Advanced(SNAA)

• Configure policy NAT based on traffic type.
• Describe the layer 7 modular policy framework for the security appliance and how it is configured.
• Describe the layer 7 advanced protocol handling capabilities of modular policy frame and how it is configured.
• Determine the necessary configuration for the ASA 5505 to be a VPN hardware client.
• Configure CSD and DAP for SSL VPN connections on the Cisco ASA.
• Identify the steps needed to configure, inspect, and filter traffic with the Content Security and Control SSM.
• Identify the steps needed to configure the security appliance to identify, alert, and defend against attacks.
The SNAA course is a five-day, leader-led, lab-intensive course. The course picks up where SNAF leaves off. Content that has been moved from SNPA to SNAA includes the following: configuring the ASA 5505 dual-ISP support, configuring ASA 5505 VLANs, configuring policy NAT, installing and configuring the Cisco Secure Desktop, configuring the security appliance to pass multicast traffic, configuring Layer 7 class maps and policy maps, and initializing the AIP-SSM and CSC-SSM. SNAA is part of the Cisco Certified Security Professional track.