Security

• ASA 1000V has four main interfaces
  • Outside
  • Inside
  • Management
  • Failover
• ASA 1000V may have additional logical security profile interfaces 

The video walks you through advance configuration of Cisco VSG. Based on basic setup on the previous video, we will split our test servers into zones to construct and simulate a multi-tier web services environment by using complex ACL policies. You will be able to see how logical separation can be achieved while having all the hosts residing on the same subnet. 

The video introduces you to the concept of Security Profile/Policy on Cisco VSG, via VNMC web interface. This is where the configuration take places for controlling and restricting traffic. We will start off with a very simple ACL policy to allow all traffic between the hosts, and concentrate on how to get a connection established between VSG and VEM over vPath. At the end of the lab, we will have a functioning setup of VSG.

The video shows you how to configure Device Profile/Policy on Cisco VSG through VNMC web interface. These are general global configurations, which include things like AAA, SNMP, Syslog, Domain and NTP. We will then introduce you to the concept of compute firewall and show you how a VSG can be assigned to a particular organization level from a resource pool. The configuration will be verified by testing it with Syslog and SNMP.

The video walks you through an installation process of redundant VSG in L3 mode from .ova file. Manual install option will be selected for the primary VSG, while the secondary will be installed with the installer. We will create port-profiles on Cisco Nexus 1000V for interfaces on VSG. At the end of the lab, we will have VSG registered with VNMC and be ready for configuration.

The video walks you through an installation process of Cisco VNMC. To build foundation of our system, we will register VNMC to vCenter and register VSM to VNMC. We will also create a simple organization hierarchy for our virtual datacenter in preparation for our future labs. This video is applicable to both Cisco VSG and ASA 1000V.

• VNMC Installation
• VSM
• vCenter

Recommeded Videos:

The video introduces you to the concepts behind Cisco VSG and VNMC. We will help you understand how VSG works with other components such as VNMC, VSM and VEM to provide policy-based security within an IP subnet. This video serves as a prerequisite to our future VSG labs. Since this is an introduction-to-technology video, there will be no lab.

• VSG
• VNMC
• VSM
• VEM
• vPath

The video demonstrates Cisco TrustSec support on Cisco ASA 9.1 with Cisco ISE. This lab is based on a 3750 switch that is not TrustSec hardware-capable but able to communicate IP-to-SGT mapping via SGT Exchange Protocol (SXP) to the ASA. We will be constructing an ACL based on SGT using the new Security object group.

The video introduces you to the concept behind Cisco TrustSec. You will be able to understand the basic components that make up Cisco TrustSec and their interaction, which is a prerequisite for our future TrustSec labs. This is an introduction-to-technology video so there will be no lab.

• Cisco TrustSec
• Security Group Tag (SGT)
• Security Group ACL (SGACL)
• SGT Exchange Protocol (SXP)