asa

The video gets you started on software installation of Cisco ASA FirePower service module and prepare it to be a managed device that will be added later to a FireSight system. The lab assumes no existing FirePower software installation or that you want to replace the previous IPS or CX services on the ASA.

The video talks you through steps to upgrade Cisco PRSM server and ASA CX from version 9.2 to 9.3. We will be using web interface to perform the upgrade and explain its benefit over command line. We will also be discussing specifics of upgrade throughout this video to help you avoid any possible gotchas. Most importantly, you can get the sense of how long the whole upgrade process may take.

The video shows you the procedure to manually backup and restore configuration on Cisco PSRM server and ASA CX via command line. From this, you will know what to expect should you ever need to whether revert back config changes or recover from a disaster.

The video demonstrates NG IPS capability of Cisco ASA CX. We will go through IPS Profile configuration, threat level adjustment, and available threat response actions. We will test our configuration by simulating a bot communication attempt to an IRC server using an IRC client. You will get to see CX IPS in action in this video.

The video show you how to configure Cisco ASA CX to perform traffic restriction based on MIME file type. We will demonstrate this through file download and upload to a SharePoint server via HTTP and HTTPS. At the end, we will try to run FTP, a non-MIME supported protocol, through an access policy and discuss the outcome of the testing.

The video shows you how to configure Cisco ASA CX to enforce Active Authentication and apply the same decryption and access policies to the remote VPN user so they can have the same user experiences as those locating inside the network. We will perform additional traffic restriction based on client operating system using information provided by Cisco AnyConnect client, as well as user browser type using User Agent attribute.  

The video shows you how to configure Cisco ASA CX to enforce Active Authentication and apply the same decryption and access policies to the remote VPN user so they can have the same user experiences as those locating inside the network. We will perform additional traffic restriction based on client operating system using information provided by Cisco AnyConnect client, as well as user browser type using User Agent attribute.