asa

The video explains and demonstrates the relationship between tunnel-group and group-policy on Cisco ASA SSL VPN and compare them to the IPSec counterpart. You will learn different ways to land a user on a tunnel-group and either statically or dynamically assign them to a group-policy. Both pros and cons of each method will be discussed so you can decide which is best suited for your deployment. 

The video gets you started on SSL VPN on Cisco ASA with certificate installation. You will learn how to generate a Certificate Signing Request (CSR) on the ASA, submit it to your Certificate Authority (CA), and import the signed certificate back to the ASA. Installing a trusted certificate should be your first step of implementing SSL VPN to save users from unnecessarily encountering certificate warnig.

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Twice NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation. Since this video is a counterpart of SEC102-103 with Object NAT, we will make comparisons between these two NAT configuration options. 

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Twice NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation. Since this video is a counterpart of SEC102-103 with Object NAT, we will make comparisons between these two NAT configuration options. 

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Object NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. We will also go over how DNS64 can help translating IP embedded in DNS packet as it crosses the v4-v6 network boundary. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation.

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Object NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. We will also go over how DNS64 can help translating IP embedded in DNS packet as it crosses the v4-v6 network boundary. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation.

• Network Device and Network Device Group
• Device Filter
• Policy Element

• TACACS+ Shell Privileges and Command Authorization
• Policy Element
  • Shell Profile
  • Command Set

The video demonstrates TACACS+ configuration for Device Admin on Cisco ACS 5.4. We will go through the entire process of adding network devices, users, and building authentication and authorization policies. We will also look at basic AAA configuration on a Cisco switch and ASA firewall. We will use both local and AD users for testing and granting shell privilege 15 in this lab.

Part 1 of this video focuses on configurations on the ACS server.
 

Topic: