firewall

The video looks at advance features on Cisco ASA 1000V in VNMC mode. This includes Connection Timeout, IP Audit, Application Inspection, and TCP Intercept. In addition, we will configure static NAT and inbound ACL to allow our web servers to be accessed from outside.

Topic:

The video walks you through basic configuration of Edge Security Profile and Policies on Cisco ASA 1000V in VNMC mode. We will demonstrate the concept of Security Profile interfaces by applying different security policies based on Ingress ACL and NAT to our Web and DB servers. We will also go through configuration on a Nexus 1000V to have a VEM communicate with the ASA 1000V and enforce the security policies on a port-profile. The lab ends with connectivity testing to verify our configurations.

Note:

The video looks into concepts of Device Profile, Edge Device Profile, and Edge Firewall on Cisco ASA 1000V in VNMC mode. We will configure device general global settings similarly to Cisco VSG through a Device Profile, and ASA 1000V-specific global settings through an Edge Device Profile, both of which are building blocks to an Edge Firewall. Our ASA 1000V that was created in the previous video will be assigned to an Edge Firewall pool, and we will perform basic testing with Syslog and DHCP.

Notes:

The video walks you through an installation process of redundant ASA 1000V in VNMC mode from .ova file. We will create VLAN and port-profiles on Cisco Nexus 1000V for interfaces on ASA 1000V. At the end of the lab, we will register the ASA 1000V to a VNMC and be ready for configuration.

Notes: