firewall

The video shows you how to insert a service device in Cisco SD-WAN traffic flow using Service Chaining. A firewall will be used to demonstrate an ability to steer interested traffic to a service device at a central location. The first scenario covers intra-VPN traffic, and the second scenario covers inter-VPN traffic.

The video shows you how to insert a service device in Cisco SD-WAN traffic flow using Service Chaining. A firewall will be used to demonstrate an ability to steer interested traffic to a service device at a central location. The first scenario covers intra-VPN traffic, and the second scenario covers inter-VPN traffic.

The video shows you how to insert a service device in Cisco SD-WAN traffic flow using Service Chaining. A firewall will be used to demonstrate an ability to steer interested traffic to a service device at a central location. The first scenario covers intra-VPN traffic, and the second scenario covers inter-VPN traffic.

The video shows how to combine Cisco VSG and ASA 1000V into a single deployment through Service Chaining on Nexus 1000V to build a secured virtual datacenter. You will see how the VSG enforces security policies to east-west traffic, while ASA 1000V enforces the north-south traffic. We will utilize our previously completed VSG and ASA 1000V labs with additional configuration in our demonstration. Here we assume you have already reviewed previous lab videos, or have good familiarity with all related technologies including Nexus 1000V, VSG, and ASA 1000V

The video shows you how to configure site-to-site IPSec VPN on Cisco ASA 1000V in ASDM mode via CLI. We will go through IKEv1 Phase 1 and Phase 2 configuration to establish an IPSec VPN tunnel to a physical ASA to provide remote access to our servers in the virtual datacenter. You will see the VPN configuration on ASA 1000V being almost identical to a physical ASA.

Topic:

The video looks at advance features on Cisco ASA 1000V in ASDM mode via CLI. This includes Connection Timeout, IP Audit, Application Inspection, and TCP Normalize/Intercept. There are also features like packet fragment settings, and QoS that are not available for configuration in VNMC mode. In addition, we will configure static NAT and inbound ACL to allow our web servers to be accessed from outside.

Topic:

The video walks you through basic security profile configuration on Cisco ASA 1000V in ASDM mode via CLI. We will demonstrate the concept of Security Profile interfaces by applying different security policies based on Ingress ACL and NAT to our Web and DB servers. We will also go through configuration on a Nexus 1000V to have a VEM communicate with the ASA 1000V and enforce the security policies on a port-profile. The lab ends with connectivity testing to verify our configurations.

Note:

The video looks into basic configuration on Cisco ASA 1000V in ASDM mode via CLI. These are general configuration that are commonly found on physical ASA, for example, interfaces, routing, aaa, ssh, http, DHCP etc. There are also features like SNMP, banner, and failover timeouts that are not availble for configuration in VNMC mode. We will perform testing with Syslog, SNMO and DHCP for verficiation.

Notes:

Topic:

The video walks you through an installation process of redundant ASA 1000V in ASDM mode from .ova file. We will create VLAN and port-profiles on Cisco Nexus 1000V for interfaces on ASA 1000V. At the end of the lab, we will register the ASA 1000V to a VNMC and be ready for configuration.

Notes:

The video shows you how to configure site-to-site IPSec VPN on Cisco ASA 1000V in VNMC mode. We will go through VPN Device Policy (Phase 1) and Interface Policy Set (Phase 2) configuration to establish an IPSec VPN tunnel to a physical ASA to provide remote access to our servers in the virtual datacenter. 

Note: 

Topic: