Networks Training

Cisco ASA Firewall Fundamentals 3rd Edition

Today I have officially launched my new ebook “Cisco ASA Firewall Fundamentals – 3rd Edition” which is probably the most updated and practical Cisco ASA tutorial out there. It covers the newest ASA version 9.x (plus older versions as well) and all content in the book is applicable for both ASA 5500 and 5500-X series.

I wrote the original First Edition of “Cisco ASA Firewall Fundamentals” in 2008. Since then, I have been updating and enhancing the ebook with all new developments and features that Cisco adds to the ASA product line.

This Third Edition of the book is completely updated to cover the latest ASA version 9.x. All configuration commands, features etc will work on the newest ASA 9.x (in addition to older 8.x versions) and also on the newest ASA 5500-X models. This updated book Edition includes also extensive new content, making it one of the most complete ASA books available in the market. I believe that the Third Edition ebook will be a valuable resource for both beginners and experienced ASA professionals.

This ebook (PDF Format) is filled with raw practical concepts, step-by-step configuration tutorials, more than 50 colorful network diagrams to explain the scenarios, Complete Configuration Examples, real-world cases that you will not find anywhere else etc. There is no fluff or redundant information.

Some of the new topics added in the book include:

  • Basic, Advanced, and Scanning Threat Detection
  • IKEv2 IPSEC VPN (site-to-site)
  • IKEv2 Remote Access VPN (Using Anyconnect Secure Mobility Client)
  • Anyconnect SSL VPN using Self-Signed ASA Certificate
  • Anyconnect SSL VPN using Certificates from the Local CA on ASA for Certificate Based Authentication together with username/password (two factor)
  • Anyconnect SSL VPN using 3rd Party CA Certificates.
  • Per-Session PAT and multi-session PAT for version 9.x
  • Access Control List (ACL ) changes introduced in ASA v9.x
  • Time-based ACLs
  • Master Passphrase Configuration.
  • Identity Firewall Configuration (ASA configuration, AD Agent Configuration etc).
  • IPv6 Routing (static IPv6, OSPFv3 for IPv6)
  • Quality of Service Configuration (Traffic Policing, Traffic Shaping, Priority Queuing)
  • Cisco ASA 5505 chapter (hardware, license, configuration)
  • etc

Those are the additional topics added in 3rd Edition. The rest of the book covers much more content which comprise the most important features and configurations that you will encounter in Cisco ASA firewalls.

I believe that this ASA Configuration Guide will be a valuable resource for any Cisco Professional for years to come. Again, keep in mind that by purchasing this ebook you will be getting huge discounts of the future updated editions of the book that I will be publishing. Just make sure to subscribe to my “Customers’ email list” (at the download page after purchasing the book) in order to be eligible for the discounts.

GET “CISCO ASA FIREWALL FUNDAMENTALS 3RD EDITION” HERE

Permitting Traffic to Enter and Exit the Same Interface on Cisco ASA

same-security-traffic permit intra-interface command on Cisco ASA firewall

With the older Cisco PIX firewall appliances, there was no way for traffic to enter a specific interface and then exit back from the same interface again. With the new Cisco ASA models, this is also not supported by default, but you can enable this functionality with the same-security-traffic permit intra-interface command. The schematic above […]

[Continue reading]

Configuring NAT on Cisco Routers

nat on cisco routers

The depletion of the public IPv4 address space has forced the internet community to think about alternative ways of addressing networked hosts. Network Address Translation (NAT) therefore was introduced to overcome these addressing problems that occurred with the rapid expansion of the Internet. Even if NAT was suggested as a temporary solution, it has been […]

[Continue reading]

How to Disable Telnet and Enable SSH on Cisco Devices

how to disable telnet and enable ssh on cisco routers and switches

I should have written this article from the very beginning of starting this blog because it is one of the most fundamental configuration steps for managing a Cisco networking device (router, switch, firewall etc). Disabling Telnet and enabling SSH on a networking device is also a step forward in increasing security in the whole network. […]

[Continue reading]

IP Telephony and VoIP Tutorial

VoIP and IP Telephony Tutorial

Although this is a Cisco networks dedicated blog, I decided to start a series of tutorial posts about a general technology which is not directly related to Cisco but it is a field in which Cisco is again a major player. This is IP Telephony and Voice over IP (VoIP). Image Source The two terms, […]

[Continue reading]

HSRP Vs VRRP Vs GLBP Redundancy Protocols

hsrp vs vrrp vs glbp

In this article we will discuss the similarities and differences between the 3 “First Hop Redundancy” protocols supported by Cisco devices. These are Hot Standby Router Protocol (HSRP), Virtual Router Redundancy Protocol (VRRP) and Gateway Load Balancing Protocol (GLBP). The main purpose of the above protocols is to provide redundancy to the default gateway (router […]

[Continue reading]

How I Use NMAP in Penetration Testing Engagements

nmap host discovery and penetration testing

As a network security engineer, among tens of other tasks, I run also security assessment and penetration testing projects. One of the most popular and widely used network scanning tool is NMAP. This is one of the tools that I use at the beginning of a penetration testing engagement and helps tremendously in identifying targets, […]

[Continue reading]

KRACK WiFi Vulnerability – WPA2 has been breached

krack wpa2 vulnerability

On October 16, 2017 a serious security vulnerability has been published by researchers from KU Leuven, a university in Belgium. This has to do with WPA2 protection in WiFi networks, which is the modern security standard considered to be very safe so far. This vulnerability has to do with the WPA2 technology itself and is […]

[Continue reading]

About Networks Training

We Provide Technical Tutorials and Configuration Examples about TCP/IP Networks with focus on Cisco Products and Technologies. This blog entails my own thoughts and ideas, which may not represent the thoughts of Cisco Systems Inc. This blog is NOT affiliated or endorsed by Cisco Systems Inc. All product names, logos and artwork are copyrights/trademarks of their respective owners.

Suggested Cisco Training

CISCO CERTIFICATION TRAINING
CISCO CCNA 200-120 TRAINING
CCNA SECURITY 640-554 TRAINING
CCENT ICND1 TRAINING
CISCO ICND2 TRAINING
CISCO CCNP TRAINING