Cisco VPN 2.0: Cisco AnyConnect Remote Access SSL Solutions


Overview/Description
Target Audience
Expected Duration
Lesson Objectives
Course Number



Overview/Description
A basic Cisco AnyConnect full-tunnel Secure Sockets Layer (SSL) VPN provides users with flexible client-based access to sensitive resources over a remote access VPN gateway, which is implemented on the Cisco ASA adaptive Security Appliance. A basic Cisco AnyConnect full-tunnel SSL VPN solution uses usernames and passwords to provide basic user authentication. In addition, the Cisco ASA Security Appliance provides IP address assignment to the full-tunnel client and uses a basic access control policy. This course discusses how to configure, verify, and troubleshoot a basic Cisco AnyConnect full-tunnel SSL VPN solution. In addition to the configuration tasks for deploying basic Cisco AnyConnect full-tunnel SSL VPNs, a scalable VPN design provides the flexibility to tune options that fit the needs of an organization. How to deploy and manage advanced deployment features of a Cisco AnyConnect full-tunnel SSL VPN solution are also covered.

Target Audience
Anyone wishing to obtain the Cisco Certified Network Professional CCNP Security designation. Cisco Network Security Engineers responsible for the selection, configuration, and the troubleshooting of the majority of Cisco ASA Adaptive Security Appliance perimeter security features to reduce risk to IT infrastructure and its applications within their networking environments. Established IT professionals with a good understanding of networking and Cisco technology, installation, troubleshooting and monitoring of devices used to maintain integrity, confidentiality and availability of data and network devices that Cisco uses in its security infrastructure, as well as working knowledge of the Microsoft Windows operating system. Candidates who have completed the Cisco Certified Network Associate (CCNA), the Cisco Certified Network Associate Security (CCNA Security), the Securing Networks with Cisco Routers and Switches (SECURE) v1.0, and the Deploying Cisco ASA Firewall Solutions (FIREWALL 2.0) Certifications.

Expected Duration (hours)
1.5

Lesson Objectives

Cisco VPN 2.0: Cisco AnyConnect Remote Access SSL Solutions

  • identify the tasks to configure gateway features of the Cisco ASA Security Appliance for a Cisco AnyConnect full-tunnel SSL VPN solution
  • identify the guidelines for implementing the basic SSL VPN gateway features of the Cisco ASA Security Appliance
  • identify the tasks to configure user authentication in the basic Cisco ASA Security Appliance full-tunnel SSL VPN solution
  • identify the tasks to configure basic access control for a full-tunnel SSL VPN
  • identify the tasks to implement Cisco AnyConnect 3.0 using the pre-deployment method
  • troubleshoot basic full-tunnel SSL VPN operation
  • enable SSL VPN and DTLS on the outside interface
  • enable Cisco AnyConnect VPN Client support
  • remove an active algorithm from session encryption settings
  • describe how to deploy DTLS on the Cisco ASA adaptive Security Appliance
  • recognize when to use each method for deploying and upgrading Cisco AnyConnect software
  • identify the characteristics of the Cisco AnyConnect profile
  • describe the Trusted Network Detection, the Cisco AnyConnect scripting, and the Start Before Logon (SBL) features
  • describe how to customize the Cisco AnyConnect user interface
  • Course Number:
    cc_avpn_a05_it_enus