Easy Bicycle Life

cisco adapter security application (CASA)

1.firewall basic setting
2.firewall nat access policy
3.via asdm
4.remote access and site to site vpn

cisco asa 500 series 介紹

前身cisco pix 目前轉變成為ASA

ASA的架構:
modle
ips techaology
nw. av
vpn techaology
network services
application security
anti-x database
secure vpn connectivty

Platform architecture & Performance

ASA 5500 specification

Firewall throghput:
ASA 5510 up to 300M
ASA 5520 up to 400M
ASA 5540 up to 500M

session:
5510: 50000/130000
5520: 280000
5540: 400000

network port:
5510: 4fe ,4 managent port
5520: 4ge ,1fe
5540: 4ge ,1fe

VLAN:
5510: 50/100
5520: 150
5540: 200

Security contexts:
5510: 0/0 2/5
5520: 2/20
5530: 2/50

ASA 5500 solution:
websense
OTP
webtrends

security level: 高往低 inside->outside
distributed application:
benefits:
modle
distributed cpu load

NAT/PAT
Transparent modle: outside ,inside ,mangemt
============================================
ASA 開機會有"PCI DEVICE TABLE" 檢測模式
所以基本上設定及查詢和ROUTER差不多
需要注意的是 interface name一定要設定 不然無法通

router 0x2102
asa 0x1

設定static route

了解ASDM VPN IPS 架構及BASIC設定方式
基本上課程有分初進階 環境和方式 有點超過CCNA的範圍 若沒聽過CCNA及操作過CISCO的設備 聽起來會有點吃力
講師 據聊天說到自己也是CCNP 技術方面感覺很專業 環境也摸過很多種不同的架構 總之今天的課程算是收穫良多