Cisco VPN 2.0: Cisco AnyConnect Remote Access SSL Solutions

Overview/Description
A basic Cisco AnyConnect full-tunnel Secure Sockets Layer (SSL) VPN provides users with flexible client-based access to sensitive resources over a remote access VPN gateway, which is implemented on the Cisco ASA adaptive Security Appliance. A basic Cisco AnyConnect full-tunnel SSL VPN solution uses usernames and passwords to provide basic user authentication. In addition, the Cisco ASA Security Appliance provides IP address assignment to the full-tunnel client and uses a basic access control policy. This course discusses how to configure, verify, and troubleshoot a basic Cisco AnyConnect full-tunnel SSL VPN solution. In addition to the configuration tasks for deploying basic Cisco AnyConnect full-tunnel SSL VPNs, a scalable VPN design provides the flexibility to tune options that fit the needs of an organization. How to deploy and manage advanced deployment features of a Cisco AnyConnect full-tunnel SSL VPN solution are also covered.

Target Audience
Anyone wishing to obtain the Cisco Certified Network Professional CCNP Security designation. Cisco Network Security Engineers responsible for the selection, configuration, and the troubleshooting of the majority of Cisco ASA Adaptive Security Appliance perimeter security features to reduce risk to IT infrastructure and its applications within their networking environments. Established IT professionals with a good understanding of networking and Cisco technology, installation, troubleshooting and monitoring of devices used to maintain integrity, confidentiality and availability of data and network devices that Cisco uses in its security infrastructure, as well as working knowledge of the Microsoft Windows operating system. Candidates who have completed the Cisco Certified Network Associate (CCNA), the Cisco Certified Network Associate Security (CCNA Security), the Securing Networks with Cisco Routers and Switches (SECURE) v1.0, and the Deploying Cisco ASA Firewall Solutions (FIREWALL 2.0) Certifications.

Expected Duration (hours)
1.5

Lesson Objectives

Cisco VPN 2.0: Cisco AnyConnect Remote Access SSL Solutions

identify the tasks to configure gateway features of the Cisco ASA Security Appliance for a Cisco AnyConnect full-tunnel SSL VPN solution

identify the guidelines for implementing the basic SSL VPN gateway features of the Cisco ASA Security Appliance

identify the tasks to configure user authentication in the basic Cisco ASA Security Appliance full-tunnel SSL VPN solution

identify the tasks to configure basic access control for a full-tunnel SSL VPN

identify the tasks to implement Cisco AnyConnect 3.0 using the pre-deployment method

troubleshoot basic full-tunnel SSL VPN operation

enable SSL VPN and DTLS on the outside interface

enable Cisco AnyConnect VPN Client support

remove an active algorithm from session encryption settings

describe how to deploy DTLS on the Cisco ASA adaptive Security Appliance

recognize when to use each method for deploying and upgrading Cisco AnyConnect software