Cisco Ccna Chapter 10

Front 1

ASA Security Device Manager (ASDM)

Back 1

a Java-based GUI tool that facilitates the setup, configuration, monitoring, and troubleshooting of Cisco ASAs.

Front 2

Cisco ASA can be configured and managed using either

Back 2

command line interface (CLI)

graphical user interface (GUI) ASA Security Device Manager (ASDM)

Front 3

ASDM is accessed using

Back 3

aSecure Socket Layer (SSL) web browser connection to the ASA Web Server.

Front 4

At a minimum, the ASA requires that a

Back 4

management interface be configured.

Front 5

management interface consists of

Back 5

inside logical VLAN interface (VLAN 1)

physical Ethernet port other than Ethernet 0/0.

Front 6

prepare for ASDM access on an ASA 5505, the following must be configured:

Back 6

Inside logical VLAN interface - Assign the Layer 3 address and the security level.

Ethernet 0/1 physical port - By default it is assigned to VLAN 1, but must be enabled.

Enable the ASA Web Server - Disabled by default.

Permit access to the ASA Web Server - By default, the ASA operates in a closed policy; therefore, all connections to the HTTP server are denied.

Front 7

Run Cisco ASDM as a local application

Back 7

This provides the Install ASDM Launcher option to connect to the ASA from the host’s desktop using SSL.

advantage of doing so is that one application can be used to manage several ASA devices, and an Internet browser is not required to start ASDM.

Front 8

Run Cisco ASDM as a Java Web Start application

Back 8

This provides the Run ASDM option to run the ASDM application.

Internet browser is required to establish a connection

Not installed on local host(ASDM)

The Run Startup Wizardoption can be selected instead. (provides step-by-step initial config)

Front 9

Intrusion prevention

Back 9

Appears only if an IPS module or card is installed. The additional tab displays status information about the IPS software.

Front 10

Content security

Back 10

Appears only if a Content Security and Control Security Services Module (CSC-SSM) is installed in the ASA.

displays status information about the CSC-SSM software.

Front 11

Device Dashboard

Back 11

provides a view of important information about the ASA, such as the status of interfaces, the OS version, licensing information, and performance related information.

Front 12

Firewall Dashboard

Back 12

provides security-related information about the traffic that passes through the ASA, such as connection statistics, dropped packets, scan, and SYN attack detection.

Front 13

All pages include the following elements:

Back 13

Menu bar

Toolbar (Home, Configuration, Monitoring)

Device list button (list other ASA devices)

Status bar

Front 14

The navigation pane of the Configuration view displays the following tabs:

Back 14

Device Setup

Firewall

Remote Access VPN

Site-to-Site VPN

Device Management

Front 15

The navigation pane of the Monitoring view

displays the following tabs:

Back 15

Interfaces

VPN

Routing

Properties

Logging

Front 16

Cisco ASDM offers several wizards to help simplify the configuration of the appliance:

Back 16

Startup Wizard

VPN Wizards

High Availability and Scalability Wizard

Unified Communication Wizard

ASDM Identity Certificate Wizard

Packet Capture Wizard

Front 17

different types of VPN wizards include:

Back 17

Site-to-site VPN Wizard

AnyConnect VPN Wizard

Clientless SSL VPN Wizard

IPsec (IKEv1) Remote Access VPN Wizard

Front 18

High Availability and Scalability Wizard

Back 18

Used to configure failover with high availability and VPN cluster load balancing.

Front 19

Unified Communication Wizard

Back 19

Used to configure the ASA to support the Cisco Unified Communications Proxy feature.

Front 20

ASDM Identity Certificate Wizard

Back 20

When using current Java versions, the ASDM Launcher requires a trusted certificate.

Front 21

Packet Capture Wizard

Back 21

Useful to configure and run captures for troubleshooting errors including validating a NAT policy.

Front 22

Site-to-Site VPNs

Back 22

Create a secure LAN-to-LAN connection.

Front 23

Remote Access VPNs

Back 23

Create a secure single-user-to-LAN connection.

Front 24

Five tasks must be completed to implement the site-to-site VPN on the ISR:

Back 24

Step 1. Configure the ISAKMP policy for IKE Phase 1

Step 2. Configure the IPsec Policy for IKE Phase 2

Step 3. Configure an ACL to define interesting traffic

Step 4. Configure a crypto map for the IPsec policy

Step 5. Apply the crypto map to the outgoing interface

Front 25

Simple Configuration

Back 25

Uses a pre-shared keyword to use when authenticating with the identified peer.

It selects common IKE and ISAKMP security parameters to establish the tunnel.

Front 26

Customized Configuration

Back 26

Uses either a pre-shared key or a digital certificate to authenticate with the identified peer.

The IKE and ISAKMP security parameters can also be specifically selected.

Front 27

two primary remote-access VPN technologies.

Back 27

IPsec

SSL

Front 28

SSL is mostly used to protect

Back 28

HTTP traffic (HTTPS)

email protocols such as IMAP and POP3.

Front 29

SSL

Back 29

Layer 7 VPN

does not require any pre-installed VPN softwar

Front 30

Client-based SSL VPN requires

Back 30

a client, such as the Cisco AnyConnect Secure Mobility Client to be pre-installed on the host

three types of bookmarks can be used.

Front 31

During the establishment phase, the AnyConnect client has the ability perform an

Back 31

endpoint posture assessment by identifying the operating system, antivirus, antispyware, and firewall software installed on the host prior to creating a remote access connection to the ASA.

Front 32

ASDM Assistant

Back 32

This feature guides an administrator through the SSL VPN configuration.

Front 33

VPN wizard

Back 33

This is an ASDM wizard that simplifies the SSL VPN configuration.