This book has been available only in eBook format for several years and has been embraced by thousands of Cisco ASA professionals, from beginners to experts. This new edition, "Cisco ASA Firewall Fundamentals - 3rd Edition" is now offered to you in paperback format as well.
The new 3rd Edition has been enhanced and updated to cover the latest Cisco ASA version 9.x (and previous versions 8.x as well). All configurations, commands and examples in the book are applicable for all ASA 5500 and 5500-X devices and will work on ASA version 9.x.
This book is loaded with raw practical concepts, step-by-step configuration tutorials, and more than 50 network diagrams to explain the scenarios. It also includes complete configuration examples and real-world cases that you will not find anywhere else. There is no fluff or redundant information.
Topics covered in this book include the core ASA firewall features as well as the most frequently-encountered scenarios that you will find in real world networks. The book is written by network security expert Harris Andrea, a Cisco Certified professional with more than 18 years of ASA experience, and focuses on simplicity and practicality instead of complex theory.
Some of the topics covered include the following:
- Getting Started with Cisco ASA Firewalls (User Interface, Access Modes, Software updates, password recovery etc).
- Basic Firewall Configuration (Basic Configuration Steps).
- Configuring Network Address Translation (NAT) for pre-8.3 and post-8.3 versions.
- Configuring DMZ Networks.
- Configuring and Using Access Control Lists (ACLs).
- Configuring VLANs and Subinterfaces.
- Configuration of Threat Detection (Basic, Advanced, and Scanning Threat Detection).
- IKEv1 and IKEv2 IPSEc VPNs (site-to-site VPN, Remote Access VPN etc).
- Anyconnect Secure Mobility Client (SSL VPN, IKEv2 VPN, Certificate Authentication etc).
- Configuring Active/Standby Stateful Failover.
- Advanced Features of Device Configuration.
- Authentication Authorization and Accounting (AAA) Configuration.
- Configuration of Identity Firewall.
- Configuring Routing Protocols on ASA (Static Routes, RIP, OSPFv2, OSPFv3, EIGRP).
- Modular Policy Framework Configuration (Class Maps, Policy Maps etc).
- Configuring Quality of Service (QoS)-Traffic Policing, Shaping, Voice Priority Queueing etc.
- Cisco ASA 5505.
- PLUS MUCH MORE
For ASA5500-X models, the book does not cover Next Generation Firewall features such as ASA CX, Cloud Web Security or Web Security Essentials. However, all the content included in the book will work on 5500-X models.
HARRIS ANDREA, (CCNA, CCNP, CCSP, CEH, ECSA) is a Senior Network Security Engineer with more than 18 years of experience, working in a leading Internet Service Provider in Europe. He graduated from the University of Kansas, USA in 1998 with BSc and MSc degrees in Electrical Engineering and Computer Science. Since then, he has been working in the Networking field, designing, implementing and managing large scale networking projects with Cisco products and technologies. His main focus is on Network Security based on Cisco ASA Firewalls, VPN technologies, IDS/IPS products, AAA services etc. To support his knowledge and to build a strong professional standing, Harris has pursued and earned several Cisco Certifications such as CCNA, CCNP, and CCSP and other security related certifications such as CEH and ECSA.
