Implementing Advanced Cisco ASA Security (SASAA v2.1) Training

Level: Intermediate

This course provides updated training on the key features of the Cisco ASA, including the ASA FirePOWER Services Module and ASA Clustering. Implementing Advanced Cisco ASA Security (SASAA) v2.1 is an instructor-led course that provides updated training with labs. The labs focus on the key features of the Cisco ASA (covering up to the ASA 9.5.1 release). The goal of the course is to be able to implement the key features of the Cisco ASA, including Cisco ASA Firepower Services (including Firepower v6.0), ASA Cloud Web Security, ASA Identity Firewall, ASA Clustering and the Virtual ASA (ASAv).

Upon completing this course students will be able to: Describe the Cisco ASA 5500-X series Next Generation Firewalls, ASAv, ASA 5506-X, 5508-X, 5516-X, and ASASM and implement new ASA 9.4.1 features. Implement Cisco ASA Identity Firewall policies. Install and setup the Cisco Firepower Services Module (SFR) Implement Cisco ASA Cloud Web Security Implement Cisco ASA Clustering Describe Cisco ASA Security Group Firewall and Change of Authorization Support.

Key Features of this Cisco SASAA Training

  • Cisco Authorized course content
  • Authorized Cisco CCSI Instructor
  • Eligible for Cisco Learning Credit (CLC) redemption
  • Attend in-class, online or bring the course to your facility
  • Expansive course catalog to go deep into Cisco or broaden you skills beyond

You Will Learn How To

  • Describe the Cisco ASA 5500-X Series Next-Generation Firewalls, ASAv, ASA 5506-X, 5508-X, 5516-X, and ASASM and implement new ASA 9.4.1 features.
  • Implement Cisco ASA Identity Firewall policies.
  • Install and set up the Cisco Firepower Services Module (SFR).
  • Implement Cisco ASA Cloud Web Security.
  • Implement cisco ASA Clustering.
  • Describe Cisco ASA Security Group Firewall and Change of Authorization Support.

Choose the Training Solution That Best Fits Your Individual Needs or Organizational Goals


In Class & Live, Online Training

  • 5-day instructor-led training course
  • Authorized Cisco Training Provider
  • Providing over 20 years of Cisco Training
  • Pay later by invoice -OR- at the time of checkout by credit card
  • Attend Virtually from your Home or Office
View Course Details & Schedule

Standard $3795

Government $3416




Team Training

  • Bring this or any training to your organization
  • Full - scale program development
  • Delivered when, where, and how you want it
  • Blended learning models
  • Tailored content
  • Expert team coaching

Customize Your Team Training Experience


Save More On Training with FlexVouchers – A Unique Training Savings Account

Our FlexVouchers help you lock in your training budgets without having to commit to a traditional 1 voucher = 1 course classroom-only attendance. FlexVouchers expand your purchasing power to modern blended solutions and services that are completely customizable. For details, please call 888-843-8733 or chat live.

In Class & Live, Online Training

Time Zone Legend:
Eastern Time Zone Central Time Zone
Mountain Time Zone Pacific Time Zone

Note: This course runs for 5 Days *

*Events with the Partial Day Event clock icon run longer than normal but provide the convenience of half-day sessions.

Guaranteed to Run

When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time — will run. Guaranteed.

Partial Day Event

Learning Tree offers a flexible schedule program. If you cannot attend full day sessions, this option consists of four-hour sessions per day instead of the full-day session.

Important Cisco SASAA Course Information

  • Requirements

    • Attendees should have knowledge equivalent to the Cisco ASA.
  • Exam Information

    • Course tuition does not include an exam voucher.
  • Redeem Your Cisco Learning Credits (CLCs)

Cisco SASAA Course Outline

  • Module 1: Cisco ASA Product Family

    • Introduction to ASA series firewalls
    • Introduction to ASAv
    • Deploy ASAv
    • ASAv Other hypervisors support, digitally signed image and management options
    • Verify ASAv VM
    • ASA 9.2.1 BGP IPv6 support
    • ASA 9.3 features
    • ASA 9.4.1 + VXLAN support
    • Describe the Cisco ASASM platforms, architecture, and features
  • Module 2: Cisco ASA Identity Firewall

    • ASA Identity Firewall benefits, flow and policies
    • Cisco CDA basic network configuration
    • Application status verification
    • Active directory server configuration
    • CDA user-account configuration
    • CDA GUI password policy configuration
    • Configure identity firewall policies on ASA
      • Using ASDM
      • Using CLI
    • FQDN network object configuration
    • Verify user-identity operations
    • CDA management with CLI, live log monitoring and troubleshooting
  • Module 3: Cisco ASA Firepower Services

    • SFR introduction
    • FireSIGHT management
    • SFR management interface, package installation and verification
    • FireSIGHT VM installation and setup
    • License requirement
    • Policy types introduction
    • Recommended rules introduction
    • Monitoring
    • ASDM and Firepower on-box FireSIGHT manager
    • Firepower dashboard, reporting, status and events viewer
    • Licensing
    • Firepower 6.0 features
    • System configurations and device platform settings
    • Firepower multidomain management
  • Module 4: Cisco ASA Cloud Web Security (CWS)

    • ASA with CWS introduction
    • CWS scanning processes
    • Licenses
    • ASA with CWS integration
    • CWS operations verification
    • Verify traffic redirection
    • Syslog messages
    • ScanCenter web filtering policy introduction and configuration
    • ASA CWS AMP introduction
    • CWS cognitive threat analysis
    • Threats reporting
  • Module 5: Cisco ASA Clustering

    • Cluster performance figures and supported platforms
    • Cluster data-interface modes and connections
    • CLL functions
    • Cluster dynamic-routing, NAT and PAT operations
    • Cluster terminology
    • TCP, asymmetric UDP, short-lived and centralized-feature traffic flows
    • Cluster management
    • Configuration with the CLI
    • Each unit configuration
    • Master unit configuration
    • Sample configuration of a two-unit cluster with spanned etherchannel and individual interface
    • Configure ASA cluster using Cisco ASDM
    • Cluster licensing
    • Verification types
    • Troubleshoot ASA cluster operations
    • Cluster features of v9.1.4, v9.2.1, v9.3.1 and v9.4.1
  • Module 6: Cisco ASA Security Group Firewall and Change of Authorization (Optional)

    • Cisco secure access architecture
    • SG Firewall configuration
    • SGACL operations monitoring
    • SGT features (post 9.0 releases)
    • Change of authorization introduction
    • Chang of authorization CLI and ASDM configurations
  • Labs:

    • Access the Remote Cisco Learning Lab Environment
    • Set Up and Test the ASAv
    • Implement New Features in ASA 9.3 and 9.4
    • Configure the Cisco CDA
    • Configure ASA IDFW
    • Cisco ASA Firepower Services Module Installation
    • Cisco Firepower Management Center Configuration
    • Configure ASA CWS
    • Cisco ASA Cluster Configuration

Team Training

Cisco SASAA Training FAQs

  • What is the prerequisite for this Advanced Cisco ASA firewall course?

    Implementing Core Cisco ASA Security (SASAC) v1.0 or equivalent knowledge of the Cisco ASA.

  • How do I redeem my Cisco Learning Credits (CLCs) for this Advanced Cisco ASA Firewall Course course?

    During your checkout of the course, make sure to select Credits & Vouchers within the payment method. Highlight and click CLC and enter the sales order number that you were issued by Cisco.

Questions about which training is right for you?

call 888-843-8733
chat Live Chat

100% Satisfaction Guaranteed

Your Training Comes with a 100% Satisfaction Guarantee!*

*Partner-delivered courses may have different terms that apply. Ask for details.

Preferred method of contact:
Chat Now

Please Choose a Language

Canada - English

Canada - Français