MicroNugget: What is Cisco ASA?

In this video, Keith Barker explains what an ASA is, its most important features, and how they operate. Learn firewall essentials — whether that’s stateful inspection, creating dynamic exceptions, keeping user traffic secure and fast-moving, or what NATs or PATs do in translating IPs.

An Adaptive Security Appliance (ASA) from Cisco does a lot to keep your networks secure when connected to the internet, and this training explains the core functionality of the appliance. Stateful inspection means the firewall monitors sessions and creates dynamic exceptions. Packet filtering makes exceptions alongside access control lists. NAT/PAT translates source IPs to obscure the source of requests and secure traffic. VPN tunnels get secured by SSL or IPsec so that sensitive information doesn’t have to get sent in plaintext. These are some of the basic features of a Cisco ASA multi-purpose firewall. And you’ll have an even better understanding of basic network security after watching Keith Barker’s explanation.

Start learning with CBT Nuggets:

[mdwasimansari]

the way that you elaborate things are appreciatable

[nevorchi]

Gotta say, definitely love your energy in these vids! Keep it up!

[remcovreeswijk]

Just got two of these 5505's to play with. Thanks Keith for your explanation!

[akshayjindia]

Hello Keith

The tutorial was awesome. Thanks a lot for it.

[goononce]

Really interesting summary Keith...I have worked with ASAs a little bit and I can tell they are awesome..but most likely at the CLI.
I just realized later how impressive was the graphical user interface with the monitoring side and the easy feel to configure them...
I hope I will be able to purchase one soon and to learn it from the bottom to the top.

[HemakaRanasinghe]

Great explanation and illustrations..Thumbs up!!

[Jomster]

So far I'm loving this tutorial. Subscribed!

[dodonohoe]

Great videos... do you have any videos on enabling FQDN lookup on ASA policies? Im trying to understand can it be managed via GUI or CLI only?

[HiteshKumar-spls]

1:12 They are expecting jeremy, keith and much more

[ardentdfender]

This is quite informative and interesting learning this stuff. I have a question about this device features as I work in OT in industry and not IT and not necessarily as familiar with Cisco’s normal products except Cisco/Rockwell stuff. Anyway is Cisco the only company that uses this Type of Firewall with similar Stateful Inspection and Packet Filtering as the ASA?

[dineshrajan]

What if the return traffic contains malicious content?

[Trendnet]

ooops sorry i didnt see your message till now....Anyways thanks for your videos I passed my exam suprised there were no sims on ASA tho :O...

[Trendnet]

Having trouble from the ASA Lab you did via CBT Nuggets.... Theres no defaults for the ASA Class Maps as show in the image i created my own one i got part 1 to work. But I cant get the last part to work some reason google and nslookup doesnt work.
Pls msg me for the images... Cant seem to paste the images here

[mohamednazaras]

I am new to asa.pls share the link of ASA image to run in GNS3 for learning purpose...

[kingdomquotes]

So this can replace a WAN router right?

[Trendnet]

Hey Keith,
Just having a bit of an issue. I am trying to connect a Cisco Wireless Router RV130 (converted to AP mode - suggested by cisco ) to the DMZ zone and I want it to connect to the internet. For now it has a DNS issue. Is there away for it to use the Wireless mode so that it can do the auto DHCP and DNS ?

[aya]

Hi sir, I want to ask you a question please
Does this course qualify me for Cisco International certification?
please reply

[KeithBarker]

The GNS3 image omits them from the default. Send me an email at keith6783ATcoxDOTnet, and I can send you the short script that you can copy and paste into the ASA that will put them into a new ASA for you.

[beatzbyDAVE]

Hi Keith, I hope you get this.. I need your help as I have not been able to figured this out on my 5510.. I CANNOT ping my host laptop from the asa however i can ping the asa from the asa interface from the host laptop. Kinda strange as i have even allowed icmp and created access-list and did same-security-traffic permit intra-interface.. PLEASE HELP ME, here is my packet trace below

asa5510# packet-tracer input inside icmp 10.10.10.1 8 0 10.10.10.254

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 10.10.10.0 255.255.255.0 inside

Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:

Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule