1. Glaslab
  2. Partners
  3. SSNGFW1.0

SSNGFW1.0(300-710) New!
Securing Networks with Cisco Firepower Next Generation Firewall (SSNGFW) v1.0

Discovery 1: Initial Device Setup

This is a two-part lab. In the first part, you are going to register a new device as a locally managed device by the FDM and configure its routing and interfaces. In the second part, you are going to register both the HA1 and HA2 devices to the FMC.

Discovery 2: Device Management

This is a two-part lab. In the first part, you are going to be going through the management of the device, the configuration of the device when it's newly registered. In the second part, you are going to configure your health policy for your HA1 and your FMC. And then you are going to test that platform settings that we configured earlier in the previous part of this two-part lab.

Discovery 3: Configuring High Availability

In this lab, you are going to be configuring and testing high availability, active standby failover, and we're going to utilize the FMC to do this. And then, you are going to go into the CLI, verify our configuration, and test to make sure that the configuration works.

Discovery 4: Migrating from Cisco ASA to Cisco Firepower Threat Defense

In this lab, you are going to explore briefly how the ASA migration has changed over time. And then you are going to go through a detailed demo, of how to use the Firepower Migration Tool, which is what you would use today in order to do a migration.

Discovery 5: Implementing QoS

In this lab, you are going to configure quality of service utilizing the FMC, and you are going to test it utilizing both HTTP and FTP. And you are going to use the CLI on the managed device to look at the configuration of the quality of service and for testing.

Discovery 6: Implementing NAT

This is a two-part lab. In the first part, you are going to create a NAT policy on the FMC, configure some rules, and test with a PAT rule and a static NAT rule. In the second part, you are going to configure and test a NAT rule based on destination, and configure and test an identity NAT rule.

Discovery 7: Configuring Network Discovery

In this lab, you are going to learn how to configure network discovery to discover your network. You are going to do this by replicating production traffic to produce and then evaluate those profiles.

Discovery 8: Implementing an Access Control Policy

This is a two-part lab. In the first part, you are going to configure an access control policy utilizing the FMC. You are going to add a few ACP rules to manage traffic and security inspections. In the second part, you are going to test the access control policy rules that you created in the previous lab and make sure that everything works as expected.

Discovery 9: Implementing Security Intelligence

In this lab, you are going to set up some Security Intelligence feeds. You are going to look at the Talos website where these feeds are managed and where we get more information about the security elements within the system. And you are going to test our security configuration.

Discovery 10: Implementing Site-to-Site VPN

This is a two-part lab. In the first part, you are going to configure site-to-site VPN utilizing the FDM, Firepower Device Manager. In the second part, you are going to configure site-to-site VPN, this time utilizing the FMC. So remember, the way in which you configure the HA1 is by our FMC.

Discovery 11: Implementing Remote-Access VPN

This is a two-part lab. In the first part, you are going to go over configuring objects needed for remote access VPN. And we're going to configure a remote access VPN policy utilizing our FMC. In the second part, you are going to be verifying and testing the VPN connection that you did in the previous lab to make sure that we've configured it correctly.

Discovery 12: Threat Analysis

This is a three-part lab. In the first part, you are going to troubleshoot why a previously created access control policy rule is not blocking as expected. In the second part, you are going to troubleshoot a situation where a user cannot access a certain IP address. You are going to demonstrate what you can do and how to analyze when a user complains that he or she cannot access a certain website. In the final part, you are going to troubleshoot a simple intrusion event utilizing our FMC.

Discovery 13: System Administration

In this lab, you are going to schedule a policy deployment utilizing your FMC. And then utilizing that same FMC, you are going to backup the FMC's configuration.

Discovery 14: Cisco Firepower Troubleshooting

In this lab, you are going to troubleshoot multiple access issues. And you are going to do that by utilizing connection events, buffer logging, and also packet-tracer.