Security

The video walks you through steps for LDAP integration on Cisco ACS 5.4. We will connect our ACS to Active Directory LDAP service, and perform Subject and Group search. We will also touch on the function of Identity Store Sequences as a way to perform multiple user authentication database lookup.
 

Topic:

The video walks you through steps for AD integration on Cisco ACS 5.4. We will join the ACS to an AD domain and download AD user groups, which we will use as part of authorization policies in our future labs. We will also touch on the function of Identity Store Sequences as a way to perform multiple user authentication database lookup.

Topic:

The video shows how to install a third party certificate on Cisco ACS 5.4. The certificate will be used for securing web interface as well as validating client-based certificate as part of EAP authentication in our future labs.

Topic

The video walks you through command line and web interface of Cisco ACS 5.4 after a fresh VM install. We will cover the majority of commonly used configuration pages on the ACS to help you becoming familiar with navigation around the GUI. You will be able to quickly grasp on capabilities of Cisco ACS as well.

Topic:

The video demonstrates backup and restore processes of VNMC. Based on a complete Nexus 1000V, VSG, and ASA 1000V (ASDM) deployment, we will simulate VNMC failure and go through a recovery process from a backup file. 

Topic:

The video shows how to combine Cisco VSG and ASA 1000V into a single deployment through Service Chaining on Nexus 1000V to build a secured virtual datacenter. You will see how the VSG enforces security policies to east-west traffic, while ASA 1000V enforces the north-south traffic. We will utilize our previously completed VSG and ASA 1000V labs with additional configuration in our demonstration. Here we assume you have already reviewed previous lab videos, or have good familiarity with all related technologies including Nexus 1000V, VSG, and ASA 1000V

The video shows you how to configure site-to-site IPSec VPN on Cisco ASA 1000V in ASDM mode via CLI. We will go through IKEv1 Phase 1 and Phase 2 configuration to establish an IPSec VPN tunnel to a physical ASA to provide remote access to our servers in the virtual datacenter. You will see the VPN configuration on ASA 1000V being almost identical to a physical ASA.

Topic:

The video looks at advance features on Cisco ASA 1000V in ASDM mode via CLI. This includes Connection Timeout, IP Audit, Application Inspection, and TCP Normalize/Intercept. There are also features like packet fragment settings, and QoS that are not available for configuration in VNMC mode. In addition, we will configure static NAT and inbound ACL to allow our web servers to be accessed from outside.

Topic:

The video walks you through basic security profile configuration on Cisco ASA 1000V in ASDM mode via CLI. We will demonstrate the concept of Security Profile interfaces by applying different security policies based on Ingress ACL and NAT to our Web and DB servers. We will also go through configuration on a Nexus 1000V to have a VEM communicate with the ASA 1000V and enforce the security policies on a port-profile. The lab ends with connectivity testing to verify our configurations.

Note:

The video looks into basic configuration on Cisco ASA 1000V in ASDM mode via CLI. These are general configuration that are commonly found on physical ASA, for example, interfaces, routing, aaa, ssh, http, DHCP etc. There are also features like SNMP, banner, and failover timeouts that are not availble for configuration in VNMC mode. We will perform testing with Syslog, SNMO and DHCP for verficiation.

Notes:

Topic: