SWSA v2.1 - Securing the Web with Cisco Web Security Appliance

Description

In this comprehensive two-day course containing hands-on labs, demos, and presentations, you will learn to install, configure, operate, and maintain the S-Series web security appliances. You will focus on HTTP and HTTPS proxy services, L4 traffic monitoring, authentication and web access control, URL filtering, anti-malware filtering, troubleshooting S-Series configuration issues, and S-Series deployment. You will also see how the WSA is used in a SAAS scenario (Security-As-A-Service) and how Cisco WSA can inspect HTTPS traffic. Hands-on labs provide you with a safe environment to experiment with malware and attempt configurations that might not be appropriate for a production network.

Objectives

After completing this course the student should be able to:

• HTTP and HTTPS proxy services L4 traffic monitoring
• Authentication and web access control
• URL filtering anti-malware filtering
• Anti-malware filtering using reputation, anti-virus and anti-phishing
• Troubleshoot S-Series configuration issues
• S-Series deployment
  
  

Prerequisites

• Knowledge of TCP/IP services, including DNS, SSH, FTP, SNMP, HTTP, and HTTPS
• Familiarity with IP routing
  
  

Who Should Attend

The primary audience for this course is as follows:

• Security architects and system designers
• Network administrators and operations engineers
• Network or security managers responsible for web security
  
  

Outline

1. Reviewing the System
2. Installing and Verifying the Cisco Web Security Appliance
3. Configuring Virtual Web Security Appliance Connector to Cisco Cloud Web Security
4. Deploying Proxy Services
5. Utilizing Authentication
6. Configuring Policies
7. Enforcing Acceptable Use with URL Categories
8. Enforcing Acceptable Use: Advanced Topics with Application Visibility and Controls
9. Using Cisco WSA for Security-as-a-Service (SaaS)
10. Defending Against Malware with Reputation score and antimalware scanning
11. Configuring Data Security to prevent Data Loss
12. Describing Cisco Cloud Web Security including Cisco AnyConnect Secure Mobility Client
13. Performing Administration and Troubleshooting

Lab Outline

Lab 1: Access the Cisco Remote Lab
Lab 2: Installing and Verifying the Cisco Web Security Appliance
Lab 3: Deploying Proxy Services
Lab 4: Utilizing Authentication
Lab 5: Configuring Cisco WSA Policies
Lab 6: Enforcing Acceptable Use
Lab 7: Enforcing Acceptable Use: Advanced Topics
Lab 8: Defending Against Malware
Lab 9: Configuring Data Security
Lab 10: Describing Cisco Cloud Web Security
Lab 11: Performing Administration and Troubleshooting