思科ASA实用动手实验操作指南（中文版）

一 测试拓扑图................................................................................................................................5
二基础部分....................................................................................................................................6
1 Image从7.x 升级到8.x / ASDM 5.x升级到6.x............................................................6
2 通过ASDM 登陆设备（10.1.X.0/24）............................................................................8
3 syslog..................................................................................................................................15
4 通过telnet/ssh 访问ASA...............................................................................................19
4.1 telnet........................................................................................................................19
4.2 ssh............................................................................................................................21
5 设置ASA接口..................................................................................................................25
6 设置静态路由....................................................................................................................32
7 设置NAT...........................................................................................................................33
7.1设置PAT.................................................................................................................33
7.2静态NAT.................................................................................................................36
8 定义安全策略....................................................................................................................38
9 透明模式............................................................................................................................40
9.1 设置透明模式.........................................................................................................40
9.2 透明模式下的NAT................................................................................................41
Pool 中的IP为211.101.2. X( 请参考 POD ID)....................................................41
10 Dynamic Threat-detection 动态要挟检查（三大特性）.........................................44
10.1 basic threat detection..........................................................................................44
10.2 scanning threat detection................................................................................44
10.3 scanning threat statistics.................................................................................44
10 使用层协议检查............................................................................................................49
10.1 过滤long URL....................................................................................................49
10.2 经过QOS对使用进行限速................................................................................55
10.3 对使用程序指令进行过滤...................................................................................59
11 对HTTP进行使用过滤..................................................................................................62
11.1 Filtering Java Applets .........................................................................................62
11.2 filter activeX..........................................................................................................65
11.4 根据表达式过滤URL..........................................................................................67
三高档有些..................................................................................................................................80
1 ssl/vpn.................................................................................................................................80
1.1 Cisco AnyConnect............................................................................................80
1.2 clienless vpn......................................................................................................92
1.3 thin-client(port-forwarding) vpn ....................................................................108
2 安全桌面.......................................................................................................................... 113
3 主机扫描..........................................................................................................................124
四AIP-SSM 模块测验..............................................................................................................128
1 准备 HTTPS 的登陆...................................................................................................128
PDF created with pdfFactory Pro trial version www.pdffactory.com
攻城狮论坛 bbs.vlan5.com #^_^# 版 权 归 原 作 者 所 有 本 资 料 仅.供试读
攻城狮论坛(技能+日子)群 2258097
攻城狮论坛 http://bbs.vlan5.com
2设置AIP-SSM 的promiscous 形式.............................................................................134
2.1 设置AIP-SSM 的promiscous 形式.................................................................134
2.2界说AIP-SSM 和ASA5500的联动..................................................................138
3 ASA AIP 模块Inline 形式.............................................................................................142
3.1牵引流量................................................................................................................142
对Signature 6202 进行行动操控...............................................................................144
4自界说战略和签名.........................................................................................................145
5反常流量检查功用...........................................................................................................149
6 OS 水印辨认功用...........................................................................................................151
7 Capturing 即时流量........................................................................................................152
8 SNMP and Syslog...........................................................................................................153
8.1 SNMP....................................................................................................................153
8.2 Syslog....................................................................................................................154
五MARS.....................................................................................................................................155
六选作有些................................................................................................................................177
1 High-Availability...............................................................................................................177
1.1 active/standby ......................................................................................................177
1.2 active/active..........................................................................................................179
2 multi-context 形式（选做）...........................................................................................184
下载链接:

游客，如果您要查看本帖隐藏内容请回复

批量下载:
更多资源,打包下载(可按类别或按发布日期查找) ---> http://bbs.vlan5.com/forum-94-1.html

论坛便捷链接:

最新视频发布?--->点这里	下载链接失效?--->点这里	求视频/帮助?--->点这里
免费领金币?--->点这里	解压缩密码?--->点这里	关注微信/微博?---> 点这里

能帮助您和更多的人找到自己想要的资料并取得更大进步,是我们最大的愿望。

我不发表言论·

帮帮顶顶！！

过来看看的,感谢攻城狮论坛

写的真的很不错

你知道么? 通过论坛客服报名CCNA,CCNP,CCIE 最高可省2000元培训费. 联系QQ 80766391

每天签到得积分 下载资料的同时也可以帮助别人 再也不用担心金币不够用了 http://bbs.vlan5.com/forum-97-1.html

路过,学习下,感谢攻城狮论坛

相当不错，感谢无私分享精神！

路过，支持一下啦