Cisco Adaptive Security Appliance (ASA)

[Aleksey Pan]

WELCOME to ASA

"Choose one of the topics below to help you on your journey with NGFW/ASA"

• 
  Start
• 
  Config-examples
• 
  Maintenance/Upgrade
• 
  Troubleshooting
• 
  Tools
• 
  Training

Start

Getting Software

• Download Software for Adaptive Security Appliance (ASA)
• Download Software for Adaptive Security Device Manager (ASDM)
• Download Software for Anyconnect

Compatibility Guides

• ASA and FTD Compatibility Guides
• ASA Compatibility Guide
• Cisco Firepower 4100/9300 FXOS Compatibility

PSIRT & Field Notice

•   Security Advisory Page
•   Cisco ASA 5500 Series Field Notices
•   Security Advisories, Responses and Notices

Datasheets

• Cisco Firepower 1000 Series Data Sheet
• Cisco Firepower 2100 Series Data Sheet
• Cisco Firepower 4100 Series Data Sheet
• Cisco Firepower 9300 Series Data Sheet
• Cisco ASA 5500 Series Data Sheet
• Cisco ASA 5585 Firewall Data Sheet
• Cisco ASA Virtual Appliance Data Sheet (ASAv)

Configuration Guides, Release notes.

• NGFW Configuration Guides
• Cisco ASA Configuration Guides
• Cisco ASA and Firepower Threat Defense Reimage Guide
• ASA Series Release Notes 

NAT, PAT, CERTIFICATES:

• Basic ASA NAT Configuration: Web Server in the DMZ in ASA Version 8.3 and Later
• Configure ASA Version 9.x Port Forwarding with NAT
• NAT Operation and Configuration Explained in detail
• Overlapping Network Scenarios and NAT in VPN
• Configure ASA: SSL Digital Certificate Installation and Renewal

High Availability (Failover and Cluster):

• Deploying a Cluster for ASA on the Firepower 4100/9300 for Scalability and High Availability

AAA ,TACACS+, Radius, LDAP, Cut-Through Proxy, Routing:

• TACACS+ configuration for ASA-By Katherine MacNamara
• ISE 2.0: ASA CLI TACACS+ Authentication and Command Authorization Configuration Example
• Cut-Through and Direct ASA Authentication Configuration Example
• ASA Border Gateway Protocol Configuration Example

DHCP, Transparent Mode:

• ASA DHCP Server Configuration Example
• ASA DHCP Relay Configuration Example
• Anyconnect Client to ASA with Use of DHCP for Address Assignment
• ASA CLI Configuration Guide for DHCP  (Always check the latest one for changes or new features)

Logging:

• ASA logging configuration

NGFW VPN (S2S VPN, ANYCONNECT, WEBVPN):

• NGFW VPN Configuration and Troubleshooting

Upgrade Resources

ASA, ASAv and SFR Module (Firepower Module):

• ASA/PIX: How to Use the CLI to Upgrade the Software Image on a Failover Pair
• ASA 9.x : Upgrade a Software Image using ASDM or CLI Configuration Example
• Upgrade the ASA FirePOWER Module
• Upgrading ASA Appliance (1000, 2100 in Appliance Mode or ASAv)
• Upgrade the ASA on the Firepower 4100/9300

Troubleshooting

• NGFW VPN Configuration and Troubleshooting
• ASA VPN LB Director Election Process
• ASA Throughput and Connection Speed Troubleshooting and Analyzing Packet Captures 
• ASA Packet Captures with CLI and ASDM Configuration Example
• Troubleshoot Connections through the PIX and ASA
• Show asp drop command usage
• Troubleshoot ASA Interface Overrun Counter Errors
• ASA 8.x: Troubleshooting ASA Flash Errors 
• ASA 8.3 and Later: Monitor and Troubleshoot Performance Issues 
• Cisco ASA Syslog messages
• ASA FAQ: Why does the ASA reply to ARP requests for other IP addresses in the subnet?  
• ASA TCP Connection Flags (Connection Build-Up and Teardown) 
• SSL Introduction with Sample Transaction and Packet Exchange
• ASA Multicast Troubleshooting and Common Problems 

NGFW Tools and Resources

• Bug Search Tool
• Firewall Configuration Conversion Tool
• Cisco CLI Analyzer Tool
• Product License Registration
• SNMP Object Navigator

Training Resources

• ASA Firepower Deployment Scenarios-Jeffery Fanelli at Cisco Live
• Troubleshooting ASA Firepower NGFW-Prapanch Ramamoorthy at Cisco Live
• ASA Clustering Deep Dive-Andrew Ossipov at Cisco Live
• ASA Clustering Deep Dive-Advanced-Andrew Ossipov at Cisco Live
• Troubleshooting ASA Firewalls-Kevin Klous at Cisco Live
• NGFW-Onboard Training Videos
• NGFW-Implement Training Videos