Cisco ASA with FirePOWER ServicesEasy Setup Guide1 Connecting PC to ASA2 I n s t a l l i n g A S D M3 Configuring ASAYou can easily set up your ASAin this step-by-step guide.

before you begin

Cisco ASA 5506-X Easy Setup Manual

about this guide

getting started

using the command line interface

status bar

interface configuration

configuring interfaces

arp table

configuring basic settings

setting the date and time

configuring dhcp

configuring a dhcp server

configuring dynamic dns

displaying the routing table

configuring a static route

deleting static routes

dynamic nat

default configuration

aaa overview

authentication methods

installing a certificate

software updates

wizard setup

stateful failover

interface monitoring

user authentication

configuring split tunneling

configuring port forwarding

ssl certificates

ipsec tunnels

syslog message format

enabling logging

configuring snmp traps

snmp monitoring

troubleshooting

ipv6 addresses

5505 - ASA Firewall Edition Bundle

document conventions

documentation feedback

preparing for installation

RJ-45 to 
 DB-

general site requirements

ASA 5505

Product Overview

Memory Requirements

Powering on the ASA 5505

Installing a Cable Lock

ASA 5510, ASA 5520, ASA 5540, and ASA 5550

Rack-Mounting the Chassis

Setting the Chassis on a Desktop

Connecting the Interface Cables

Installing and Replacing the SSM

Overview

Installing the 4GE SSM

Replacing the 4GE SSM

SFP Module

Installing the SFP Module

Removing the SFP Module

Installing an SSM

Replacing an SSM

Maintenance and Upgrade Procedures

Replacing the Chassis Cover

Working in an ESD Environment

Replacing the AC Power Supply

Installing the DC Model

cable pinouts

applying nat

logging out

starting asdm

saving configuration changes

mac address table

system configuration

interface types

management network

dynamic routing

multicast routing

hardware requirements

security considerations

link aggregation control protocol

power over ethernet

transparent mode

configuring ddns

configuring ospf

multicast addresses

deployment scenarios

configuration example

obtaining certificates manually

configuring telnet access

configuring a login banner

configuring a management interface

ssl handshake failure

installing certificates

monitoring qos

ipv4 and ipv6 support

operating modes

initial configuration

configuring load balancing

adding a user

configuring remote management

configuring the pppoe client

managing passwords

ssl vpn

remote pc system requirements

system requirements

enabling snmp

troubleshooting tips

optional configuration procedures

managing files

capturing packets

command completion

multicast address

installing the chassis

Document Objectives

CSA Interoperability with the AnyConnect Client and Cisco Secure Desktop

Ensuring Automatic Installation of AnyConnect Clients

Replacing a Digital Certificate with a Trusted Certificate

Where to Find the AnyConnect Client Files to Install

Disabling Permanent Client Installation

Enabling DTLS Globally for a Specific Port

Using the AnyConnect CLI Commands to Connect (Standalone Mode)

Connecting Using WebLaunch

Enabling AnyConnect Client Profile Downloads

Enabling Start Before Logon (SBL) for the AnyConnect Client

Configuring the ServerList Attribute

Language Translation (Localization) for User Messages

Import/Export Language Localization

Adjusting MTU Size Using CLI

product overview

Chapter 1 
 Overview

Installation Overview

Chapter 2 
 Preparing for Installation

Preventing Electrostatic Discharge Damage

Power Supply Considerations

Installing the Chassis

Powering on the Cisco ASA 5505

Mounting the Chassis

Installing and Wall-Mounting the Cisco ASA 5505 FIPS Enclosure

Removing and Replacing the Chassis Cover

C H A P T E R 4 Maintenance and Upgrade Procedures

Installing and Replacing the SSC

Installing an SSC

Replacing an SSC

Removing the DIMM

Installing the DIMM

Verifying the Memory Upgrade

BaseT Connectors

Appendix 1 
 Cable Pinout

RJ-45 to DB-9

Gigabit and Fibre Channel Ports

deployment planning

scenario 2: basic installation with dmz

scenario 3: ipsec remote-access vpn

scenario 4: site-to-site vpn

configuration procedures for scenarios

what to do next

planning for a vlan configuration

about physical ports on the asa

maximum number and types of vlans

deployment scenarios using vlans

basic deployment using two vlans

dmz deployment

teleworker deployment using three vlans

Verifying the Package Contents

PoE Ports and Devices

Optional Procedures

Connecting to the Console

Rear Panel Components

About the Factory Default Configuration

About the Adaptive Security Device Manager

Using the Startup Wizard

Running the Startup Wizard

Example DMZ Network Topology

Configuration Requirements

Starting ASDM

Enabling Inside Clients to Communicate with Devices on the Internet

Enabling Inside Clients to Communicate with the DMZ Web Server

Address

Configuring an External Identity for the DMZ Web Server

Providing Public HTTP Access to the DMZ Web Server

Example IPSec Remote-Access VPN Network Topology

Implementing the IPSec Remote-Access VPN Scenario

Information to Have Available

Configuring the ASA 5505 for an IPSec Remote-Access VPN

Selecting VPN Client Types

Specifying the VPN Tunnel Group Name and Authentication Method

Specifying a User Authentication Method

Optional) Configuring User Accounts

Configuring Address Pools

Configuring Client Attributes

Configuring the IKE Policy

Configuring IPSec Encryption and Authentication Parameters

Specifying Address Translation Exception and Split Tunneling

Verifying the Remote-Access VPN Configuration

example site-to-site vpn network topology

implementing the site-to-site scenario

C H A P T E R 8 Scenario: Site-to-Site VPN Configuration

Configuring the Security Appliance at the Local Site

Cisco ASA 5506-X Easy Setup Manual

Product

Learn More

Legal


Contents before you begin	Cisco ASA with FirePOWER ServicesEasy Setup Guide1 Connecting PC to ASA2 I n s t a l l i n g A S D M3 Configuring ASAYou can easily set up your ASAin this step-by-step guide. Next / 11