Description

AXGOC is a 2-day, instructor-led, lecture/lab course that teaches you how to design and deploy the ACE XML Gateway to optimize web content management. In this course, you will learn how to deploy and configure intelligent application services using the Cisco ACE XML Gateway. This course covers all of the key features of the ACE XML Gateway, including application security, message-level security, protocol transformations, maximizing application scalability, securely accelerating performance of Web services, and reducing costs of provisioning services.

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe the types of application security provided by the Cisco ACE XML Gateway
• Describe the Cisco ACE XML Gateway
• Describe the configuration tasks necessary to deploy a Cisco ACE XML Gateway
• Describe the Cisco ACE XML Gateway support for SSL
• Describe the methods used to secure individual XML message types
• Describe advanced deployment options
• Describe how to diagnose and solve problems between the Cisco ACE XML Gateway and the external service or service consumer

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

• Familiarity with TCP/IP protocol suite
• Knowledge of the HTTP, SSL, and XML protocols
• Basic understanding of n-tier application architecture

Who Should Attend

This course is designed for systems engineers and network architects who need to design or deploy application security solutions using the Cisco ACE XML Gateway.

• Course Introduction
  • Overview
  • Course Goal and Objectives
  • Course Flow
  • Additional References
• Lesson 1: Introduction to XML
  • Enterprise Applications
  • Why Web Services?
  • XML Introduction
  • XML Web Services
  • Using XML
  • The Challenges
• Lesson 2: Introducing the Cisco ACE XML Gateway
  • XML Infrastructure
  • Gateway Capabilities
  • Gateway Architecture
  • Gateway Manager
• Lesson 3: Deploying the Cisco ACE XML Gateway
  • Network Topologies
  • Initial Configuration
  • Working with Policies
  • Message Logging
• Lesson 4: Securing Communications with SSL
  • Digital Encryption Technologies
  • SSL Service Options
  • Configuring a PKI
  • Configuring SSL Proxy Services
• Lesson 5: Message-Level Security
  • Application Threats
  • Controlling Access to Services
  • Validating Messages
  • Preventing DoS Attacks
  • Screening Content
  • Securing XML Message Content
• Lesson 6: Advanced Deployment Options
  • Managing Web Console Users
  • Organizing and Administering Policies
  • Approval-Based Deployment
  • Managing Gateway Clusters
  • Extending the ACE XML Gateway
• Lesson 7: Troubleshooting the Cisco ACE XML Gateway
  • Monitoring the Cisco ACE XML Gateway
  • Logging Events
  • Monitoring Performance
  • Generating Compliance Reports
  • Creating a Diagnostic Snapshot
• Lesson 8: New Features v5.2
  • PCI DSS 6.5, 6.6
  • Cisco ACE XML Gateway with WAF

Lab Outline

• Lab 1: Cisco ACE XML Gateway Initial Configuration and Access to the Cisco ACE XML Manager Web Console
• Lab 2: Creating a Cisco ACE XML Gateway Policy using the Cisco ACE XML Manager Web Console
• Lab 3: Securing Access to Services
• Lab 4: Securing Traffic with SSL
• Lab 5: Using Content Screening Rules
• Lab 6: Encrypting and Decrypting XML Content
• Lab 7: Creating and Verifying Digital Signatures