SecurityLessons Reserve founders spot

Lesson-to-lab structure

SWSA-300-725 Labs

28 planned lessons collapse into 22 planned labs (0 built so far) across 22 scenarios, numbered per module in the order you meet them: each lab follows the last lesson it exercises.

22labs planned
22scenarios
0multi-scenario
22single-scenario

How a lab is put together

Scenario 1 establishes the foundation. Every later scenario depends on Scenario 1 and, wherever possible, on nothing else — hub-and-spoke rather than a chain. A failure in Scenario 3 does not strand Scenario 4, you can start at any scenario from one known state, and each lab needs one start-config rather than one per scenario.

Each module opens with a setup lab that brings its appliances up from the start-config — numbered like every other lab, first in its module. Labs are numbered per module, the way lessons are: M4 · Lab 2 is the second lab of Module 4. Every lab sits right after the last lesson it exercises, so you do a lesson or a few, then the lab.

Labs are grouped by module and exam objective; a grouping is refined lesson by lesson as each lab guide publishes, and the numbering never changes once a lab is live.

  1. M1 · Lab 1 Power On the WSA swsa-platform-deployment Objective setup · Set up
    1. S1 M1 · Lab 1: Power On the WSA lab-setup
  2. M1 · Lab 2 Implement Traffic Redirection: Explicit Proxy, PAC, WCCP & Transparent swsa-platform-deployment Objective 2.3 · Configure
    1. S1 Implement Traffic Redirection: Explicit Proxy, PAC, WCCP & Transparent configuration
  3. M1 · Lab 3 Advanced Proxy Services: Caching, SOCKS Proxy & IP Spoofing swsa-platform-deployment Objective 3.2 · Describe
    1. S1 Advanced Proxy Services: Caching, SOCKS Proxy & IP Spoofing concept
  4. M2 · Lab 1 Configure Identification Profiles & Proxy Authentication: Realms, Surrogates & AD swsa-identity-authentication Objective 2.3 · Configure
    1. S1 Configure Identification Profiles & Proxy Authentication: Realms, Surrogates & AD configuration
  5. M2 · Lab 2 Configure FTP Proxy Authentication swsa-identity-authentication Objective 4.3 · Describe
    1. S1 Configure FTP Proxy Authentication configuration
  6. M2 · Lab 3 Integrate the Secure Web Appliance with Cisco ISE: pxGrid Identity & SGT-Based Policy swsa-identity-authentication Objective 1.4 · Integrate
    1. S1 Integrate the Secure Web Appliance with Cisco ISE: pxGrid Identity & SGT-Based Policy configuration
  7. M2 · Lab 4 Troubleshoot Proxy Authentication: Realms, Kerberos, NTLM & Authentication Logs swsa-identity-authentication Objective 4.4 · Troubleshoot
    1. S1 Troubleshoot Proxy Authentication: Realms, Kerberos, NTLM & Authentication Logs troubleshooting
  8. M3 · Lab 1 Configure Access Policies: URL Filtering, Categorization & Reputation swsa-acceptable-use Objective 2.2 · Configure
    1. S1 Configure Access Policies: URL Filtering, Categorization & Reputation configuration
  9. M3 · Lab 2 Configure Referrer Header Filtering for Web Categories swsa-acceptable-use Objective 2.4 · Configure
    1. S1 Configure Referrer Header Filtering for Web Categories configuration
  10. M3 · Lab 3 Configure Time-Based & Traffic-Volume Acceptable Use Policies swsa-acceptable-use Objective 7.2 · Configure
    1. S1 Configure Time-Based & Traffic-Volume Acceptable Use Policies configuration
  11. M3 · Lab 4 Configure Web Application Visibility & Control: Office 365 & Third-Party Feeds swsa-acceptable-use Objective 7.3 · Configure
    1. S1 Configure Web Application Visibility & Control: Office 365 & Third-Party Feeds configuration
  12. M3 · Lab 5 Configure Secure Web Appliance to Inspect Archive File Types swsa-acceptable-use Objective 7.6 · Configure
    1. S1 Configure Secure Web Appliance to Inspect Archive File Types configuration
  13. M3 · Lab 6 Validate Policy with the Policy Trace Tool swsa-acceptable-use Objective 7.5 · Implement
    1. S1 Validate Policy with the Policy Trace Tool troubleshooting
  14. M4 · Lab 1 Stand Up the Enterprise CA on AD-01 & Issue Certificates swsa-decryption-malware Objective 5.3 · Configure
    1. S1 Stand Up the Enterprise CA on AD-01 & Issue Certificates configuration
  15. M4 · Lab 2 Configure TLS Decryption on the WSA swsa-decryption-malware Objective 5.1 · Describe
    1. S1 Configure TLS Decryption on the WSA configuration
  16. M4 · Lab 3 Configure File Reputation Filtering & File Analysis swsa-decryption-malware Objective 8.2 · Configure
    1. S1 Configure File Reputation Filtering & File Analysis configuration
  17. M5 · Lab 1 Configure & Analyze Web Tracking Reports swsa-reporting-troubleshooting Objective 9.1 · Configure
    1. S1 Configure & Analyze Web Tracking Reports configuration
  18. M5 · Lab 2 Integrate & Configure Advanced Web Security Reporting swsa-reporting-troubleshooting Objective 1.3 · Integrate
    1. S1 Integrate & Configure Advanced Web Security Reporting configuration
  19. M5 · Lab 3 Interpret System Health Using the System Health Dashboard swsa-reporting-troubleshooting Objective 9.4 · Interpret
    1. S1 Interpret System Health Using the System Health Dashboard troubleshooting
  20. M5 · Lab 4 Troubleshoot Using Access Logs swsa-reporting-troubleshooting Objective 6.3 · Troubleshoot
    1. S1 Troubleshoot Using Access Logs troubleshooting
  21. M5 · Lab 5 Troubleshoot Data Security & External DLP Using Log Files swsa-reporting-troubleshooting Objective 1.5 · Troubleshoot
    1. S1 Troubleshoot Data Security & External DLP Using Log Files troubleshooting
  22. M5 · Lab 6 Troubleshoot Connectivity Through the Secure Web Appliance swsa-reporting-troubleshooting Objective 9.3 · Troubleshoot
    1. S1 Troubleshoot Connectivity Through the Secure Web Appliance troubleshooting