Managing Cisco Network Security, 2/e
暫譯: 管理 Cisco 網路安全, 第2版

The Complete Guide to Cisco Security

Information security has become an extremely important topic over the past few years. In today's environment the number of touch points between an organization's information assets and the outside world has drastically increased. Millions of customers interact via Web sites, employees and partners connect via Virtual Private Networks, applications are outsourced to Application Service Providers (ASPs) and wireless LANs are regularly deployed. A critical strategy for reducing security risks is to practice defense-in-depth, and Cisco Systems has placed a high priority on security and offers a wide range of security products. Managing Cisco Network Security, Second Edition is important to anyone involved with Cisco networks, as it provides practical information on using a broad spectrum of Cisco's security products.

• Learn the Key Steps to Take When a Breach Is Detected
  Review the five steps of identification and classification, containment, eradication, recovery, and follow-up.
• Master the PIX Firewall Series of Products
  Learn about the Cisco PIX 535, Cisco PIX 525, Cisco PIX 515E, Cisco PIX, and Cisco PIX 501.
• Place Access Lists
  Review the options you have in applying access lists and achieving the same affect on traffic flowing through the router.
• Understand the Three Phases of Transparent Routing
  Review the guidelines for deploying Network Address Translation (NAT).
• Understand the LocalDirector Security Features
  Secure Geographically Dispersed Server Farms Using DistributedDirector.
• Find an Overview of the Different VPN Technologies
  Use a Cisco VPN Concentrator and IPSec to securely send information to and from both sides of the VPN.
• Cover Cisco Authentication, Authorization, and Accounting (AAA)
  Configure Cisco devices, including routers, access servers, firewalls, and VPN gateways to act as an AAA client.
• Configure the Features of the Content Services Switch (CSS)
  Review the security features of CSS, including health checks for each new flow, Access Control Lists, and NAT.
• Perform Dynamic Intrusion Detection
  Use the Cisco Secure Network Intrusion Detection System to perform real-time intrusion detection.
• Look Ahead to Cisco Wireless Security
  Review the four steps of Wireless Equivalency Privacy (WEP) authorization.
• Register for Your 1 Year Upgrade
  The Syngress Solutions upgrade plan protects you from content obsolescence and provides monthly mailings, whitepapers, and more!

Contents

Foreword 

Chapter 1 Introduction to IP Network Security

Chapter 2 What Are We Trying to Prevent?

Chapter 3 Cisco PIX Firewall

Chapter 4 Traffic Filtering in the Cisco Internetwork Operating System

Chapter 5 Network Address Translation/Port Address Translation

Chapter 6 Cryptography

Chapter 7 Cisco LocalDirector and DistributedDirector

Chapter 8 Virtual Private Networks and Remote Access

Chapter 9 Cisco Authentication, Authorization, and Accounting Mechanisms

Chapter 10 Cisco Content Services Switch

Chapter 11 Cisco Secure Scanner

Chapter 10 Cisco Content Services Switch

Chapter 11 Cisco Secure Scanner