Cisco Press eBooks

This is the eBook version of the printed book.

CCSP IPS Exam Certification Guide
Official self-study test preparation guide for the Cisco IPS exam 642-532

The official study guide helps you master all the topics on the IPS exam, including:

* IPS concepts
* Command-line interface (CLI) and IPS Device Manager (IDM) configuration modes
* Basic sensor and IPS signature configuration
* IPS signature engines
* Sensor tuning
* IPS event monitoring
* Sensor maintenance
* Verifying system configuration
* Using the Cisco IDS Module (IDSM) and Cisco IDS Network Module
* Capturing network traffic

CCSP IPS Exam Certification Guide is a best of breed Cisco® exam study guide that focuses specifically on the objectives for the IPS exam. Cisco Security Test Engineer Earl Carter shares preparation hints and test-taking tips, helping you identify areas of weakness and improve your Intrusion Prevention System (IPS) knowledge. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

Read More »

This is the eBook version of the printed book.

CCSP Flash Cards and Exam Practice Pack

More than 1900 flash cards, practice questions, and quick reference sheets for all five of the CCSP exams: SND, SNRS, SNPA, IPS, and CSVPN

Are you ready to take the SND, SNRS, SNPA, IPS, or CSVPN exams for CCSP™ certification? You’ve learned the concepts, you have the experience to put them into real-world use, and now you want to practice, practice, practice until exam time. CCSP Flash Cards and Exam Practice Pack gives you three methods of proven, late-stage exam preparation for the five CCSP exams all in one convenient learning package.

Test Engine

500-question exam engine includes both practice and study modes

Flash Cards

More than 1000 flash cards in PC, handheld, and print formats, available in customized sets

Quick Reference Sheets

All exam topics included in 400+ graphical quick reference sheets

Read More »

This is the eBook version of the printed book.

CCIE Security Exam Certification Guide (CCIE Self-Study), 2nd Edition

Official self-study test preparation guide for the CCIE Security written exam 350-018

Updated content covers all the latest CCIE Security written exam 2.0 objectives, including:

* AES, EAP, IOS SSH, RDEP, and intrusion prevention
* DNS, TFTP, Secure Shell, Secure Socket Layer Protocol, NTP, and SNMP
* Password security, password recovery, and standard and extended access lists
* Encryption technologies and security protocols, including IPSec, AES, 3DES, TACACS+, and RADIUS
* Cisco security applications, including Cisco Secure PIX® Firewall, VPN, IDS, IPS, and Cisco Policy Manager
* Basic security methods and the evolution of new secure networks including packet filtering, proxies, and NAT/PAT
* Cisco security applications such as the VPN 3000, client-side VPNs, and service modules

With increased reliance on networking resources to provide productivity gains and corporate revenue contributions, the need for network security has never been higher. Rising concerns over corporate espionage, cyber-terrorism, financial fraud, and theft of proprietary information have radically increased the demand for highly skilled networking security professionals. As one of the most sought-after and highly valued networking certifications, the Cisco Systems® CCIE Security certification is answering the need for technical expertise in this critical market by distinguishing the top echelon of internetworking experts.

Read More »

This is the eBook version of the printed book.

CCSP SNPA Official Exam Certification Guide, 3rd Edition

Assessment, review, and practice for CCSP SNPA exam 642-522

The official study guide helps you master all the topics on the SNPA exam, including:

* Firewall technologies
* Cisco Security Appliance translation and connection
* Access control configuration
* Modular policy framework
* Security contexts
* Syslog
* Routing protocol support
* Failover
* Virtual private networks (VPN)
* Adaptive Security Device Manager (ASDM)
* Content filtering
* Authentication, authorization, and accounting (AAA) configuration
* Intrusion Prevention Systems (IPS) and advanced protocol handling

CCSP SNPA Official Exam Certification Guide, Third Edition, is a best-of-breed Cisco® exam study guide that focuses specifically on the objectives for the Securing Networks with PIX and ASA (SNPA) exam. Network security consultant, Michael Gibbs, shares preparation hints and test-taking tips, helping you identify areas of weakness and improve your knowledge of firewall and Adaptive Security Appliance (ASA) security. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

Read More »

This is the eBook version of the printed book.

Home Network Security Simplified

A straightforward, graphic-based reference for securing your home network

* Set up a firewall
* Secure your wireless network
* Stop adware and spyware
* Keep your children safe from online threats
* Prevent a virus outbreak
* Avoid Internet scams

Phishing. Malware. Spyware. Trojan horses. Firewalls. Parental controls. If you have a home computer connected to the Internet, you need to understand these security terms. If that connection is high-speed (always on) or you run a wireless network, your need–your vulnerability–is that much greater. Now, with Home Network Security Simplified, you can get illustrated, easy-to-digest information written specifically for your needs.

For each class of security threat, Home Network Security Simplified provides a tutorial–including tricks and tools that hackers use, a primer on network security design fundamentals, and step-by-step instructions on implementing security solutions. The authors also offer tips for monitoring your network and show what to do in the event of a security breach. Specifically, you will learn how to:

Read More »

This is the eBook version of the printed book.

Advanced Host Intrusion Prevention with CSA

Protecting systems within an enterprise has proven as important to overall security as securing the enterprise perimeter. Over the past few years, the number of vulnerabilities stemming from weaknesses in applications and operating systems has grown dramatically. In direct correlation with the number of weaknesses discovered, the number of viruses, worms, and security attacks has also exploded across the Internet. To add to the typical virus issues that businesses have had to confront, there are also malicious programs infiltrating organizations today in the form of spyware and adware.

* Prevent day-zero attacks
* Enforce acceptable-use policies
* Develop host-IPS project implementation plans
* Evaluate management hierarchy installation options, including single-server, multiserver, and built-in database usage
* Learn about CSA agents and manual and scripted installation options
* Understand policy components and custom policy creation
* Use and filter information from CSA event logs
* Troubleshoot CSA deployments with agent and management server logs and built-in troubleshooting tools

Read More »

This is the eBook version of the printed book.

Comparing, Designing, and Deploying VPNs

A practical guide for comparing, designing, and deploying IPsec, MPLS Layer 3, L2TPv3, L2TPv2, AToM, and SSL virtual private networks

* Explore the major VPN technologies and their applications, design, and configurations on the Cisco IOS® Router, Cisco® ASA 5500 Series, and the Cisco VPN 3000 Series Concentrator platforms
* Compare the various VPN protocols and technologies, learn their advantages and disadvantages, and understand their real-world applications and methods of integration
* Find out how to design and implement Secure Socket Layer (SSL) VPNs, including consideration of clientless operation, the Cisco SSL VPN Client, the Cisco Secure Desktop, file and web server access, e-mail proxies, and port forwarding
* Learn how to deploy scalable and secure IPsec and L2TP remote access VPN designs, including consideration of authentication, encryption, split-tunneling, high availability, load-balancing, and NAT transparency
* Master scalable IPsec site-to-site VPN design and implementation including configuration of security protocols and policies, multiprotocol/ multicast traffic transport, NAT/PAT traversal, quality of service (QoS), Dynamic Multipoint VPNs (DMVPNs), and public key infrastructure (PKI)

Virtual private networks (VPNs) enable organizations to connect offices or other sites over the Internet or a service provider network and allow mobile or home-based users to enjoy the same level of productivity as those who are in the same physical location as the central network. However, with so many flavors of VPNs available, companies and providers are often hard pressed to identify, design, and deploy the VPN solutions that are most appropriate for their particular network architecture and service needs.

Read More »