This is the eBook version of the printed book.

Securing Your Business with Cisco ASA and PIX Firewalls

Protect critical data and maintain uptime with Cisco ASDM and Cisco Security Agent

* Understand how attacks can impact your business and the different ways attacks can occur
* Learn about the defense-in-depth model for deploying firewall and host protection
* Examine navigation methods and features of Cisco ASDM
* Set up Cisco ASA, PIX Firewall, and ASDM hardware and software
* Use the Cisco ASDM startup wizard to safely connect your network to the Internet and securely add public devices such as mail and web servers to your network
* Authenticate firewall users and users of public web servers
* Filter traffic and protect your network from perimeter attacks
* Deploy Cisco Intrusion Prevention System (IPS) to provide more granular traffic inspection and proactive threat response
* Stop attacks launched at the desktop by deploying Cisco Security Agent
* Extend the defense-in-depth model to remote users through IPSec virtual private networks (VPN)
* Enhance your security posture through proper security management
* Understand the advanced features available in the Cisco PIX version 7 operating system
* Recover from software failure with Cisco PIX version 7

Read More »

This is the eBook version of the printed book.

Cisco ASA and PIX Firewall Handbook

The complete guide to the most popular Cisco PIX®, ASA, FWSM, and IOS® firewall security features

* Learn about the various firewall models, user interfaces, feature sets, and configuration methods
* Understand how a Cisco firewall inspects traffic
* Configure firewall interfaces, routing, IP addressing services, and IP multicast support
* Maintain security contexts and Flash and configuration files, manage users, and monitor firewalls with SNMP
* Authenticate, authorize, and maintain accounting records for firewall users
* Control access through the firewall by implementing transparent and routed firewall modes, address translation, traffic filtering, user authentication, content filtering, application inspection, and traffic shunning
* Increase firewall availability with firewall failover operation
* Understand how firewall load balancing works
* Generate firewall activity logs and learn how to analyze the contents of the log
* Verify firewall operation and connectivity and observe data passing through a firewall
* Control access and manage activity on the Cisco IOS firewall
* Configure a Cisco firewall to act as an IDS sensor

Every organization has data, facilities, and workflow processes that are critical to their success. As more organizations make greater use of the Internet, defending against network attacks becomes crucial for businesses. Productivity gains and returns on company investments are at risk if the network is not properly defended. Firewalls have emerged as the essential foundation component in any network security architecture.

Read More »

This is the eBook version of the printed book.

CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide (CCSP Self-Study), 2nd Edition

Official self-study test preparation guide for the Cisco CSPFA 642-521 exam

Coverage of the CSPFA topics enables you to fill your knowledge gaps before the exam date. You’ll learn about:

* The comprehensive line of Cisco PIX Firewall products and the technology and features central to each one
* Transport protocols, Network Address Translation (NAT), and Port Address Translation (PAT)
* Reporting, tool use, and administration using Firewall MC
* Using access control lists and URL filtering
* Attack guards and intrusion detection
* Cisco Firewall Services Module (FWSM) deployment and configuration
* Concepts and configurations that support failovers
* Enabling a secure virtual private network (VPN)
* Using Cisco PIX Device Manager to configure a firewall and create VPNs

Becoming a CCSP distinguishes you as part of an exclusive group of experts, ready to take on today’s most challenging security tasks. Administration of the Cisco PIX Firewall is a difficult and complex task, critical for protecting a network. Whether you are seeking a PIX-focused certification or the full-fledged CCSP certification, learning what you need to know to pass the Cisco Secure PIX Firewall Advanced (CSPFA) exam will qualify you to keep your company’s network safe while meeting business needs.

Read More »

This is the eBook version of the printed book.

Cisco ASA, PIX, and FWSM Firewall Handbook, Second Edition, is a guide for the most commonly implemented features of the popular Cisco® firewall security solutions. Fully updated to cover the latest firewall releases, this book helps you to quickly and easily configure, integrate, and manage the entire suite of Cisco firewall products, including ASA, PIX®, and the Catalyst® Firewall Services Module (FWSM).

Organized by families of features, this book helps you get up to speed quickly and efficiently on topics such as file management, building connectivity, controlling access, firewall management, increasing availability with failover, load balancing, logging, and verifying operation.

Sections are marked by shaded tabs for quick reference, and information on each feature is presented in a concise format, with background, configuration, and example components.

Read More »

Dynamips has changed the network world and it helped many network fans to obtain the network labs without paying any fee. The new simulator PEMU makes the security lab available on your computer.

Following the name last time, just call it

PEMU 10 Steps for Dummies

by CiscoSpot

Any distribution is welcome, please feel free to contact net@netap.com

1. Download PEMU and decompress it to any folder.

2. Copy PIX OS to the same folder with PEMU.

3. Change the image in pemu.ini file, take pix802.bin for example.

4. Create one .bat file and edit it with the following contents. It’s in ONE line.

Pemu -net nic,vlan=1,macaddr=00:00:0c:00:00:01 -net udp,vlan=1,sport=8000,dport=9000,daddr=127.0.0.1 -net nic,vlan=2,macaddr=00:00:0c:00:00:02 -net udp,vlan=2,sport=8001,dport=9001,daddr=127.0.0.1 -net nic,vlan=3,macaddr=00:00:0c:00:00:03 -net udp,vlan=3,sport=8002,dport=9002,daddr=127.0.0.1 -serial telnet::4444,server -m 128 FLASH

5. Make a copy of FLASH.empty and change the name to FLASH.

6. Run the .bat file that created.

7. Telnet to 127.0.0.1 4444. If any problem occurred when decompressing the image, you have one option that you change the pix.bin to pix.rar and decompress then get the file pix. Copy it to the PEMU folder and change the pemu.ini to map to this image, “image=pix”.

8. The CPU utilization will be 100%, and there is no tool integrated in PEMU. Download BES and run it to control the CPU utilization.

Read More »