Cisco Router Firewall Security (Networking Technology)

Features

• Cover Type: Paperback with 912 pages
• Published by: Cisco Press August 20, 2004
• Written in: English
• ISBN 10 Number: 1587051753
• ISBN 13 Number: 978-1587051753
• Book Dimensions: 9.1 x 7.4 x 2.1 inches
• Weighs: 3.2 pounds

Product Description


Harden perimeter routers with Cisco firewall functionality and features to ensure network security

• Detect and prevent denial of service (DoS) attacks with TCP Intercept, Context-Based Access Control (CBAC), and rate-limiting techniques
• Use Network-Based Application Recognition (NBAR) to detect and filter unwanted and malicious traffic
• Use router authentication to prevent spoofing and routing attacks
• Activate basic Cisco IOS filtering features like standard, extended, timed, lock-and-key, and reflexive ACLs to block various types of security threats and attacks, such as spoofing, DoS, Trojan horses, and worms
• Use black hole routing, policy routing, and Reverse Path Forwarding (RPF) to protect against spoofing attacks
• Apply stateful filtering of traffic with CBAC, including dynamic port mapping
• Use Authentication Proxy (AP) for user authentication
• Perform address translation with NAT, PAT, load distribution, and other methods
• Implement stateful NAT (SNAT) for redundancy
• Use Intrusion Detection System (IDS) to protect against basic types of attacks
• Obtain how-to instructions on basic logging and learn to easily interpret results
• Apply IPSec to provide secure connectivity for site-to-site and remote access connections
• Read about many, many more features of the IOS firewall for extreme proficiency of router security

The Cisco IOS firewall offers you the feature-rich functionality that you've come to expect from best-of-breed firewalls: address translation, authentication, encryption, stateful filtering, failover, URL content filtering, ACLs, NBAR, and many others. Cisco Router Firewall Security teaches you how to use the Cisco IOS firewall to enhance the security of your perimeter routers and, along the way, take advantage of the flexibility and scalability that is part of the Cisco IOS software package.

Each chapter in Cisco Router Firewall Security addresses an important component of perimeter router security. Author Richard Deal explains the advantages and disadvantages of all key security features to help you understand when they should be used and includes examples from his personal consulting experience to illustrate critical issues and security pitfalls. A detailed case study is included at the end of the book, which illustrates best practices and specific information on how to implement Cisco router security features.

Whether you are looking to learn about firewall security or seeking how-to techniques to enhance security in your Cisco routers, Cisco Router Firewall Security is your complete reference for securing the perimeter of your network.

This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

About The Author


Richard A. Deal has 18 years experience in the computing and networking industry including networking, training, systems administration, and programming. In addition to a B.S. in mathematics and computer science from Grove City College, Richard holds many certifications from Cisco, including the CCNP and CCSP(tm) certifications. For the past seven years, Richard has operated his own company, The Deal Group, Inc., in Orlando, Florida.

Reader Reviews
CiscoPress's "Cisco Router Firewall Security" by Richard Deal is designed as a book to secure perimeter routers. It is both a practical (and much needed) CiscoPress guide on how to harden a key piece of the network AND an excellent tool for any potential CCIE candidate (either for the Security and R&S lab). On pretty-much every page are either detailed diagrams or complex configurations discussing the topic at hand. The other reviews of this book allfrom a security perspective, and I cannot hope to add anything new to these reviews (especially Richard Bejtlich's review). I canfrom the perspective as someone studying for the CCIE. In Parts 3 and 4, the book dives into the different types of ACLs that you may encounter on the lab. Reflexive ACLs, CBAC (Content-Based Access Control), and NBAR (Network-Based Application Recognition) are each given their own chapter and fully explained in depth (something not replicated in other CiscoPress books - I own over 50 CiscoPress books). I particularly like the discussion on page 308 on how best to counter a Smurf Attack. Chapter 13 on Lock-and-Key ACLs is also a valuable must-read for any potential CCIE candidates. In chapter 17, on page 679, is a great discussion on how to counter a TCP SYN flood attack. Overall, I think "Cisco Router Firewall Security" is the best CiscoPress book published that discusses best-practices for securing Cisco routers. Too be honest, I am kind of surprised I do not see more 'noise' on this book (either from reviews here or on the CCIE list at Groupstudy.com). I have to believe it is from the title, as the title almost implies that this is a firewall book. That is too bad, as this is an excellent book for any network admin concerned about security. Weighing in at over 850 pages, this book will take some time to digest, but will be well worth the effort! I give this book 5 pings out of 5: !!!!! Comment | | (Report this)