Free Books Download

Cambridge IELTS 8(New)

noreply@blogger.com (Amjad Mayo) — Tue, 20 Nov 2012 18:19:00 +0500

Cambridge IELTS 8 provides students with an excellent opportunity to familiarise themselves with IELTS and to practise examination techniques using authentic test material prepared by Cambridge ESOL. Each collection contains four complete tests for Academic candidates, plus extra Reading and Writing modules for General Training candidates. An introduction to these different modules is included in each book, together with an explanation of the scoring system used by Cambridge ESOL. A comprehensive section of answers and tapescripts makes the material ideal for students working partly or entirely on their own.

Microsoft Excel VBA Programming For Dummies

noreply@blogger.com (Administrator) — Wed, 31 Oct 2012 06:26:00 +0500

I think you’ll find that it offers a fast, enjoyable way to discover the ins and outs of Microsoft Excel programming. Even if you don’t have the foggiest idea of what programming is all about, this book can

help you make Excel jump through hoops in no time (well, it will take some time).

Unlike most programming books, this one is written in plain English, and even normal people can understand it. Even better, it’s filled with information of the “just the facts

Cisco Press Cisco DQOS Exam Certification Guide

noreply@blogger.com (Administrator) — Fri, 14 Oct 2011 11:44:00 +0500

Wendell Odom, CCIE No. 1624
Michael J. Cavanaugh, CCIE No. 4516
Computing in general, and networking in particular, must deal with the issues relating to constrained resources. For computers, operating systems must find a way to equitably distribute the CPU time and memory among the various programs running on the computer. When the need for memory exceeds the available memory, the CPU spends more time performing memory management, moving data from memory to permanent storage, typically on a hard disk.

Cisco Press Cisco Catalyst Quality of Service in Campus Networks

noreply@blogger.com (Administrator) — Thu, 13 Oct 2011 14:24:00 +0500

By Mike Flannagan CCIE® No. 7651, Richard Froom CCIE No. 5102, Kevin Turek CCIE No. 7284

End-to-end QoS deployment techniques for Cisco Catalyst series switches

Examine various QoS components, including congestion management, congestion avoidance, shaping, policing/admission control, signaling, link efficiency mechanisms, and classification and marking
Map specified class of service (CoS) values to various queues and maintain CoS values through the use of 802.1q tagging on the Cisco Catalyst 2900XL, 3500XL and Catalyst 4000 and 2948G/2980G CatOS Family of Switches
Learn about classification and rewrite capabilities and queue scheduling on the Cisco Catalyst 5000
Implement ACLs, ACPs, ACEs, and low-latency queuing on the Cisco Catalyst 2950 and 3550 Family of Switches
Understand classification, policying, and scheduling capabilities of the Catalyst 4000 and 4500 IOS Family of Switches
Configure QoS in both Hybrid and Native mode on the Catalyst 6500 Family of Switches
Utilize Layer 3 QoS to classify varying levels of service with the Catalyst 6500 MSFC and Flexwan
Understand how to apply QoS in campus network designs by examining end-to-end casestudies

Quality of service (QoS) is the set of techniques designed to manage network resources. QoS refers to the capability of a network to provide better service to selected network traffic over various LAN and WAN technologies. The primary goal of QoS is to provide flow priority, including dedicated bandwidth, controlled jitter and latency (required by some interactive and delaysensitive traffic), and improved loss characteristics.

While QoS has become an essential technology for those organizations rolling out a new generation of network applications such as real-time voice communications and high-quality video delivery, most of the literature available on this foundation technology for current and future business applications focuses on IP QoS. Equally important is the application of QoS in the campus LAN environment, which is primarily responsible for delivering traffic to the desktop.

Cisco Catalyst QoS is the first book to concentrate exclusively on the application of QoS in the campus environment. This practical guide provides you with insight into the operation of QoS on the most popular and widely deployed LAN devices: the Cisco Catalyst family of switches. Leveraging the authors' extensive expertise at Cisco in the support of Cisco Catalyst switches and QoS deployment, the book presents QoS from the campus LAN perspective. It explains why QoS is essential in this environment in order to achieve a more deterministic behavior for traffic when implementing voice, video, or other delay-sensitive applications. Through architectural overviews, configuration examples, real-world deployment case studies, and summaries of common pitfalls, you will understand how QoS operates, the different components involved in making QoS possible, and how QoS can be implemented on the various Cisco Catalyst platforms to enable truly successful end-to-end QoS applications.

This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

Cisco Press - Cisco IOS Quality Of Service Implementation

noreply@blogger.com (Administrator) — Thu, 13 Oct 2011 14:14:00 +0500

Today’s networks are carrying more data in the form of bandwidth-intensive, real-time voice, video and data, which stretch network

capability and resources. Cisco IOS® software provides a toolbox full of quality of service (QoS) solutions to help you solve

problems caused by increasing traffic demands on the network.

The goal of QoS is to provide better and more predictable network service by providing dedicated bandwidth, controlled jitter

and latency, and improved loss characteristics. QoS achieves these goals by providing tools for managing network congestion,

shaping network traffic, using expensive wide-area links more efficiently, and setting traffic policies across the network.

Internet service providers, small and medium-sized business networks, as well as large enterprise networks can take advantage

of the solutions provided by the Cisco IOS QoS software features.

This white paper presents the Cisco IOS QoS implementation in the following sections:

• Introduction

• QoS Framework

• The Cisco QoS Toolkit

• QoS Signaling

• Cisco QoS Policy, Management, and Accounting Capabilities

• Network QoS Application Examples

• QoS Looking Forward

In addition, reference matrices and commonly requested QoS definitions are included in the appendices

Global IPv6 Strategies From Business Analysis to Operational.Planning

noreply@blogger.com (Administrator) — Sat, 1 Oct 2011 14:32:00 +0500

This book intends to provide a business perspective on IPv6 and its adoption, complementing the many technical IPv6 titles available today. It also intends to provide the readers with some of the “whys” and the “whens” applied to IPv6 strategies and some of the “hows” discovered through implementation experience

by various organizations, countries, and market segments around the world. If the clamor of IPv6 has reached your desk and you simply want to understand what the big deal is, this book will bring you up to speed.

To that end, the book will present you information that answers the following questions:

• In a nutshell, what are the real technical benefits of IPv6?

• What are some of the business and technical opportunities presented by

IPv6?

• What IPv6 adoption strategies have emerged in various markets and

throughout the world?

• What did other organizations do to adopt IPv6?

• How do I prepare my organization for IPv6?

The book combines market analysis and case study methods to provide the

current state of IPv6 adoption. It also provides practical guidelines based on the

extensive IPv6 planning and deployment experience of the authors.

Self Defending Networks The Next Generation of Network Security

noreply@blogger.com (Administrator) — Fri, 30 Sep 2011 10:34:00 +0500

Protect your network with self-regulating network security solutions that combat both internal and external threats.

Provides an overview of the security components used to design proactive network security

Helps network security professionals understand what the latest tools and techniques can do and how they interact

Presents detailed information on how to use integrated management to increase security

Includes a design guide with step-by-step implementation instructions

Self-Defending Networks: The Next Generation of Network Security helps networking professionals understand how to deploy an

end-to-end, integrated network security solution. It presents a clear view of the various components that can be used throughout the

network to not only monitor traffic but to allow the network itself to become more proactive in preventing and mitigating network attacks.

This security primer provides unique insight into the entire range of Cisco security solutions, showing what each element is capable of

doing and how all of the pieces work together to form an end-to-end Self-Defending Network. While other books tend to focus on

individual security components, providing in-depth configuration guidelines for various devices and technologies,Self-Defending

Networks instead presents a high-level overview of the entire range of technologies and techniques that comprise the latest thinking in

proactive network security defenses. This book arms network security professionals with the latest information on the comprehensive

suite of Cisco security tools and techniques. Network Admission Control, Network Infection Containment, Dynamic Attack Mitigation,

DDoS Mitigation, Host Intrusion Prevention, and Integrated Security Management are all covered, providing the most complete

overview of various security systems. It focuses on leveraging integrated management, rather than including a device-by-device manual

to implement self-defending networks.

LAN Switch Security

noreply@blogger.com (Administrator) — Thu, 29 Sep 2011 11:26:00 +0500

What Hackers Know About Your Switches

LAN and Ethernet switches are usually considered as plumbing. They are easy to install and configure,

but it is easy to forget about security when things appear to be simple.

Multiple vulnerabilities exist in Ethernet switches. Attack tools to exploit them started to appear a couple

of years ago (for example, the well-known dsniff package). By using those attack tools, a hacker can

defeat the security myth of a switch, which incorrectly states that sniffing and packet interception are

impossible with a switch. Indeed, with dsniff, cain, and other user-friendly tools on a Microsoft Windows

or Linux system, a hacker can easily divert any traffic to his own PC to break the confidentiality or

the integrity of this traffic.

Most vulnerabilities are inherent to the Layer 2 protocols, ranging from Spanning Tree Protocol to IPv6

neighbor discovery. If Layer 2 is compromised, it is easier to build attacks on upper-layers protocols by

using techniques such as man-in-the-middle (MITM) attacks. Because a hacker can intercept any traffic,

he can insert himself in clear-text communication (such as HTTP or Telnet) and in encrypted channels

(such as Secure Socket Layer [SSL] or secure shell [SSH]).

To exploit Layer 2 vulnerabilities, an attacker must usually be Layer 2 adjacent to the target. Although it

seems impossible for an external hacker to connect to a company LAN, it is not. Indeed, a hacker can

use social engineering to gain access to the premises, or he can pretend to be an engineer called on site

to fix a mechanical problem.

Securing Cisco Network with Router and Switches Lab Guide

noreply@blogger.com (Administrator) — Wed, 28 Sep 2011 13:29:00 +0500

Overview

This guide presents the instructions and other information concerning the lab activities for this

course. You can find the solutions in the lab activity Answer Key.

Outline

This guide includes these activities:

Lab 1-1: Configure Layer 2 Security
Lab 1-2: Configure DHCP Snooping
Lab 2-1: Configure Cisco Secure ACS as a AAA Server
Lab 2-2: Configure 802.1x Port-Based Authentication
Lab 3-1: Configure Cisco NFP
Lab 4-1: Configure a Site-to-Site VPN Using Pre-Shared Keys
Lab 4-2: Configure a Site-to-Site VPN Using PKI
Lab 4-3: Configure a GRE Tunnel to a Remote Site
Lab 4-4: Configure a DMVPN
Lab 4-5: Configure a Cisco IOS SSL VPN (WebVPN)
Lab 4-6: Configure Cisco Easy VPN Remote Access
Lab 5-1: Configure Cisco IOS Classic Firewall
Lab 5-2: Configure Cisco IOS Application Policy Firewall
Lab 5-3: Configure a Cisco IOS Zone-Based Policy Firewall
Lab 5-4: Configure Cisco IOS Firewall Authentication Proxy on a Cisco Router
Lab 5-5: Configure a Cisco Router with Cisco IOS IPS

Router Security Strategies

noreply@blogger.com (Administrator) — Tue, 27 Sep 2011 10:17:00 +0500

Router Security Strategies: Securing IP Network Traffic Planes provides a compre-hensive approach to understand and implement IP traffic plane separation and protection on IP routers. This book details the distinct traffic planes of IP networks and the advanced techniques necessary to operationally secure them. This includes the data, control, management, and services planes that provide the infrastructure for IP networking.

The first section provides a brief overview of the essential components of the Internet Protocol and IP networking. At the end of this section, you will understand the fundamental principles of defense in depth and breadth security as applied to IP traffic planes. Techniques to secure the IP data plane, IP control plane, IP management plane, and IP services plane are covered in detail in the second section.

The final section provides case studies from both the enterprise network and the service provider network perspectives. In this way, the individual IP traffic plane security techniques reviewed in the second section of the book are brought together to help you create an integrated, comprehensive defense in depth and breadth security architecture.

Securing Cisco Network with PIX and ASA

noreply@blogger.com (Administrator) — Tue, 27 Sep 2011 10:14:00 +0500

Course Objectives
After completing this course, the student should be able to:
* Describe firewall technology and security appliance features
* Describe security appliance models, option cards, and licenses
* Configure security appliances to statically and dynamically translate IP addresses
* Configure security appliances to control inbound and outbound traffic
* Configure object groups to simplify ACL configuration
* Explain the routing functionality of security appliances
* Configure a modular policy in security appliances
* Configure advanced protocol handling on security appliances
* Configure AAA on security appliances
* Configure active/standby, active/active, and stateful failover on security appliances
* Load and initialize IPS software on the AIP-SSM module
* Configure security appliances for site-to-site VPNs, remote access VPNs, and WebVPNs
* Configure client-to-security appliance VPNs
* Configure security appliance management
* Install the Cisco Adaptive Security Device Manager and use it to configure and monitor a security appliance

The Complete Cisco VPN Configuration Guide

noreply@blogger.com (Administrator) — Sat, 24 Sep 2011 10:42:00 +0500

Use Cisco concentrators, routers, Cisco PIX and Cisco ASA security appliances, and remote access clients to build a complete VPN solution

A complete resource for understanding VPN components and VPN design issues
Learn how to employ state-of-the-art VPN connection types and implement complex VPN configurations on Cisco devices, including routers, Cisco PIX and Cisco ASA security appliances, concentrators, and remote access clients
Discover troubleshooting tips and techniques from real-world scenarios based on the author’s vast field experience
Filled with relevant configurations you can use immediately in your own network

With increased use of Internet connectivity and less reliance on private WAN networks, virtual private networks (VPNs) provide a much-needed secure method of transferring critical information. As Cisco Systems® integrates security and access features into routers, firewalls, clients, and concentrators, its solutions become ever more accessible to companies with networks of all sizes. The Complete Cisco VPN Configuration Guide contains detailed explanations of all Cisco® VPN products, describing how to set up IPsec and Secure Sockets Layer (SSL) connections on any type of Cisco device, including concentrators, clients, routers, or Cisco PIX® and Cisco ASA security appliances. With copious configuration examples and troubleshooting scenarios, it offers clear information on VPN implementation designs.

Part I, “VPNs,” introduces the topic of VPNs and discusses today’s main technologies, including IPsec. It also spends an entire chapter on SSL VPNs, the newest VPN technology and one that Cisco has placed particular emphasis on since 2003. Part II, “Concentrators,” provides detail on today’s concentrator products and covers site-to-site and remote-access connection types with attention on IPsec and WebVPN. Part III covers the Cisco VPN Client versions 3.x and 4.x along with the Cisco3002 Hardware Client. Cisco IOS® routers are the topic of Part IV, covering scalable VPNs with Dynamic Multipoint VPN, router certificate authorities, and router remote access solutions. Part V explains Cisco PIX and Cisco ASA security appliances and their roles in VPN connectivity, including remote access and site-to-site connections. In Part VI, a case study shows how a VPN solution is best implemented in the real world using a variety of Cisco VPN products in a sample network.

This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.

Cisco Press SSL Remote Access VPNs

noreply@blogger.com (Administrator) — Fri, 23 Sep 2011 10:08:00 +0500

SSL Remote Access VPNs provides you with a basic working knowledge of SSL virtual private networks on Cisco SSL VPN-capable devices. Design guidance is provided to assist you in implementing SSL VPN in existing network infrastructures. This includes examining existing hardware and software to determine whether they are SSL VPN capable, providing design recommendations, and guiding you on setting up the Cisco SSL VPN devices. Common deployment scenarios are covered to assist you in deploying an SSL VPN in your network.

SSL Remote Access VPNs gives you everything you need to know to understand, design, install, configure, and troubleshoot all the components that make up an effective, secure SSL VPN solution.

Cisco® SSL VPN solutions (formerly known as Cisco WebVPN solutions) give you a flexible and secure way to extend networking resources to virtually any remote user with access to the Internet and a web browser. Remote access based on SSL VPN delivers secure access to network resources by establishing an encrypted tunnel across the Internet using a broadband (cable or DSL) or ISP dialup connection.

Cisco Press Securing Cisco Network with Router and Switches Vol 2

noreply@blogger.com (Administrator) — Thu, 22 Sep 2011 10:43:00 +0500

Remote-access virtual private networks (VPNs) allow secure access to corporate resources by

establishing an encrypted tunnel across the Internet. The ubiquity of the Internet, combined

with the VPN technologies of today, allows organizations to cost-effectively and securely

extend the reach of their networks to anyone, anyplace, anytime. In this module, you will be

introduced to IP Security (IPsec) services and generic routing encapsulation (GRE). You will

then set up site-to-site and Dynamic Multipoint VPNs (DMVPNs). You will also learn how to

set up a portal to accommodate Secure Sockets Layer (SSL) VPN (Cisco IOS WebVPN).

Module Objectives

Upon completing this module, you will be able to implement secure IPsec VPNs and GRE

tunnels using Cisco routers. This ability includes being able to meet these objectives:

Describe some basic characteristics and protocols used in IPsec configurations

Describe the various types of VPNs available through Cisco IOS Software including siteto-

site, DMVPN, Cisco Easy VPN, and Cisco IOS WebVPN (SSL)

Configure an IPsec site-to-site VPN using pre-shared keys

Configure an IPsec site-to-site VPN using digital certificates

Describe and configure a GRE site-to-site tunnel

Describe and configure a DMVPN

Describe and configure a Cisco IOS SSL VPN

Plan, configure, operate, and troubleshoot IPsec VPNs using Cisco Easy VPN

Cisco Press Securing Cisco Network with Router and Switches Vol 1

noreply@blogger.com (Administrator) — Thu, 22 Sep 2011 10:39:00 +0500

Securing Networks with Cisco Routers and Switches (SNRS) v2.0 is a five-day, instructor-led,

lab-intensive course that is delivered by Cisco Learning Partners. It is aimed at providing

network specialists with the knowledge and skills needed to secure Cisco IOS router and switch

networks. Successful graduates will be able to secure the network environment using existing

Cisco IOS security features. This includes the ability to configure some of the primary

components of the Cisco IOS Firewall feature set, which include the following:

Cisco IOS classic firewall (formerly known as Context-Based Access Control [CBAC])

Cisco IOS Intrusion Prevention System (IPS)

Cisco IOS authentication proxy

Cisco IOS zone-based policy firewall

Application inspection and control

Learners will also have the ability to implement the following:

Secure tunnels using generic routing encapsulation (GRE) and IP Security (IPsec)

technology

Basic Layer 2 switch security

The Cisco Trust and Identity Management model to control network access

Command-line Cisco Network Foundation Protection (NFP)

Cisco Press Securing Cisco Network Devices Vol 2

noreply@blogger.com (Administrator) — Wed, 21 Sep 2011 10:13:00 +0500

LAN devices, including wireless devices operating at Layer 2, are open to attacks because of
vulnerabilities that are inherent to Layer 2. This module describes Layer 2 vulnerabilities, how
to account for vulnerabilities in a security policy, and how to enable the security features that
are built into Cisco LAN and Cisco wireless LAN (WLAN) products.
The goal of this module is to configure LAN devices to control access, resist attacks, guard
other network devices and systems, and protect the integrity and confidentiality of network
traffic.
Module Objectives
Upon completing this module, you will be able to configure LAN devices to be secure. This
ability includes being able to meet these objectives:
􀂄 Explain how to apply security policies to switches to mitigate Layer 2 attacks
􀂄 Explain how to mitigate attacks against network topologies and protocols
􀂄 Describe how to use the security features embedded in Cisco Catalyst switches to mitigate
network threats
􀂄 Describe how to secure WLAN segments in your network

Cisco Press Securing Cisco Network Devices Vol 1

noreply@blogger.com (Administrator) — Wed, 21 Sep 2011 10:09:00 +0500

Securing Cisco Network Devices (SND) v2.0 provides an opportunity to learn about a broad range of the components embedded in the Cisco Self-Defending Network. You learn to recognize threats and vulnerabilities to networks and learn how to implement basic mitigation measures.

Cisco Press Network Security Architectures

noreply@blogger.com (Administrator) — Tue, 20 Sep 2011 10:18:00 +0500

Written by the principal architect of the original Cisco Systems SAFE Security Blueprint,Network Security Architectures is your comprehensive how-to guide to designing and implementing a secure network. Whether your background is security or networking, you can use this book to learn how to bridge the gap between a highly available, efficient network and one that strives to maximize security. The included secure network design techniques focus on making network and security technologies work together as a unified system rather than as isolated systems deployed in an ad-hoc way.

Beginning where other security books leave off, Network Security Architectures shows you how the various technologies that make up a security system can be used together to improve your network's security. The technologies and best practices you'll find within are not restricted to a single vendor but broadly apply to virtually any network system. This book discusses the whys and hows of security, from threats and counter measures to how to set up your security policy to mesh with your network architecture. After learning detailed security best practices covering everything from Layer 2 security to e-commerce design, you'll see how to apply the best practices to your network and learn to design your own security system to incorporate the requirements of your security policy. You'll review detailed designs that deal with today's threats through applying defense-in-depth techniques and work through case studies to find out how to modify the designs to address the unique considerations found in your network.

Cisco Press Intrusion Detection Planning Guide

noreply@blogger.com (Administrator) — Mon, 19 Sep 2011 12:18:00 +0500

This guide describes intrusion detection technology and provides basic design

considerations and scenarios for deployment.

This guide is organized into the following chapters and appendixes:

• Chapter 1, “Introduction,” provides background information on intrusion detection.

• Chapter 2, “Design Considerations,” provides general information on network design

considerations when implementing intrusion detection.

• Chapter 3, “Scenarios,” provides various scenarios for deploying intrusion detection in

different network environments.

• Appendix A, “Resources and Recommended Reading,” provides a listing of printed and

online resources on intrusion detection.

Cisco Press Firewall Fundamentals

noreply@blogger.com (Administrator) — Mon, 19 Sep 2011 12:12:00 +0500

The essential guide to understanding and using firewalls to protect personal computers and your network An easy-to-read introduction to the most commonly deployed network security device Understand the threats firewalls are designed to protect against Learn basic firewall architectures, practical deployment scenarios, and common management and troubleshooting tasks

Includes configuration, deployment, and management checklists

Increasing reliance on the Internet in both work and home environments has radically increased the vulnerability of computing systems to attack from a wide variety of threats. Firewall technology continues to be the most prevalent form of protection against existing and new threats to computers and networks. A full understanding of what firewalls can do, how they can be deployed to maximum effect, and the differences among firewall types can make the difference between continued network integrity and complete network or computer failure. Firewall Fundamentals introduces readers to firewall concepts and explores various commercial and open source firewall implementations–including Cisco, Linksys, and Linux–allowing network administrators and small office/home office computer users to effectively choose and configure their devices. Firewall Fundamentals is written in clear and easy-to-understand language and helps novice users understand what firewalls are and how and where they are used. It introduces various types of firewalls, first conceptually and then by explaining how different firewall implementations actually work. It also provides numerous implementation examples, demonstrating the use of firewalls in both personal and business-related scenarios, and explains how a firewall should be installed and configured. Additionally, generic firewall troubleshooting methodologies and common management tasks are clearly defined and explained.

Cisco Securing Hosts Using Cisco Security Agent HIPS Student Guide

noreply@blogger.com (Administrator) — Sun, 18 Sep 2011 11:00:00 +0500

The Securing Hosts Using Cisco Security Agent (HIPS) course provides a thorough understanding of the Cisco Security Agent product. This exciting Cisco security course develops the knowledge and skills required to deploy, configure, and administer the Cisco Security Agent product in order to protect server and workstation hosts.

Cisco Security Appliance Command Line Configuration Guide For the Cisco ASA 5500 and PIX 500 Series

noreply@blogger.com (Administrator) — Sat, 17 Sep 2011 16:18:00 +0500

The purpose of this guide is to help you configure the security appliance using the command-line interface. This guide does not cover every feature, but describes only the most common configuration scenarios.
You can also configure and monitor the security appliance by using ASDM, a web-based GUI application. ASDM includes configuration wizards to guide you through some common configuration scenarios, and online Help for less common scenarios. This guide applies to the Cisco PIX 500 series security appliances (PIX 515E, PIX 525, and PIX 535) and the Cisco ASA 5500 series security appliances (ASA 5505, ASA 5510, ASA 5520, ASA 5540, and ASA 5550). Throughout this guide, the term “security appliance” applies generically to all supported models, unless specified otherwise. The PIX 501, PIX 506E, and PIX 520 security appliances are not supported.

Cisco Press CSPFA Cisco Secure PIX Firewall Advanced Student Guide

noreply@blogger.com (Administrator) — Sat, 17 Sep 2011 14:59:00 +0500

Becoming a CCSP distinguishes you as part of an exclusive group of experts, ready to take on today's most challenging security tasks. Administration of the Cisco PIX Firewall is a difficult and complex task, critical for protecting a network. Whether you are seeking a PIX Focused Certification or the full-fledged CCSP Certification, learning what you need to know to pass the CSPFA (Cisco Secure PIX Firewall Advanced) exam will qualify you to keep your company's network safe while meeting business needs.

Each chapter of the CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guidetests your knowledge of the exam subjects through features such as quizzes that assess your knowledge, sections that detail exam topics to master, and areas that highlight essential subjects for quick reference and review. Because experienced IT professionals will agree that the most demanding portion of their jobs is troubleshooting, the final section of this book includes scenarios dedicated to troubleshooting Cisco PIX Firewall configuration. This includes a description of the problem, a portion of the system configuration, debug output, and suggestions to help you resolve the issue. The companion CD-ROM's customizable testing engine enables you to take practice exams that mimic the real testing environment, focus on particular topic areas, randomize answers for reusability, track your progress, and refer to the electronic text for review.

CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide is part of a recommended learning path from Cisco Systems that can include simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

Cisco Press Configuring IPSec Between PIX and Cisco VPN Client Using Smartcard Certificates

noreply@blogger.com (Administrator) — Sat, 17 Sep 2011 14:54:00 +0500

This document demonstrates how to configure an IPSec VPN tunnel between a PIX Firewall and a Cisco VPN Client 3.x. The configuration example in this document also highlights the certification authority (CA) enrollment procedure for both the Cisco IOS® router and the Cisco VPN Client, as well as the use of a Smartcard as a certificate storage.

Cisco Press End to End Network Security

noreply@blogger.com (Administrator) — Fri, 16 Sep 2011 17:19:00 +0500

End-to-End Network Security is designed to counter the new generation of complex threats. Adopting this robust security strategy defends against highly sophisticated attacks that can occur at multiple locations in your network. The ultimate goal is to deploy a set of security capabilities that together create an intelligent, self-defending network that identifies attacks as they occur, generates alerts as appropriate, and then automatically responds.

End-to-End Network Security provides you with a comprehensive look at the mechanisms to counter threats to each part of your network. The book starts with a review of network security technologies then covers the six-step methodology for incident response and best practices from proactive security frameworks. Later chapters cover wireless network security, IP telephony security, data center security, and IPv6 security. Finally, several case studies representing small, medium, and large enterprises provide detailed example configurations and implementation strategies of best practices learned in earlier chapters.

Adopting the techniques and strategies outlined in this book enables you to prevent day-zero attacks, improve your overall security posture, build strong policies, and deploy intelligent, self-defending networks.