Network Security Principles and Practices

• Authors: Saadat Malik
• Venue: Network Security Principles and Practices
• Year: 2002

From the Publisher:Design and Implementation recommendations for secure network infrastructures and CCIE preparation Prepare for the CCIE Security exam with a thorough explanation of key network security topics Written by a CCIE who helped create the new CCIE Security Recertification Exam Expert level, practical advice for securing a variety of network environments Includes implementation advice that illustrates the concepts in real-world settings Network Security Principles and Practices is a comprehensive guide to network security threats and the policies and tools developed specifically to combat those threats. Starting with a general discussion of network security concepts and design philosophy, the book shows readers how they can build secure network architectures from the ground up. Taking a practical, applied approach to building security into networks, the book focuses on showing readers how to implement and verify security features and products in a variety of environments. Security aspects of routing protocols are discussed and various options for choosing and using them analyzed. The book goes into a detailed discussion of the security threats posed by increasingly prevalent LAN to LAN Virtual Private Networks and remote access VPN installations and how to minimize large vulnerabilities caused by these non-traditional network portals. Firewalls, including the PIX and IOS firewalls, and underlying protocols are presented in depth. Intrusion Detection, is fully examined. The book shows the reader how to control dial-in access by setting up access servers with AAA, PPP, Tacacs+, and Radius. Finally, protections at the service provider arediscussed by showing the reader how to provision security at the service provider level. All topics covered in the book are cross-referenced to Cisco implementations and case studies utilizing Cisco solutions are presented throughout. Saadat Malik, CCIE #4955, is the manager of technical support for the VPN solutions team at Cisco Systems, and was a key participant in the recent development of the new CCIE Security Recertification Exam. Saadat holds a Masters degree in electrical engineering from Purdue University, as well as a Bachelors degree from GIK Institute in Pakistan.