CCSP Self-Study Guide. Cisco Security PLX Firewall (CSPFA): 2nd Edition

Author: [USA] Betsy / Sun Guoran / Wang Yanqi
Publisher:
Publish Date: 2005-04-01
Features: Firewalls placed at network boundaries to prevent intrusions are critical areas for providing basic security. Cisco continues to support and develop PIXOS to ensure compatibility with the latest standards and protocols while providing top-tier security for networks. Now, Cisco offers a range of products that can well meet the diverse requirements of small offices, medium to large businesses, large enterprises, and service providers. This book provides an in-depth explanation of the configuration and application of this widely used, versatile product. The book systematically covers the Cisco PIX firewall, Cisco's flagship product for network security, in 7 parts. Part 1 discusses the basics of network security, fundamental methods for implementing security policies, an overview of Cisco's security products, and systematically elaborates on the various models and basic features of the PIX firewall. Part 2 explains the specific methods and configurations for deploying PIX firewalls in environments of different scales and complexities through examples. Part 3 provides detailed explanations of PIX firewall configuration, including basic configuration, PDM management configuration, address and port translation configuration, access control list and content filtering configuration, and how to group objects for simplified configuration. Basic routing configuration is also covered. Part 4 covers advanced configuration, including how to configure PIX firewalls to support special upper-layer protocols and multimedia protocols, how to configure attack protection, intrusion detection, and dynamic blocking, how to configure authentication, authorization, and accounting, and how to configure failover to improve the reliability of the security system. Part 5 provides a concise description of key technologies in VPNs, such as IPSec, and then explains the specific configuration methods for building different types of VPNs using PIX firewalls. Part 6 discusses the maintenance and management of PIX firewalls, especially how to use the Firewall Management Center (MC) and AUS to manage and maintain firewalls in enterprise networks in a graphical way. Part 7 covers specialized topics, such as the Firewall Services Module (FWSM) on Cisco 6500 switches and Cisco 7600 routers, and PIX firewalls in SOHO networks. The focus of the book is on applying PIX firewalls in real-world environments, so it does not delve into the details of specific technologies but rather covers the various configurations when applying the product. This book is suitable for candidates preparing for the CCSP certification exam and for various engineering and technical personnel who want an in-depth understanding of PIX firewall applications.