CCSP Self-Study Guide: Cisco Security Intrusion Detection System (CSIDS) (Second Edition)

Author: Carter | Translator
Publisher:
Publish Date: 2005-04-01
Features:
■ Understand how ciscoids protect, monitor, and enhance physical security policies;
■ Review network-based and host-based security technologies;
■ Review the concept of security wheel diagrams and apply security to AVVID using the safe scheme;
■ Install and configure ciscoids to monitor the network and prevent malicious attacks;
■ Understand the advantages and working principles of Cisco threat response technologies;
■ Apply alarm features and master the method of customizing features;
■ Use a sensor management platform to effectively implement ciscoids in the network;
■ Deeply understand the architecture of Cisco security agents.
In addition to using firewalls and other network security devices to restrict intruders, using intrusion detection and corresponding preventive measures is also very important. This is also an important component of a comprehensive network security solution. Cisco intrusion detection sensors and various management functions work together to provide the network with multiple functions, including detecting, alerting, and automatically shutting down malicious network behavior. This book provides in-depth configuration and deployment information to build reliable and powerful intrusion detection solutions.
This book is an authorized self-study textbook from Cisco, offering detailed information on various ciscoids currently in use, helping you master host-based and network-based IDS functions. Chapter summaries will guide you quickly into the learning process, configuration examples will show you how to fully leverage IDS functionality, and review questions at the end of each chapter will test your knowledge retention. Whether you need a reference manual for CIDS sensor configuration or are preparing for the 642-531 exam, this book will provide effective assistance.
This book is an authorized self-study textbook from Cisco, which comprehensively introduces the main components of the Cisco Intrusion Prevention System (IPS) based on the CiscoIDS course. The book first outlines the basic framework of network security, then introduces intrusion detection, CIDS systems, Cisco network IDS configuration, alarm management, methods for configuring and responding to virus signatures, host intrusion protection, CiscoIDS maintenance and troubleshooting, enterprise-level IDS management, enterprise-level IDS monitoring and reporting, Cisco threat response, and more. Since the functions provided by CiscoIPS are continuously evolving, the final chapter of this book introduces the upcoming features of the Cisco Intrusion Prevention System (These features are likely to become reality when the book is published.)
The appendix of this book provides case studies on the configuration of Cisco intrusion prevention solutions and answers to review questions for each chapter. This book can be used as study and review material for the CCSP certification exam. For technicians who maintain and operate CiscoIDS systems, this book is also an excellent reference.