Network Security Technologies and Solutions (CCIE Professional Development Series)

CCIE Professional Development

Network Security Technologies and Solutions

A comprehensive, all-in-one reference for Cisco network security

Yusuf Bhaiji, CCIE No. 9305

Network Security Technologies and Solutions is a comprehensive reference to the most cutting-edge security products and methodologies available to networking professionals today. This book helps you understand and implement current, state-of-the-art network security technologies to ensure secure communications throughout the network infrastructure.

With an easy-to-follow approach, this book serves as a central repository of security knowledge to help you implement end-to-end security solutions and provides a single source of knowledge covering the entire range of the Cisco network security portfolio.  The book is divided into five parts mapping to Cisco security technologies and solutions: perimeter security, identity security and access management, data privacy, security monitoring, and security management. Together, all these elements enable dynamic links between customer security policy, user or host identity, and network infrastructures.

With this definitive reference, you can gain a greater understanding of the solutions available and learn how to build integrated, secure networks in today’s modern, heterogeneous networking environment. This book is an excellent resource for those seeking a comprehensive reference on mature and emerging security tactics and is also a great study guide for the CCIE Security exam.

“Yusuf’s extensive experience as a mentor and advisor in the security technology field has honed his ability to translate highly technical information into a straight-forward, easy-to-understand format. If you’re looking for a truly comprehensive guide to network security, this is the one! ”

–Steve Gordon, Vice President, Technical Services, Cisco

Yusuf Bhaiji, CCIE No. 9305 (R&S and Security), has been with Cisco for seven years and is currently the program manager for Cisco CCIE Security certification. He is also the CCIE Proctor in the Cisco Dubai Lab. Prior to this, he was technical lead for the Sydney TAC Security and VPN team at Cisco.

• Filter traffic with access lists and implement security features on switches
• Configure Cisco IOS router firewall features and deploy ASA and PIX Firewall appliances
• Understand attack vectors and apply Layer 2 and Layer 3 mitigation techniques
• Secure management access with AAA
• Secure access control using multifactor authentication technology
• Implement identity-based network access control
• Apply the latest wireless LAN security solutions
• Enforce security policy compliance with Cisco NAC
• Learn the basics of cryptography and implement IPsec VPNs, DMVPN, GET VPN, SSL VPN, and MPLS VPN technologies
• Monitor network activity and security incident response with network and host intrusion prevention, anomaly detection, and security monitoring and correlation
• Deploy security management solutions such as Cisco Security Manager, SDM, ADSM, PDM, and IDM
• Learn about regulatory compliance issues such as GLBA, HIPPA, and SOX

This book is part of the Cisco CCIE Professional Development Series from Cisco Press, which offers expert-level instruction on network design, deployment, and support methodologies to help networking professionals manage complex networks and prepare for CCIE exams.

Category: Network Security

Covers: CCIE Security Exam

CCIE專業發展

網路安全技術與解決方案

這本書是Cisco網路安全的全面參考資料，涵蓋了目前網路專業人士所使用的最先進的安全產品和方法。本書幫助您了解並實施當前最先進的網路安全技術，以確保整個網路基礎設施的安全通信。

本書以易於理解的方式，作為安全知識的中央存儲庫，幫助您實施端到端的安全解決方案，並提供了一個涵蓋整個Cisco網路安全產品組合的知識來源。本書分為五個部分，對應於Cisco的安全技術和解決方案：邊界安全、身份安全和訪問管理、數據隱私、安全監控和安全管理。所有這些元素共同實現了客戶安全策略、用戶或主機身份和網路基礎設施之間的動態連接。

通過這本權威參考書，您可以更深入地了解可用的解決方案，並學習如何在當今現代、異質化的網路環境中建立集成的安全網路。本書是那些尋求全面參考成熟和新興安全策略的人的優秀資源，也是CCIE安全考試的優秀學習指南。

"Yusuf在安全技術領域擔任導師和顧問的豐富經驗，使他能夠將高度技術性的信息轉化為直觀易懂的格式。如果您正在尋找一本真正全面的網路安全指南，這就是您需要的！" - Steve Gordon，Cisco技術服務副總裁

Yusuf Bhaiji，CCIE No. 9305（R＆S和Security），在Cisco工作了七年，目前是Cisco CCIE Security認證的項目經理。他還是Cisco Dubai實驗室的CCIE主考官。在此之前，他是Cisco悉尼TAC安全和VPN團隊的技術負責人。

本書是Cisco Press的CCIE專業發展系列的一部分，該系列提供了關於網路設計、部署和支援方法的專家級指導，以幫助網路專業人士。