Customer Reviews

CCSP Self-Study: Cisco Secure PIX Firewall Advanced (CSPFA) (2nd Edition)

5 star:		(0)
4 star:		(2)
3 star:		(1)
2 star:		(0)
1 star:		(0)

 

 

Overall, this is a very good intermediate level text on Cisco firewalls. It is not for the beginning networker. Having an understanding of topics such as VLANS, access lists, NAT, PAT, and routing protocols is a prerequisite, if one wants to utilize the text to its fullest potential. With this understanding, this book becomes a powerful reference on setting up a Cisco PIX firewall. It walks one through the necessary steps of configuring a firewall in various different networking environments. The scenarios provided in the text can be adapted for most small to medium-sized networks. As one continues reading, the level and depth of material gets progressively more difficult. This increased difficulty may appeal to the advanced networker. Topics in this category include VPNs, attack guards, and enterprise management will not make sense to the novice, but add value and depth to the text.

Simply put, this book is a good reference and study aide on the topic of PIX firewalls. It is worth reading, if you are interested in learning basic topics or even some advanced ones. What you get from this book totally depends on the amount of time and work you put into reading and/or studying the text. This book will remain on my shelf as a valuable reference as I could not find much to fault.

I purchased this book to prepare Cisco's 642-521 certification exam on the PIX firewall. There is alot of useful information and the book is pretty thorough. However, I got a couple of PIX's and tried to go through all the labs which follow the chapters. Not everything is covered. Chapter 10 on Routing has no labs at all. Almost no lab works as written. Mostly there are small errors like using a hostname which has not been mapped to an IP address. Some are pretty extreme. For example, the labs in Chapter 16 try to connect servers on remote lans without setting up either routing or NAT. The also do nothing to allow the IPsec traffic through the firewall. There is an access list created for NAT in step 2 but it is never applied to anything. Missing from the solution are the statements:

nat (inside) 0 access-list nonat

sysopt connection permit-ipsec

route outside 10.0.2.0 255.255.255.0 192.168.2.1

It works once you add these commands, but they are also missing from the errata on the ciscopress web site. That includes several pages of corrections to the text without any corrections to the labs.

If the labs had worked, I would have given it five stars, but since they don't, it only gets three. This seems to be a common problem with Cisco Press. The extreme worst case is CCNP Practical Studies: Routing. That is a whole book of just routing labs but again, hardly any work as written.

I grabbed the book as I got in to a project where I needed to configure Failover PIX system. Given no prior experience with PIX, this book was very handy. However, I still had to consult Cisco website for useful and up-to-date information for PPTP, MPPE, etc.