CCSP Self-Study: Securing Cisco IOS Networks (SECUR) [Hardcover]

John Roland (Author), Cisco Systems Inc. (Author)

Book Description

Series: Ccsp Self-Study | Publication Date: April 21, 2004

Cisco authorized self-study book for CCSP 642-501 foundation learning

• Identify the lineup of Cisco Systems network security products and enumerate the components of a complete security policy
• Use Cisco Secure ACS for Windows and Cisco Secure ACS for UNIX to implement TACACS+ and RADIUS AAA support in Cisco router networks
• Configure AAA support on perimeter Cisco routers and Cisco IOS Firewalls
• Implement standard practices to secure administrative access and disable unused router protocols, services, and interfaces
• Use AutoSecure to configure security parameters on Cisco routers
• Configure Cisco IOS Firewalls for CBAC, Authentication Proxy, and AAA support
• Configure and manage Cisco IOS IDS router signatures and audit rules
• Monitor Cisco IOS IDS routers using Security Monitor or Syslog servers
• Configure IPSec VPN tunnels on Cisco routers using preshared keys or RSA signatures
• Configure Cisco routers to use IPSec with Network Address Translation
• Use Security Device Manager and Router Management Center to configure and manage Cisco IOS VPN and Cisco IOS Firewall policies
• Mitigate common router security threats with access control lists (ACLs)

CCSP Self-Study: Securing Cisco IOS Networks (SECUR) is a complete reference for security practices, protocols, software, and equipment that work on or in conjunction with Cisco IOS equipment to provide layers of security to networks. In addition to acting as a key study aid for the CCSP SECUR 642-501 exam, this book will be an invaluable theory and configuration guide for years to come.

CCSP Self-Study: Securing Cisco IOS Networks (SECUR) is a Cisco authorized, self-paced learning tool that helps you gain mastery over all security techniques and technologies, including newer topics such as Cisco Easy VPN and Security Device Manager (SDM). Chapter overviews bring you quickly up to speed on technologies you can use to secure your network. Configuration examples are designed to show you how to make Cisco IOS devices secure, and unique chapter-ending review questions test your knowledge.

Whether you are seeking a reference guide to working with Cisco IOS security or a study guide for the 642-501 exam, CCSP Self-Study: Securing Cisco IOS Networks (SECUR) is the reference you are looking for.

CCSP Self-Study: Securing Cisco IOS Networks (SECUR) is part of a recommended learning path from Cisco Systems that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

This volume is in the Certification Self-Study Series offered by Cisco Press. Books in this series provide officially developed training solutions to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.

158705151603292004

Editorial Reviews

About the Author

John F. Roland is a security specialist and owner of WesTek Consulting LLC. John has worked in the IT field for more than 22 years, most recently on the development of Cisco and Microsoft certification training materials. John is co-author of CCSP Cisco Secure VPN Exam Certification Guide. He holds the CCNP, CCDP, and CSS-1 certifications.

Product Details

• Hardcover: 864 pages
• Publisher: Cisco Press; 2 Sub edition (April 21, 2004)
• Language: English
• ISBN-10: 1587051516
• ISBN-13: 978-1587051517
• Product Dimensions: 9.1 x 7.7 x 2.1 inches
• Shipping Weight: 3.6 pounds
• Average Customer Review: 4.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #1,885,908 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

6 of 6 people found the following review helpful:

4.0 out of 5 stars Good book for 642-501, September 27, 2004

By 

V. Sanapala "sanapala" - See all my reviews
(REAL NAME)   

This review is from: CCSP Self-Study: Securing Cisco IOS Networks (SECUR) (Hardcover)

This is the first book I started off with for preparing for 642-501(Securing IOS Networks ) exam and I liked this book very much.
This is the only book I could find the information about SDM, which is a topic in the exam. Some times you feel like the text is too verbose, but this does not take the gist away from the topic at hand. Only downside of this book is, it does not come with a CD. If they come up with a companion CD with some sample questions, I think you can pass the exam with this single book.

1 of 2 people found the following review helpful:

4.0 out of 5 stars CCSP Self-Study: Securing the IOS, August 29, 2005

By 

monty99 "montoyat99" (New Mexico) - See all my reviews

This review is from: CCSP Self-Study: Securing Cisco IOS Networks (SECUR) (Hardcover)

Title: CCSP Self-Study: Securing Cisco IOS Networks (SECUR)
Author: John F. Roland
ISBN 1-58705-151-6

Though I have yet to take the first exam in the Cisco Certified Security Professional series, I feel confident that after reading this book, that I'll pass. I am a CCNP (re-certified last year) and would say that the material covered in this book expounds on a CCNP's education. In other words, this should be the next phase for all CCNPs, i.e., don't stop reading after attaining the CCNP. The information covered in this book is the least you need to read and understand in order to be, at a minimum, a "security" professional in your field. This book covers the security aspects that aren't mentioned (or mentioned very briefly) in the CCNP series. This book covers securing the router using the IOS' built-in features, such as, the IDS, the firewall features (CBAC), and setting up secure VPNs with IPSec.

For the most part, the author did a good job with the illustrations and the examples. There are a few errors, but with enough reading, the student can decipher them. Perhaps they'll be fixed in the next edition. A reader would benefit greatly by answering the questions at the end of each chapter, but were a reader to work out the scenario exercises at the end of each chapter, everything would then fall into place. The material is difficult. With enough repetition (and the author gives you many chances), the reader can't help but understand it.

One thing this reader noticed is how well the material is presented, i.e., the author tells you what he's going to cover, he covers the material systematically and extensively, and he summarizes by telling you what he covered. This method of presentation ensures maximum coverage of the material and ingrains it into the reader. In fact, and I don't speak facetiously, this author does such a great job of presenting the material several times that if you never got it the first or the second time, by the third time, it finally sinks in -- at least that's what it took for this reader.

This book included two additional and very helpful appendices, i.e., a "Sample Network Security Policy", and "Configuring Standard and Extended Access Lists". The sample policy offers a nice template for those that may find themselves tasked to create one in the future. Very nice additional features in the configuring access lists appendix are two tables. One table contains the several types and codes of ICMP and the other table contains the TCP port keywords.

I would give this book a 4 in a rating of 1 - 5, 5 being the highest. Though the book is very long, I learned the material. In fact, I believe that it required such a length because, as I state yet again, the material is very difficult to grasp. There are enough examples that one could easily follow the steps and employ them in one's own network without (too much) difficulty. And most definitely, this book will be used frequently on my book shelf, not only as reference, but as a template builder.