Cisco Security Specialist's Guide to PIX Firewall [Illustrated] [Paperback]

Umer Khan (Author), Vitaly Osipov (Author), Mike Sweeney (Author), Woody Weaver (Author)

Book Description

ISBN-10: 1931836639 | ISBN-13: 978-1931836630 | Publication Date: January 10, 2003 | Edition: 1

Cisco Security Specialist's Guide to PIX Firewall immerses the reader in the highly complicated subject of firewall implementation, deployment, configuration, and administration. This guide will instruct the reader on the necessary information to pass the CSPFA exam including protocols, hardware, software, troubleshooting and more.

Cisco Security Specialist's Guide to PIX Firewall introduces the basic concepts of attack, explains the networking principals necessary to effectively implement and deploy a PIX firewall, covers the hardware and software components of the device, provides multiple configurations and administration examples, and fully describes the unique line syntax native to PIX firewall configuration and administration.

Ø Coverage of the Latest Versions of PIX Firewalls. This book includes coverage of the latest additions to the PIX Firewall family including the CiscoSecure PIX Firewall (PIX) Software Release 6.0.
Ø Must-have desk reference for the serious security professional. In addition to the foundation information and dedicated text focused on the exam objectives for the CSPFA, this book offers real-world administration and configuration support. This book will not only help readers pass the exam; it will continue to assist them with their duties on a daily basis.
Ø Firewall administration guides? Syngress wrote the book. Syngress has demonstrated a proficiency to answer the market need for quality information pertaining to firewall administration guides. Configuring ISA Server 2000: Building Firewalls for Windows 2000 (ISBN: 1-928994-29-6) and Checkpoint Next Generation Security Administration (ISBN: 1-928994-74-1) are currently best sellers in the security market.

Editorial Reviews

About the Author

Umer Khan [technical sponsor, technical editor, and primary author] is the Senior Director of IT Infrastructure at Broadcom Corporation, the world's largest fabless semiconductor company. Umer and his team have responsibility for the research, design, implementation, and support of Broadcom's global IT infrastructure, including the compute farm, network, telecommunications, Windows and UNIX servers/services, engineering tools/licensing, storage, messaging, desktop/laptop, thin client, and mobile technologies. Umer has served as an author, editor, and reviewer for several technical publications related to networking, security, and UNIX, and his "Cisco Security Specialist's Guide to PIX Firewalls" book became a best-seller in the industry. Umer has a strong passion for technology and its applications. He holds numerous IT certifications (including the CCIE) and has three US patents pending related to networking technologies. Umer received his Bachelor's degree in Computer Engineering from the Illinois Institute of Technology, and his MBA from the Wharton School of the University of Pennsylvania.

Co-author Charles Riley (CCNP, CSS1, CISSP, CCSA, MCSE, CNE-3) is a Network Engineer with a long tenure in the networking security field. Charles has co-authored several books including Syngress Publishing’s Configuring Cisco Voice Over IP, Second Edition (ISBN: 1-931836-64-7). He has designed and implemented robust networking solutions for large Fortune 500 and privately held companies. He started with the U.S. Army at Fort Huachuca, AZ, eventually finishing his Army stretch as the Network Manager of the Seventh Army Training Command in Grafenwoehr, Germany. Currently Charles is employed as a Network Security Engineer for Hypervine in Kansas, where he audits and hardens the existing security of customers, as well as deploying new security architectures and solutions. Charles holds a bachelor's degree from the University of Central Florida.

Excerpt. © Reprinted by permission. All rights reserved.

As one of the first technologies employed to protect networks from unauthorized access, the firewall has come to exemplify network security. While an overall security strategy requires the harmonious integration of people, process, and technology to reduce risk, there is no doubt that firewalls can be a very valuable security tool when properly implemented. Today, the use of firewalls has become such an accepted practice that their deployment in one fashion or another is virtually a foregone conclusion when designing and building networks. Recognizing this need, Cisco Systems has developed and continues to improve upon its line of PIX firewalls. These systems have steadily gained market leadership by demonstrating an excellent mix of functionality, performance, and flexibility.

Firewalls have become increasingly sophisticated devices as the technology has matured. At its most basic level, a firewall is intended to enforce a security policy governing the network traffic that passes through it. To this basic functionality, Cisco has added many features such as network address translation (NAT), virtual private networks (VPN), and redundant architectures for high availability. Management systems are typically installed along with the firewall to assist with monitoring and administrating the device. A maxim of IT security is that technology is only as effective as the people responsible for its operation. Therefore, it is extremely important for the technical staff managing PIX firewalls to understand the technical functionality of these devices, as this will result in better security and more efficient operation of the equipment.

About This Book

The objective of this book is to provide you with a thorough understanding of the Cisco PIX firewalls. Whether you have administrative responsibilities or you are studying to pass an exam such as the Cisco Secure PIX Firewall Advanced (CPSFA), this comprehensive guide will be of value to you. The initial chapters cover the basics, and subsequent chapters delve into advanced topics. Callisma’s contributing authors are industry experts with a wealth of real world implementation experience on the PIX and IOS firewalls, and this book includes many real-world examples of do’s and don’ts. We hope you enjoy reading this book as much as we’ve enjoyed writing it!

-Ralph Troupe,
President and CEO, Callisma

About Callisma

Through Callisma’s skilled team of technology, operations, and project management professionals, we enable today’s major corporations to design and deploy networks that deliver business value. We help our clients compete effectively in the new e-business marketplace through strategic business planning, network design, and implementation services. By providing its clients with a broad base of technical services, a flexible, results-oriented engagement style, and the highest quality documentation and communication, Callisma delivers superior solutions—on time and on budget. Callisma’s expertise includes IP Telephony, Internetworking, Storage, Optical Networking, Operations Management, Security, and Project Management. Callisma is headquartered in Silicon Valley, with offices located throughout the United States.

Product Details

• Paperback: 608 pages
• Publisher: Syngress; 1 edition (January 10, 2003)
• Language: English
• ISBN-10: 1931836639
• ISBN-13: 978-1931836630
• Product Dimensions: 8.8 x 7.1 x 2 inches
• Shipping Weight: 2 pounds (View shipping rates and policies)
• Average Customer Review: 4.6 out of 5 stars  See all reviews (18 customer reviews)
• Amazon Best Sellers Rank: #479,245 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

15 of 15 people found the following review helpful:

5.0 out of 5 stars Best Up-To-Date PIX Book yet!, February 12, 2003

By A Customer

This review is from: Cisco Security Specialist's Guide to PIX Firewall (Paperback)

Over the years the PIX Firewall has come a long way. There is so much that it can do these days, from standard firewall filtering, to IDS, PDM, IPSEC, encryption, and various other VPN technologies, among others. Having such an extended feature set makes understanding it all a difficult proposition. That is where this book succeeds. First of all, the book is up to date on the latest version and feature set. There are few, if any books that are as recent. Furthermore, the book covers, in detail, all PIX features and gives clear examples. Even better, there is a definite undertone of real-world PIX experience built into the writing. I learned so many things from reading this book that I could not find on Cisco's website. I thoroughly enjoyed the side bars on "Configuring & Implementing" and "Designing & Planning". Overall I highly recommend reading this book. I find myself going back on a regular basis to consult a certain chapter to help me with my daily duties, which include managing various PIX firewalls. Good Stuff!

10 of 10 people found the following review helpful:

4.0 out of 5 stars FINALLY - A Decent PIX Book, May 24, 2003

By A Customer

This review is from: Cisco Security Specialist's Guide to PIX Firewall (Paperback)

Finally someone has written a decent book on the PIX Firewall! The authors bypass all of the typical fluff (i.e. Intro to TCP/IP) that usual networking and security books begin with. The text is straight to the point. Well worth the time, effort, and money. The ONLY reason I didn't give this text 5 stars is that not enough attention is paid to configuring without the use of NAT - not all companies use NAT on the PIX. But again, this is better than the rest!!! It'll keep you from having to write your own PIX book. This book is not "...For Dummies."

9 of 9 people found the following review helpful:

5.0 out of 5 stars Passed the test!, February 10, 2003

By 

Scott (Fairfax, VA) - See all my reviews

This review is from: Cisco Security Specialist's Guide to PIX Firewall (Paperback)

This is the most complete and up-to-date book on PIX firewalls I have read. I looked at the Cisco Press book, but it was way out of date. The Richard Deal book is missing some topics, and isn't enough to pass the exam. This one covers it all, and each topic is covered in detail. I passed 9E0-111 today. Two more exams to go to get my CCSP!!!