Cisco Secure Intrusion Detection System [ILLUSTRATED] (Hardcover)

by Earl Carter (Author)

Editorial Reviews

Product Description

Implement an around-the-clock network surveillance system with an authorized self-study guide

• Provides a comprehensive reference for the design, deployment, and management of the Cisco Secure Intrusion Detection System
• Understand the basic concepts of network security and the Cisco Security Wheel
• Learn about the concept of intrusion detection, the philosophy behind various IDSs, and the major components of the CSIDS
• Evaluate CSIDS Sensor deployment by using both 4200 Series Sensors and Catalyst 6000 IDS modules to determine where to place sensors in your network
• Install and configure CSPM as a Director platform to manage your CSIDS Sensors and analyze alarm information
• Examine the multitude of signatures supported by CSIDS and understand how to effectively manage CSIDS alarms
• Configure the major features of CSIDS, including IP blocking, sensor configuration, and signature filtering
• Install and configure the Cisco Secure ID Director platform, the configuration management utility, and the Cisco IOS Firewall IDS
• Examine feature updates and performance enhancements planned for the Cisco Secure IDS product line

Organizations continue to deploy firewalls as their central gatekeepers to prevent unauthorized users from entering their networks. However, network security is in many ways similar to physical security in that no one technology serves all needs-rather, a layered defense provides the best results. Organizations are increasingly looking to additional security technologies to counter risk and vulnerability that firewalls alone cannot address. Network-based intrusion detection systems (IDSs) provide around-the-clock network surveillance. The Cisco Secure Intrusion Detection System (CSIDS) is a real-time, network-based IDS designed to detect, report, and terminate unauthorized activity throughout a network.

Cisco Secure Intrusion Detection System is a Cisco authorized self-paced learning tool providing a clear explanation of why network security is crucial in today's converged networking environment, how CSIDS improves the security on a network, and how to install and configure CSIDS. This book is divided into seven parts: In Part I, you are exposed to how networks are attacked, along with ways to secure networks. This leads into Part II, which provides an explanation of the components of CSIDS and how they fit into a secure network design. The installation of CSIDS is examined in Part III. Part IV discusses the management of alarms. Normal traffic generates many alarms, both from actual attacks as well as false positives. Without proper management, this flood of alarms can render the IDS ineffective. Part IV also explains how the various types of alarm signatures are classified, along with the severity levels that can be associated with an alarm signature. Part V analyzes the configuration of the major features of CSIDS. This information allows you to configure your CSIDS in an efficient manner, thus providing the best security for the network. Part VI looks at the configuration of the Cisco Secure Intrusion Detection Director (CSIDD) platform, as well as the Cisco IOS® Firewall IDS. This book concludes with Part VII on upcoming features and enhancements planned for the CSIDS.

Cisco Secure Intrusion Detection System is part of a recommended learning path from Cisco Systems that can include simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press.

From the Back Cover
Implement an around-the-clock network surveillance system with an authorized self-study guideOrganizations continue to deploy firewalls as their central gatekeepers to prevent unauthorized users from entering their networks. However, network security is in many ways similar to physical security in that no one technology serves all needs-rather, a layered defense provides the best results. Organizations are increasingly looking to additional security technologies to counter risk and vulnerability that firewalls alone cannot address. Network-based intrusion detection systems (IDSs) provide around-the-clock network surveillance. The Cisco Secure Intrusion Detection System (CSIDS) is a real-time, network-based IDS designed to detect, report, and terminate unauthorized activity throughout a network.Based on the official instructor-led training course of the same name, Cisco Secure Intrusion Detection System provides a clear explanation of why network security is crucial in today's converged networking environment, how CSIDS improves the security on a network, and how to install and configure CSIDS. Following the course outline and enhanced with real-world case studies, this book is divided into seven parts: In Part I, you are exposed to how networks are attacked, along with ways to secure networks. This leads into Part II, which provides an explanation of the components of CSIDS and how they fit into a secure network design. The installation of CSIDS is examined in Part III. Part IV discusses the management of alarms. Normal traffic generates many alarms, both from actual attacks as well as false positives. Without proper management, this flood of alarms can render the IDS ineffective. Part IV also explains how the various types of alarm signatures are classified, along with the severity levels that can be associated with an alarm signature. Part V analyzes the configuration of the major features of CSIDS. This information allows you to configure your CSIDS in an efficient manner, thus providing the best security for the network. Part VI looks at the configuration of the Cisco Secure Intrusion Detection Director (CSIDD) platform, as well as the Cisco IOS(r) Firewall IDS. This book concludes with Part VII on upcoming features and enhancements planned for the CSIDS.Whether you are preparing for the Cisco Security Specialist 1 certification or simply want to understand and make the most efficient use of intrusion detection systems, Cisco Secure Intrusion Detection System provides you with a complete solution for designing, implementing, and managing CSIDS networks.Official study materials for the Cisco Security Specialist 1 IDSPM examProvides a comprehensive reference for the design, deployment, and management of the Cisco Secure Intrusion Detection SystemUnderstand the basic concepts of network security and the Cisco Security WheelLearn about the concept of intrusion detection, the philosophy behind various IDSs, and the major components of the CSIDSEvaluate CSIDS Sensor deployment by using both 4200 Series Sensors and Catalyst 6000 IDS modules to determine where to place sensors in your networkInstall and configure CSPM as a Director platform to manage your CSIDS Sensors and analyze alarm informationExamine the multitude of signatures supported by CSIDS and understand how to effectively manage CSIDS alarmsConfigure the major features of CSIDS, including IP blocking, sensor configuration, and signature filteringInstall and configure the Cisco Secure ID Director platform, the configuration management utility, and the Cisco IOS Firewall IDSExamine feature updates and performance enhancements planned for the Cisco Secure IDS product lineEarl Carter is a Security Research Engineer and member of the Security Technologies Assessment Team (STAT) for Cisco Systems, Inc.(r), where he performs security evaluations on numerous Cisco products, including everything from the PIX(r) Firewall and VPN solutions to Cisco CallManager and other VoIP products. Earl started with Cisco doing research for Cisco Secure Intrusion Detection System (formerly NetRanger) and Cisco Secure Scanner (formerly NetSonar).

See all Editorial Reviews

Product Details

• Hardcover: 912 pages
• Publisher: Cisco Press; illustrated edition edition (October 2001)
• Language: English
• ISBN-10: 158705034X
• ISBN-13: 978-1587050343
• Product Dimensions: 9.2 x 7.6 x 2.3 inches
• Shipping Weight: 3.7 pounds
• Average Customer Review: 4.2 out of 5 stars See all reviews (6 customer reviews)
• Amazon.com Sales Rank: #1,429,403 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

3 of 3 people found the following review helpful:

5.0 out of 5 stars Excellent Reference for CiscoSecure IDS, October 27, 2001

By	"booksters" (Bridgewater, NJ USA) - See all my reviews

Its a direct portal from Cisco's CSIDS class. If you have the class materials, then you do not need this book. Otherwise, its the only book out there by Cisco, on CiscoSecure IDS (formerly Netranger) product line.

2 of 2 people found the following review helpful:

1.0 out of 5 stars Outdated before it even hit the shelves, January 6, 2004

By	C. F Higgins (Warrenville, Illinois United States) - See all my reviews (REAL NAME)

Cisco no longer uses, nor do they recommend CSPM (Cisco Secure Policy Manager). Therefore, 60% of this book is irrelivant information.

I wasted $60 on this book, only to find out later, that it was outdated.

2 of 2 people found the following review helpful:

5.0 out of 5 stars Excellent Learning Tool and Constant Reference Guide., December 11, 2001

By	Chuck Fullerton (Boyertown, PA) - See all my reviews

This book is one of the most well written I've seen from Cisco Press. It covers all area of the Cisco Secure IDS System without being too Wordy.

Chapter 10 contains a complete listing of all Signatures (at print time) that the CSIDS system can detect making this an excellent Reference book.

Keep this on your shelf and close by!!!

Kudo's to Earl Carter for the excellent job in Editing!!!