book

CCNP Security FIREWALL 642-618 Official Cert Guide

Name: CCNP Security FIREWALL 642-618 Official Cert Guide
ISBN: 9780132979429

by David Hucaby, Dave Garneau, Anthony Sequeira

May 2012

Intermediate to advanced

848 pages

22h 37m

English

Cisco Press

Read now

Unlock full access

Title Page
Copyright Page
About the Authors
About the Technical Reviewers
Dedications
Acknowledgments
Contents at a Glance
Contents
Icons Used in This Book
Introduction
Who Should Read This BookHow to Use This BookCertification Exam and This Preparation GuideOverview of the Cisco Certification ProcessTaking the FIREWALL Certification ExamTracking Cisco Certification StatusHow to Prepare for an ExamAssessing Exam ReadinessCisco Security Specialist in the Real WorldExam RegistrationBook Content UpdatesPremium Edition eBook and Practice Test

Chapter 1. Cisco ASA Adaptive Security Appliance Overview
“Do I Know This Already?” QuizFoundation TopicsFirewall OverviewFirewall TechniquesCisco ASA FeaturesSelecting a Cisco ASA ModelSelecting ASA LicensesASA Memory RequirementsExam Preparation TasksReview All Key TopicsDefine Key Terms
Chapter 2. Working with a Cisco ASA
“Do I Know This Already?” QuizFoundation TopicsUsing the CLIUsing Cisco ASDMUnderstanding the Factory Default ConfigurationWorking with Configuration FilesWorking with the ASA File SystemReloading an ASAExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 3. Configuring ASA Interfaces
“Do I Know This Already?” QuizFoundation TopicsConfiguring Physical InterfacesConfiguring VLAN InterfacesConfiguring Interface Security ParametersConfiguring the Interface MTUVerifying Interface OperationExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 4. Configuring IP Connectivity
“Do I Know This Already?” QuizFoundation TopicsDeploying DHCP ServicesUsing Routing InformationConfiguring Static RoutingRouting with RIPv2Routing with EIGRPRouting with OSPFVerifying the ASA Routing TableExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 5. Managing a Cisco ASA
“Do I Know This Already?” QuizFoundation TopicsBasic Device SettingsConfiguring DNS ResolutionFile System ManagementManaging Software and Feature ActivationConfiguring Management AccessControlling Management Access with AAAConfiguring Monitoring Using SNMPTroubleshooting Remote Management AccessCisco ASA Password RecoveryExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 6. Recording ASA Activity
“Do I Know This Already?” QuizFoundation TopicsSystem TimeManaging Event and Session LoggingConfiguring Event and Session LoggingVerifying Event and Session LoggingTroubleshooting Event and Session LoggingExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 7. Using Address Translation
“Do I Know This Already?” QuizFoundation TopicsUnderstanding How NAT WorksImplementing NAT in ASA Software Versions 8.2 and EarlierImplementing NAT in ASA Software Versions 8.3 and LaterExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 8. Controlling Access Through the ASA
“Do I Know This Already?” QuizFoundation TopicsUnderstanding How Access Control WorksState TablesUnderstanding Interface Access RulesDefault Access RulesThe Global ACLConfiguring Interface Access RulesTime-Based Access RulesVerifying Interface Access RulesOrganizing Access Rules Using Object GroupsVerifying Object GroupsConfiguring and Verifying Other Basic Access ControlsTroubleshooting Basic Access ControlExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 9. Inspecting Traffic
“Do I Know This Already?” QuizFoundation TopicsUnderstanding the Modular Policy FrameworkConfiguring the MPFConfiguring a Policy for Inspecting OSI Layers 3 and 4Configuring Dynamic Protocol InspectionConfiguring a Policy for Inspecting OSI Layers 5–7Detecting and Filtering Botnet TrafficUsing Threat DetectionExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 10. Using Proxy Services to Control Access
“Do I Know This Already?” QuizFoundation TopicsUser-Based (Cut-Through) Proxy OverviewAAA on the ASAUser-Based Proxy Preconfiguration Steps and Deployment GuidelinesDirect HTTP Authentication with the Cisco ASADirect Telnet AuthenticationConfiguration Steps of User-Based ProxyConfiguring User AuthenticationConfiguring Authentication Prompts and TimeoutsConfiguring User AuthorizationConfiguring User Session AccountingTroubleshooting Cut-Through Proxy OperationsUsing Proxy for IP Telephony and Unified TelePresenceExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 11. Handling Traffic
“Do I Know This Already?” QuizFoundation TopicsHandling Fragmented TrafficPrioritizing TrafficControlling Traffic BandwidthExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 12. Using Transparent Firewall Mode
“Do I Know This Already?” QuizFoundation TopicsFirewall Mode OverviewConfiguring Transparent Firewall ModeControlling Traffic in Transparent Firewall ModeUsing ARP InspectionDisabling MAC Address LearningExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 13. Creating Virtual Firewalls on the ASA
“Do I Know This Already?” QuizFoundation TopicsCisco ASA Virtualization OverviewVirtual Firewall Deployment GuidelinesConfiguration Tasks OverviewConfiguring Security ContextsVerifying Security ContextsManaging Security ContextsConfiguring Resource ManagementVerifying Resource ManagementTroubleshooting Security ContextsExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 14. Deploying High Availability Features
“Do I Know This Already?” QuizFoundation TopicsASA Failover OverviewConfiguring Active-Standby Failover ModeConfiguring Active-Active Failover ModeTuning Failover OperationVerifying Failover OperationLeveraging Failover for a Zero Downtime UpgradeExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 15. Integrating ASA Service Modules
“Do I Know This Already?” QuizFoundation TopicsCisco ASA Security Services Modules OverviewInstalling the ASA AIP-SSM and AIP-SSCIntegrating the ASA CSC-SSMExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 16. Traffic Analysis Tools
“Do I Know This Already?” QuizFoundation TopicsTesting Network ConnectivityUsing Packet TracerUsing Packet CaptureSummaryExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 17. Final Preparation
Tools for Final PreparationSuggested Plan for Final Review/StudySummary
Appendix A. Answers to the “Do I Know This Already?” Quizzes
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13Chapter 14Chapter 15Chapter 16
Appendix B. CCNP Security 642-618 FIREWALL Exam Updates: Version 1.0
Always Get the Latest at the Companion WebsiteTechnical Content
Glossary of Key Terms
ABCDEFG–HI–KLMNOP-QRSTU–VW–Z
Index

Overview

Trust the best selling Official Cert Guide series from Cisco Press to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam.

CCNP Security FIREWALL 642-618 Official Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

· Master Cisco CCNP Security FIREWALL exam topics

· Assess your knowledge with chapter-opening quizzes

· Review key concepts with exam preparation tasks

· Practice with realistic exam questions on the CD-ROM

CCNP Security FIREWALL 642-618 Official Cert Guide, focuses specifically on the objectives for the CCNP Security FIREWALL exam. Expert networking consultants Dave Hucaby, Dave Garneau, and Anthony Sequeira share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

The companion CD-ROM contains a powerful Pearson IT Certification Practice Test engine that enables you to focus on individual topic areas or take a complete, timed exam. The assessment engine also tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most.

Well-regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

The official study guide helps you master all the topics on the CCNP Security FIREWALL exam, including:

ASA interfaces

IP connectivity

ASA management

Recording ASA activity

Address translation

Access control

Proxy services

Traffic inspection and handling

Transparent firewall mode

Virtual firewalls

High availability

ASA service modules

CCNP Security FIREWALL 642-618 Official Cert Guide is part of a recommended learning path from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

The print edition of the CCNP Security FIREWALL 642-618 Official Cert Guide contains a free, complete practice exam.

Also available from Cisco Press for Cisco CCNP Security study is the CCNP Security FIREWALL 642-618 Official Cert Guide Premium Edition eBook and Practice Test. This digital-only certification preparation product combines an eBook with enhanced Pearson IT Certification Practice Test.

This integrated learning package:

· Allows you to focus on individual topic areas or take complete, timed exams

· Includes direct links from each question to detailed tutorials to help you understand the concepts behind the questions

· Provides unique sets of exam-realistic practice questions

· Tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CCNP Security SISAS 300-208 Official Cert Guide

Publisher Resources

ISBN: 9780132979429Purchase book Companion Web site Companion Web site

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills