book

CCNP Security FIREWALL 642-618 Official Cert Guide

Name: CCNP Security FIREWALL 642-618 Official Cert Guide
ISBN: 9780132979429

by David Hucaby, Dave Garneau, Anthony Sequeira

May 2012

Intermediate to advanced

848 pages

22h 37m

English

Cisco Press

Read now

Unlock full access

Title Page
Copyright Page
About the Authors
About the Technical Reviewers
Dedications
Acknowledgments
Contents at a Glance
Contents
Icons Used in This Book
Introduction
Who Should Read This BookHow to Use This BookCertification Exam and This Preparation GuideOverview of the Cisco Certification ProcessTaking the FIREWALL Certification ExamTracking Cisco Certification StatusHow to Prepare for an ExamAssessing Exam ReadinessCisco Security Specialist in the Real WorldExam RegistrationBook Content UpdatesPremium Edition eBook and Practice Test

Chapter 1. Cisco ASA Adaptive Security Appliance Overview
“Do I Know This Already?” QuizFoundation TopicsFirewall OverviewFirewall TechniquesCisco ASA FeaturesSelecting a Cisco ASA ModelSelecting ASA LicensesASA Memory RequirementsExam Preparation TasksReview All Key TopicsDefine Key Terms
Chapter 2. Working with a Cisco ASA
“Do I Know This Already?” QuizFoundation TopicsUsing the CLIUsing Cisco ASDMUnderstanding the Factory Default ConfigurationWorking with Configuration FilesWorking with the ASA File SystemReloading an ASAExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 3. Configuring ASA Interfaces
“Do I Know This Already?” QuizFoundation TopicsConfiguring Physical InterfacesConfiguring VLAN InterfacesConfiguring Interface Security ParametersConfiguring the Interface MTUVerifying Interface OperationExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 4. Configuring IP Connectivity
“Do I Know This Already?” QuizFoundation TopicsDeploying DHCP ServicesUsing Routing InformationConfiguring Static RoutingRouting with RIPv2Routing with EIGRPRouting with OSPFVerifying the ASA Routing TableExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 5. Managing a Cisco ASA
“Do I Know This Already?” QuizFoundation TopicsBasic Device SettingsConfiguring DNS ResolutionFile System ManagementManaging Software and Feature ActivationConfiguring Management AccessControlling Management Access with AAAConfiguring Monitoring Using SNMPTroubleshooting Remote Management AccessCisco ASA Password RecoveryExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 6. Recording ASA Activity
“Do I Know This Already?” QuizFoundation TopicsSystem TimeManaging Event and Session LoggingConfiguring Event and Session LoggingVerifying Event and Session LoggingTroubleshooting Event and Session LoggingExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 7. Using Address Translation
“Do I Know This Already?” QuizFoundation TopicsUnderstanding How NAT WorksImplementing NAT in ASA Software Versions 8.2 and EarlierImplementing NAT in ASA Software Versions 8.3 and LaterExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 8. Controlling Access Through the ASA
“Do I Know This Already?” QuizFoundation TopicsUnderstanding How Access Control WorksState TablesUnderstanding Interface Access RulesDefault Access RulesThe Global ACLConfiguring Interface Access RulesTime-Based Access RulesVerifying Interface Access RulesOrganizing Access Rules Using Object GroupsVerifying Object GroupsConfiguring and Verifying Other Basic Access ControlsTroubleshooting Basic Access ControlExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 9. Inspecting Traffic
“Do I Know This Already?” QuizFoundation TopicsUnderstanding the Modular Policy FrameworkConfiguring the MPFConfiguring a Policy for Inspecting OSI Layers 3 and 4Configuring Dynamic Protocol InspectionConfiguring a Policy for Inspecting OSI Layers 5–7Detecting and Filtering Botnet TrafficUsing Threat DetectionExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 10. Using Proxy Services to Control Access
“Do I Know This Already?” QuizFoundation TopicsUser-Based (Cut-Through) Proxy OverviewAAA on the ASAUser-Based Proxy Preconfiguration Steps and Deployment GuidelinesDirect HTTP Authentication with the Cisco ASADirect Telnet AuthenticationConfiguration Steps of User-Based ProxyConfiguring User AuthenticationConfiguring Authentication Prompts and TimeoutsConfiguring User AuthorizationConfiguring User Session AccountingTroubleshooting Cut-Through Proxy OperationsUsing Proxy for IP Telephony and Unified TelePresenceExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 11. Handling Traffic
“Do I Know This Already?” QuizFoundation TopicsHandling Fragmented TrafficPrioritizing TrafficControlling Traffic BandwidthExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 12. Using Transparent Firewall Mode
“Do I Know This Already?” QuizFoundation TopicsFirewall Mode OverviewConfiguring Transparent Firewall ModeControlling Traffic in Transparent Firewall ModeUsing ARP InspectionDisabling MAC Address LearningExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 13. Creating Virtual Firewalls on the ASA
“Do I Know This Already?” QuizFoundation TopicsCisco ASA Virtualization OverviewVirtual Firewall Deployment GuidelinesConfiguration Tasks OverviewConfiguring Security ContextsVerifying Security ContextsManaging Security ContextsConfiguring Resource ManagementVerifying Resource ManagementTroubleshooting Security ContextsExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 14. Deploying High Availability Features
“Do I Know This Already?” QuizFoundation TopicsASA Failover OverviewConfiguring Active-Standby Failover ModeConfiguring Active-Active Failover ModeTuning Failover OperationVerifying Failover OperationLeveraging Failover for a Zero Downtime UpgradeExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 15. Integrating ASA Service Modules
“Do I Know This Already?” QuizFoundation TopicsCisco ASA Security Services Modules OverviewInstalling the ASA AIP-SSM and AIP-SSCIntegrating the ASA CSC-SSMExam Preparation TasksReview All Key TopicsDefine Key TermsCommand Reference to Check Your Memory
Chapter 16. Traffic Analysis Tools
“Do I Know This Already?” QuizFoundation TopicsTesting Network ConnectivityUsing Packet TracerUsing Packet CaptureSummaryExam Preparation TasksReview All Key TopicsCommand Reference to Check Your Memory
Chapter 17. Final Preparation
Tools for Final PreparationSuggested Plan for Final Review/StudySummary
Appendix A. Answers to the “Do I Know This Already?” Quizzes
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13Chapter 14Chapter 15Chapter 16
Appendix B. CCNP Security 642-618 FIREWALL Exam Updates: Version 1.0
Always Get the Latest at the Companion WebsiteTechnical Content
Glossary of Key Terms
ABCDEFG–HI–KLMNOP-QRSTU–VW–Z
Index

Content preview from CCNP Security FIREWALL 642-618 Official Cert Guide

Chapter 9. Inspecting Traffic

This chapter covers the following topics:

• Understanding the Modular Policy Framework: This section provides an overview of a flexible and organized method you can use to configure security policies for a variety of Cisco ASA features.

• Configuring the MPF: This section explains the modular approach to configuring and enforcing security policies. Traffic can be matched with one type of policy module and acted on within another policy module. The whole hierarchy of policies is then applied to firewall interfaces and traffic inspection.

• Configuring a Policy for Inspecting OSI Layers 3 and 4: This section explains how you can leverage the MPF to define security policies that operate on Layer 3 (IP header) and Layer ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CCNP Security SISAS 300-208 Official Cert Guide

Publisher Resources

ISBN: 9780132979429Purchase book Companion Web site Companion Web site

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

CCNP Security FIREWALL 642-618 Official Cert Guide

by David Hucaby, Dave Garneau, Anthony Sequeira

Chapter 9. Inspecting Traffic

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.