Chapter 10

Security

This chapter covers the following topics:

  • Infrastructure Security: This section covers security at the infrastructure and device level, with the associated network design implications.

  • Perimeter Security and Intrusion Prevention: This section covers protecting the perimeter and discusses the different firewall deployment models and network designs.

  • Network Control and Identity Management: This section covers network control and identity management, with an emphasis on the corresponding 802.1X capabilities and their network design characteristics and requirements.

This chapter builds on what we covered in Chapter 4, “Security Is Pervasive,” where we focused on security design (the “why” a modern network needs an overarching ...

Get Cisco Certified Design Expert (CCDE 400-007) Official Cert Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.