book

Network Security, Firewalls, and VPNs

Name: Network Security, Firewalls, and VPNs
Author: J. Michael Stewart
ISBN: 9780763791315

by J. Michael Stewart

September 2010

Intermediate to advanced

482 pages

15h 52m

English

Jones & Bartlett Learning

Read now

Unlock full access

Copyright
Preface
Purpose of This BookLearning FeaturesAudienceAbout the Author
ONE. Foundations of Network Security
1. Fundamentals of Network Security
What Is Network Security?What Is Trust?Who—or What—Is Trustworthy?What Are Security Objectives?What Are You Trying to Protect?Seven Domains of a Typical IT InfrastructureGoals of Network SecurityHow Can You Measure the Success of Network Security?Why Are Written Network Security Policies Important?Planning for the WorstWho Is Responsible for Network Security?Examples of Network Infrastructures and Related Security ConcernsWorkgroupsSOHO NetworksClient/Server NetworksLAN Versus WANThin Clients and Terminal ServicesRemote Control, Remote Access, and VPNBoundary NetworksStrengths and Weaknesses of Network DesignEnhancing the Security of Wired Versus Wireless LAN InfrastructuresInternal and External Network IssuesCommon Network Security Components Used to Mitigate ThreatsHosts and NodesIPv4 Versus IPv6FirewallVPNProxyNATRouters, Switches, and BridgesDNSDirectory ServicesIDS/IPSNACCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 1 ASSESSMENT
2. Firewall Fundamentals
What Is a Firewall?What Firewalls Cannot DoWhy Do You Need a Firewall?What Are Zones of Risk?How Firewalls Work and What Firewalls DoTCP/IP BasicsOSI ModelSub-ProtocolsHeaders and PayloadsAddressingTypes of FirewallsIngress and Egress FilteringTypes of FilteringStatic Packet FilteringStateful Inspection and Dynamic Packet FilteringNetwork Address Translation (NAT)Application ProxyCircuit ProxyContent FilteringSoftware Versus Hardware FirewallsIPv4 Versus IPv6 FirewallsDual-Homed and Triple-Homed FirewallsPlacement of FirewallsCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 2 ASSESSMENT
3. VPN Fundamentals
What Is a VPN?What Are the Benefits of Deploying a VPN?What Are the Limitations of a VPN?What Are Effective VPN Policies?VPN Deployment Models and ArchitectureEdge RouterCorporate FirewallVPN ApplianceRemote AccessSite-to-SiteHost-to-HostExtranet AccessTunnel Versus Transport ModeThe Relationship Between Encryption and VPNsSymmetric CryptographyAsymmetric CryptographyHashingEstablishing VPN Connections with CryptographyDigital CertificatesWhat Is VPN Authentication?VPN AuthorizationCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 3 ASSESSMENT
4. Network Security Threats and Issues
Hacker MotivationFavorite Targets of HackersThreats from Internal Personnel and External EntitiesThe Hacking ProcessReconnaissanceScanningEnumerationAttackingPost-Attack ActivitiesFall Back AttacksCommon IT Infrastructure ThreatsHardware Failures and Other Physical ThreatsNatural DisastersAccidents and Intentional ConcernsMalicious Code (Malware)Fast Growth and OveruseWireless Versus WiredEavesdroppingReplay AttacksInsertion AttacksFragmentation Attacks, Buffer Overflows, and XSS AttacksFragmentation AttacksBuffer OverflowsXSS (Cross-Site Scripting) AttacksMan-in-the-Middle, Session Hijacking, and Spoofing AttacksMan-in-the-Middle AttacksSession HijackingSpoofing AttacksCovert ChannelsNetwork and Resource Availability ThreatsDenial of Service (DoS)Distributed Denial of Service (DDoS)Hacker ToolsSocial EngineeringCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 4 ASSESSMENT
TWO. Technical Overview of Network Security, Firewalls, and VPNs
5. Network Security Implementation
Seven Domains of a Typical IT InfrastructureNetwork Design and Defense-in-DepthProtocols and TopologiesCommon Types of AddressingControlling Communication PathwaysHardening SystemsEquipment SelectionAuthentication, Authorization, and AccountingCommunication EncryptionHosts: Local Only or Remote and MobileRedundancyNode SecurityClientsServersRoutersSwitchesFirewalls and ProxiesCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 5 ASSESSMENT
6. Network Security Management
Network Security Management Best PracticesFail-Secure, Fail-Open, Fail-Close OptionsPhysical SecurityWatching for CompromiseIncident ResponseTrapping Intruders and ViolatorsWhy Containment Is ImportantImposing CompartmentalizationUsing Honeypots, Honeynets, and Padded CellsEssential Host Security ControlsBackup and RecoveryUser Training and AwarenessNetwork Security Management ToolsSecurity ChecklistNetwork Security TroubleshootingCompliance AuditingSecurity AssessmentConfiguration ScansVulnerability ScanningPenetration TestingPost-Mortem Assessment ReviewCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 6 ASSESSMENT

7. Exploring the Depths of Firewalls
Firewall RulesAuthentication and AuthorizationMonitoring and LoggingUnderstanding and Interpreting Firewall Logs and AlertsIntrusion DetectionLimitations of FirewallsImproving PerformanceThe Downside of Encryption with FirewallsFirewall EnhancementsManagement InterfacesCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 7 ASSESSMENT
8. Firewall Deployment Considerations
What Should You Allow and What Should You Block?Common Security Strategies for Firewall DeploymentsSecurity Through ObscurityLeast PrivilegeSimplicityDefense-in-DepthDiversity of DefenseChoke PointWeakest LinkFail-SafeForced Universal ParticipationEssential Elements of a Firewall PolicySoftware and Hardware Options for FirewallsBenefit and Purpose of Reverse ProxyUse and Benefit of Port-ForwardingConsiderations for Selecting a Bastion Host OSConstructing and Ordering Firewall RulesEvaluating Needs and Solutions in Designing SecurityWhat Happens When Security Gets in the Way of Doing Business?CHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 8 ASSESSMENT
9. Firewall Management and Security Concerns
Best Practices for Firewall ManagementSecurity Measures in Addition to a FirewallSelecting the Right Firewall for Your NeedsThe Difference Between Buying and Building a FirewallMitigating Firewall Threats and ExploitsConcerns Related to Tunneling Through or Across a FirewallTesting Firewall SecurityImportant Tools for Managing and Monitoring a FirewallTroubleshooting FirewallsProper Firewall Implementation ProcedureResponding to IncidentsCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 9 ASSESSMENT
10. Using Common Firewalls
Individual and Small Office/Home Office (SOHO) Firewall OptionsUses for a Host Software FirewallExamples of Software Firewall ProductsUsing Windows 7's Host Software FirewallUsing a Linux Host Software FirewallManaging the Firewall on an ISP Connection DeviceConverting a Home Router into a FirewallCommercial Software Network FirewallsOpen-Source Software Network FirewallsAppliance FirewallsVirtual FirewallsSimple Firewall TechniquesCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 10 ASSESSMENT
11. VPN Management
VPN Management Best PracticesDeveloping a VPN PolicyDeveloping a VPN Deployment PlanBypass DeploymentInternally Connected DeploymentDMZ-Based ImplementationVPN Threats and ExploitsCommercial or Open-Source VPNsDifferences Between Personal and Network VPNsBalancing Anonymity and PrivacyProtecting VPN Security to Support AvailabilityThe Importance of User TrainingVPN TroubleshootingCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 11 ASSESSMENT
12. VPN Technologies
Differences Between Software and Hardware SolutionsSoftware VPNsHardware VPNsDifferences Between Layer 2 and Layer 3 VPNsInternet Protocol Security (IPSec)Layer 2 Tunneling Protocol (L2TP)Secure Sockets Layer (SSL)/Transport Layer Security (TLS)SSL/TLS and VPNsSecure Shell (SSH) ProtocolEstablishing Performance and Stability for VPNsPerformanceStabilityUsing VPNs with Network Address Translation (NAT)Types of VirtualizationDesktop VirtualizationSSL VPN VirtualizationDifferences Between Internet Protocol (IP) Version 4 and Internet Protocol (IP) Version 6The TCP/IP Protocol SuiteIPv4 ChallengesIPv6IPSec and IPv6CHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 12 ASSESSMENT
THREE. Implementation, Resources, and the Future
13. Firewall Implementation
Constructing, Configuring, and Managing a FirewallSmoothWallExamining Your Network and Its Security NeedsWhat to Protect and WhyProtecting Information and ResourcesProtecting Clients and UsersPreserving PrivacyFirewall Design and Implementation GuidelinesSelecting a FirewallHardware Requirements for SmoothWallPlanning a Firewall Implementation with SmoothWallFirewalling a Big Organization: Application-Level Firewall and Package Filtering, a Hybrid SystemFirewalling a Small Organization: Packet Filtering or Application-Level Firewall, a Proxy ImplementationFirewalling in a Subnet ArchitectureInstalling a Firewall with SmoothWallConfiguring a Firewall with SmoothWallElements of Firewall DeploymentPerforming Testing with SmoothWallFirewall TroubleshootingAdditional SmoothWall FeaturesFirewall Implementation Best PracticesCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 13 ASSESSMENT
14. Real-World VPNs
Operating System-Based VPNsVPN AppliancesConfiguring a Typical VPN ApplianceClient-Side ConfigurationRemote Desktop ProtocolUsing Remote Control ToolsPerforming Remote AccessThe Technology for Remote UseChoosing Between IPSec and SSL Remote Access VPNsTerminal ServicesTS RemoteAppTS Web AccessMicrosoft DirectAccessDMZ, Extranet, and Intranet VPN SolutionsIntranet VPNsExtranet VPNsInternet Café VPNsOnline Remote VPN OptionsSecurityWake-on-LAN SupportFile SharingRemote PrintingMac SupportThe Tor ApplicationPlanning a VPN ImplementationRequirementsInstallationPerforming a RPM InstallInstall from the SourceStart OpenswanDeploymentTesting and TroubleshootingVPN Implementation Best PracticesCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 14 ASSESSMENT
15. Perspectives, Resources and the Future
What the Future Holds for Network Security, Firewalls, and VPNsThreatsFirewall CapabilitiesEncryptionAuthenticationMetricsFocusSecuring the CloudSecuring Mobile DevicesResources Sites for Network Security, Firewalls, and VPNsTools for Network Security, Firewalls, and VPNsCommercial Off-the-Shelf (COTS) SoftwareOpen-Source Applications and ToolsThe Impact of Ubiquitous Wireless ConnectivityPotential Uses of Security TechnologiesWhat Happens When There Is No Perimeter?Specialized Firewalls AvailableIntrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)Effect of Honeypots, Honeynets, and Padded CellsEmerging Network Security TechnologiesIP Version 6VPNs, Firewalls, and VirtualizationSteganographyAnti-ForensicsCHAPTER SUMMARYKEY CONCEPTS AND TERMSCHAPTER 15 ASSESSMENT
A. Answer Key
B. Standard Acronyms
Glossary of Key Terms
References

Content preview from Network Security, Firewalls, and VPNs

Chapter 6. Network Security Management

COMPUTER NETWORK SECURITY is not a final solution or a task to be completed. Security is a continuous journey. Safeguards and infrastructures that worked before might offer little or no protection against future attacks. You must constantly develop and deploy new defenses against new exploits. This vigilance is the essence of network security management.

Network security management strives to maintain established security, adjust the infrastructure to future threats, and respond to breaches in a timely manner. Using a variety of techniques and tools, including incident response, host security, backup and recovery, checklists, and security assessment, network security management is a complex, but essential ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services, Third Edition

Publisher Resources

ISBN: 9780763791308

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Network Security, Firewalls, and VPNs

by J. Michael Stewart

Chapter 6. Network Security Management

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.