iv Contents at a Glance Introduction xvii Part I: Networking Security Fundamentals CHAPTER 1 CHAPTER 2 CHAPTER 3 Networking Security Concepts 1 13 Implementing Security Policies Using a Lifecycle Approach Building a Security Strategy for Borderless Networks 25 Part II: Protecting the Network Infrastructure CHAPTER 4 CHAPTER 5 CHAPTER 6 CHAPTER 7 CHAPTER 8 CHAPTER 9 Network Foundation Protection 33 39 Protecting the Network Infrastructure Using CCP Securing the Management Plane 53 77 Securing Management Access with AAA Securing the Data Plane on Catalyst Switches Securing the Data Plane in IPv6 Environments 103 119 Part III: Threat Control and Containment CHAPTER 10 Planning a Threat Control Strategy 127 131 CHAPTER 11 Configuring ACLs for Threat Mitigation CHAPTER 1 2 Configuring Zone-Based Firewalls CHAPTER 13 Configuring Cisco IOS IPS 153 171 Part IV: Secure Connectivity CHAPTER 14 VPNs and Cryptology 195 207 CHAPTER 15 Asymmetric Encryption and PKI CHAPTER 16 IPsec VPNs 213 223 CHAPTER 17 Configuring Site-to-Site VPNs Part V: Securing the Network Using the ASA CHAPTER 18 Introduction to the ASA CHAPTER 19 Introduction to ASDM 247 257 267 283 CHAPTER 20 Configuring Cisco ASA Basic Settings CHAPTER 21 Configuring Cisco ASA Advanced Settings CHAPTER 22 Configuring Cisco ASA SSL VPNs APPENDIX A Create Your Own Journal Here 319 335