Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
CCNP Security IPS 642-627 Official Cert Guide
David Burns
Odunayo Adesina, CCIE No. 26695
Keith Barker, CCIE No. 6783
Copyright© 2012 Pearson Education, Inc.
Published by:
Cisco Press
800 East 96th Street
Indianapolis, IN 46240 USA
All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review.
Printed in the United States of America 1 2 3 4 5 6 7 8 9 0
First Printing October 2011
Library of Congress Cataloging-in-Publication data is on file.
ISBN-13: 978-1-58714-255-0
This book is designed to provide information about selected topics for the CCNP Security IPS 642-627 exam. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied.
The information is provided on an “as is” basis. The authors, Cisco Press, and Cisco Systems, Inc., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it.
The opinions expressed in this book belong to the authors and are not necessarily those of Cisco Systems, Inc.
At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community.
Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through e-mail at feedback@ciscopress.com. Please make sure to include the book title and ISBN in your message.
We greatly appreciate your assistance.
The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales, which may include electronic versions and/or custom covers and content particular to your business, training goals, marketing focus, and branding interests. For more information, please contact:
U.S. Corporate and Government Sales
1-800-382-3419
corpsales@pearsontechgroup.com
For sales outside the United States, please contact:
International Sales
international@pearsoned.com
All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Cisco Press or Cisco Systems, Inc. cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.
Publisher: Paul Boger
Associate Publisher: Dave Dusthimer
Executive Editor: Brett Bartow
Managing Editor: Sandra Schroeder
Development Editor: Kimberley Debus
Senior Project Editor: Tonya Simpson
Copy Editor: John Edwards
Manager, Global Certification: Erik Ullanderson
Business Operation Manager, Cisco Press: Anand Sundaram
Technical Editor: Brandon Anastasoff
Proofreader: Sarah Kearns
Indexer: Tim Wright
Compositor: Mark Shirar
Book Designer: Gary Adair
Americas Headquarters
Cisco Systems, Inc.
San Jose, CA
Asia Pacific Headquarters
Cisco Systems (USA) Pte. Ltd.
Singapore
Europe Headquarters
Cisco Systems International BV
Amsterdam, The Netherlands
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco Website at www.cisco.com/go/offices.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar; Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDR CCIE, CCIR CCNA, CCNR CCSR CCVR Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center; Fast Step Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise. The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)
“To fight and conquer in all your battles is not supreme excellence; supreme excellence consists in breaking the enemy’s resistance without fighting.”
—Sun Tzu, the Art of War
From David:
This book is dedicated to my wife and best friend in life, Lisa, whose love, encouragement, and support continue to drive my passion to learn, achieve, and serve; to our two boys, Will and Christian, who have an unending curiosity to learn, grow, and challenge the norm; to my extended family for their support, encouragement, and inspiration all these years; and finally to my fellow soldiers (present, past, and future) for their selfless service, integrity, honor, pride, and drive to do the right thing to protect us all—God Bless!
From Odunayo:
This book is dedicated to God for his many blessings; to my loving wife, Aramide, who always gives me great encouragement and support, especially as she did during the writing of this book; and to my parents, who have continually encouraged my brother, sister, cousins, and me and our families, in everything we’ve done. Also to the loving memories of my aunt, Olayemi Akere, and cousin, Korede Akindele, who were supportive and instrumental to my many successes.