CCNP Security FIREWALL 642-617 Official Cert Guide > Using Transparent Firewall Mode

Table of Contents

Download Safari Books Online apps: Apple iOS | Android

Entire Site

Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

This Book

CCNP Security FIREWALL 642-617 Official Cert Guide

Search

About the Authors

About the Technical Reviewers

Acknowledgments

Icons Used in This Book

Introduction

Ch. 1. Cisco ASA Adaptive Security Appliance Overview

Ch. 2. Working with a Cisco ASA

Ch. 3. Configuring ASA Interfaces

Ch. 4. Configuring IP Connectivity

Ch. 5. Managing a Cisco ASA

Ch. 6. Recording ASA Activity

Ch. 7. Using Address Translation

Ch. 8. Controlling Access Through the ASA

Ch. 9. Inspecting Traffic

Ch. 10. Using Proxy Services to Control Access

Ch. 11. Handling Traffic

Ch. 12. Using Transparent Firewall Mode

“Do I Know This Already?” Quiz

Foundation Topics

Firewall Mode Overview

Configuring Transparent Firewall Mode

Controlling Traffic in Transparent Firewall Mode

Using ARP Inspection

Disabling MAC Address Learning

Exam Preparation Tasks

Ch. 13. Creating Virtual Firewalls on the ASA

Ch. 14. Deploying High Availability Features

Ch. 15. Integrating ASA Service Modules

Ch. 16. Final Preparation

Appx. A. Answers to the “Do I Know This Already?” Quizzes

Appx. B. CCNP Security 642-617 FIREWALL Exam Updates: Version 1.0

Appx. C. Traffic Analysis Tools

Glossary

Index

Chapter 12. Using Transparent Firewall Mode

This chapter covers the following topics:

Firewall Mode Overview: This section provides an overview of the two firewall modes that an ASA can use.
Configuring Transparent Firewall Mode: This section covers the configuration steps necessary to use transparent firewall mode.
Controlling Traffic in Transparent Firewall Mode: This section explains how to use access lists to control the movement of traffic when an ASA is configured for transparent firewall mode.
Using ARP Inspection: This section covers the feature that can be used to inspect ARP replies to prevent ARP spoofing attacks.
Disabling MAC Address Learning: This section discusses how to disable MAC address learning to prevent MAC address spoofing attacks that can confuse or overwhelm an ASA in transparent firewall mode.

The Cisco Adaptive Security Appliance (ASA) can operate in one of two firewall modes. This chapter explains the concepts behind routed firewall mode, operating at Layer 3, and transparent mode, operating at Layer 2. In addition, this chapter covers how to configure and use transparent mode and how to prevent some attacks on it.

You are currently reading a PREVIEW of this book.

Get instant access to over
$1 million worth of books and videos.

Start a Free Trial