. 31 Days Before Your CCNA Security Exam (Digital Study Guide) An Interactive Day-By-Day Review Guide for the IINS 210-260 Certification Exam!31 Days Before Your CCNA Security Exam provides you with a personable and practical way to study for the IINS 210-260 certification exam. In a conversational tone, the author breaks down all the exam topics into 31 daily review sessions using short summaries, lists, tables, examples, and graphics. The format is designed to empower you to fit exam preparation into an otherwise busy schedule31 Days Before Your CCNA Security Exam offers you an engaging and practical way to understand the certification process, commit to taking the CCNA Security IINS 210-260 certification exam, and finish your preparation using a variety of Primary and Supplemental study resources.The IINS 210-260 exam tests your knowledge of secure network infrastructure, core security concepts, secure access, VPN encryption, firewalls, intrusion prevention, web/email content security, and endpoint security. It also tests your skills for installing, troubleshooting, and monitoring secure networks to maintain the integrity, confidentiality, and availability of data and devices.Sign up for the IINS 210-260 exam and use the books day-by-day guide and checklist to organize, prepare, and review. Each day in this guide breaks down an exam topic into a manageable bit of information to review using short summaries. A Study Resources section provides you with a quick reference for locating more in-depth treatment of a days topics within the Primary and Supplemental resources.The features of the book empower you to fit exam preparation into a busy schedule:· A visual calendar summarizing each days study topic· A checklist providing advice for preparation activities leading up to the exam· A description of the CCNA Security IINS 210-260 exam organization and sign-up process· Strategies from the author to be mentally, organizationally, and physically prepared for exam day· A conversational tone, which makes your study time more enjoyableContentsThree sample lessons (Days 31, 30, and 29) are available for viewing online, exactly as they appear in the full Digital Study Guide with complete video walkthroughs, exercises, and interactive quizzes (HTML5 browser required).IntroductionDay 31. Common Security PrinciplesDay 30. Common Security ThreatsDay 29. Cryptographic TechnologiesDay 28. PKI and Network Security ArchitecturesDay 27. Secure Management SystemsDay 26. AAA ConceptsDay 25. TACACS+ and RADIUS ImplementationDay 24. 802.1XDay 23. BYODDay 22. IPsec TechnologiesDay 21. Clientless Remote-Access VPNDay 20. AnyConnect Remote Access VPNDay 19. Site-to-Site VPNDay 18. VPN Advanced TopicsDay 17. Secure Device AccessDay 16. Secure Routing ProtocolsDay 15. Control Plane SecurityDay 14. Layer 2 Infrastructure SecurityDay 13. Layer 2 Protocols SecurityDay 12. VLAN SecurityDay 11. Firewall TechnologiesDay 10. Cisco ASA NAT ImplementationDay 9. Cisco IOS Zone-Based Policy FirewallDay 8. Cisco ASA Firewall ConceptsDay 7. ASA Firewall ConfigurationDay 6. IDS/IPS ConceptsDay 5. IDS/IPS TechnologiesDay 4. Email-based Threat MitigationDay 3. Web-based Threat MitigationDay 2. Endpoint ProtectionDay 1. CCNA Security Skills Review and PracticeExam DayPost-Exam Information

lgrsnf/F:\!upload\_books\oreilly - 31 Days Before Your CCNA Security Exam A Day-By-Day Review Guide for the IINS 210-260 Certification Exam.epub

nexusstc/31 Days Before Your CCNA Security Exam: A Day-By-Day Review Guide for the IINS 210-260 Certification Exam/17b74d3db751b60b80270a0f9b80fcc1.epub

zlib/no-category/Patrick Gargano/31 Days Before Your CCNA Security Exam: A Day-By-Day Review Guide for the IINS 210-260 Certification Exam_5410519.epub

Cisco ASA: All-in-one Next-Generation Firewall, IPS, and VPN Services (3rd Edition)

Cisco ASA : all-in-one firewall, IPS, Anti-X, and VPN adaptive security appliance

Cisco ASA : all-in-one next-generation firewall, IPS, and VPPN services

CCNA Security Course Booklet Version 2 (Course Booklets)

CCNA Security Lab Manual Version 2 (Lab Companion)

CCNA Security (210-260) Portable Command Guide

CCNA Security 210-260 : official cert guide

CCNA Security 200-260 : official cert guide

Frahim, Jazib, Santos, Omar, Ossipov, Andrew

Jazib Frahim; Omar Santos; Andrew Ossipov

Cisco Networking Cisco Networking Academy

Cisco Networking Academy Program

Bob Vachon; Cisco Systems, Inc

Santos, Omar, Stuppi, John

Omar Santos; John Stuppi

Gargano, Patrick

Vachon, Bob

Globe Fearon Educational Publishing

Longman Publishing

Cisco Electronic

Cisco Academic

Cengage Gale

Cisco Trade

Cisco Press networking technology series, Third edition, Indianapolis, IN, 2014

Cisco Networking Academy Program series, Indianapolis, IN, USA, 2016

Cisco Networking Academy Program series, Indianapolis, Indiana, 2016

Pearson Education Limited (US titles), Indianapolis, Indiana, 2016

Pearson Education Limited (US titles), [N.p.], 2015

Second edition, Indianapolis, Indiana, USA, 2016

Official cert guide series, Indianapolis, 2015

Online-Ausg, Indianapolis, Indiana, 2016

United States, United States of America

Official cert guide series, s.l, 2015

Pearson Education (US), [N.p.], 2014

2nd ed, Indianapolis, Ind, 2010

3rd ed, Indianapolis, IN, ©2014

Indianapolis, IN, 2015

Hoboken, NJ, 2016

1, 2015-11-09

May 10, 2014

Apr 14, 2016

Sep 11, 2015

Jul 03, 2016

Dec 14, 2015

1, PS, 2015

1, PT, 2016

2, 2016

lg2474994

{"edition":"1","isbns":["0134423828","1587205785","9780134423821","9781587205781"],"last_page":352,"publisher":"Cisco Press"}

Source title: CCNA Security (210-260) Portable Command Guide

Source title: 31 Days Before Your CCNA Security Exam: A Day-By-Day Review Guide for the IINS 210-260 Certification Exam

Source title: CCNA Security Lab Manual Version 2 (Lab Companion)

Content: Introduction xxii Digital Study Guide xxvi Day 31: Common Security Principles 1 CCNA Security 210-260 IINS Exam Topics 1 Key Topics 1 Confidentiality, Integrity, and Availability (CIA) 1 SIEM 1 Common Network Security Terms 2 Security Zones 2 Study Resources 4 Day 30: Common Security Threats 5 CCNA Security 210-260 IINS Exam Topics 5 Key Topics 5 Network Attacks 5 Reconnaissance Attacks 5 Access Attacks 5 DoS and DDoS Attacks 6 Social Engineering 7 Types 7 Defenses 8 Malware 8 Data Loss 9 Study Resources 10 Day 29: Cryptographic Technologies 11 CCNA Security 210-260 IINS Exam Topics 11 Key Topics 11 CIA Triad 11 Key Exchange and Management 11 Hash Algorithms 12 Well-known Hash Functions 12 Authentication Using Hashing 13 Hashing in Cisco Products 14 Symmetric and Asymmetric Encryption 15 Encryption Overview 15 Symmetric Encryption Algorithms 15 Asymmetric Encryption Algorithms 16 Digital Signatures and RSA Certificates 18 Study Resources 19 Day 28: PKI and Network Security Architectures 21 CCNA Security 210-260 IINS Exam Topics 21 Key Topics 21 Public Key Infrastructure 21 PKI Terminology, Components, and Classes of Certificates 22 PKI Topologies 23 PKI Standards 24 PKI Operations 25 Enrollment and Revocation 27 Network Architectures and Topologies 28 Campus-Area Network (CAN) 28 WAN and Branch/SOHO 29 Data Center 31 Cloud and Virtual Networks 31 Study Resources 33 Day 27: Secure Management Systems 35 CCNA Security 210-260 IINS Exam Topics 35 Key Topics 35 In-band and Out-of-band Management 35 Management Plane Security 36 Access Security 36 SSH/HTTPS 38 Syslog 38 Simple Network Management Protocol (SNMP) 39 Network Time Protocol (NTP) 42 Secure Copy Protocol (SCP) 43 Study Resources 44 Day 26: AAA Concepts 45 CCNA Security 210-260 IINS Exam Topics 45 Key Topics 45 AAA 45 RADIUS and TACACS+ 46 RADIUS 46 TACACS+ 47 ACS and ISE 48 ACS 49 ISE 49 Study Resources 50 Day 25: TACACS+ and RADIUS Implementation 51 CCNA Security 210-260 IINS Exam Topics 51 Key Topics 51 Server-based AAA Authentication 51 Server-based AAA Authorization 53 Server-based AAA Accounting 54 Server-based AAA Verification and Troubleshooting 55 Study Resources 58 Day 24: 802.1X 61 CCNA Security 210-260 IINS Exam Topics 61 Key Topics 61 802.1X 61 Terminology and Concepts 61 Configuration and Verification 63 Study Resources 65 Day 23: BYOD 67 CCNA Security 210-260 IINS Exam Topics 67 Key Topics 67 BYOD Architecture 67 BYOD Management 69 Study Resources 72 Day 22: IPsec Technologies 73 CCNA Security 210-260 IINS Exam Topics 73 Key Topics 73 VPNs 73 IPsec Framework 76 IPsec Protocols 77 AH 77 ESP 78 IPsec Modes of Operations 78 Confidentiality 79 Data Integrity 79 Origin Authentication 80 Key Management 80 Suite B Cryptographic Standard 81 IKE 81 IKEv1 Phase 1 82 IKEv1 Phase 2 83 IKEv2 83 Study Resources 84 Day 21: Clientless Remote-Access VPN 85 CCNA Security 210-260 IINS Exam Topics 85 Key Concepts 85 Clientless SSL VPN Concepts 85 Clientless SSL VPN Configuration 87 Task 1: Launch Clientless SSL VPN Wizard from ASDM 88 Task 2: Configure the SSL VPN URL and Interface 88 Task 3: Configure User Authentication 89 Task 4: Configure User Group Policy 90 Task 5: Configure Bookmarks 90 Clientless SSL VPN Verification 95 Study Resources 97 Day 20: AnyConnect Remote Access VPN 99 CCNA Security 210-260 IINS Exam Topics 99 Key Topics 99 AnyConnect SSL VPN Concepts 99 SSL VPN Server Authentication 100 SSL VPN Client Authentication 100 SSL VPN Client IP Address Assignment 100 AnyConnect SSL VPN Configuration and Verification 101 Phase 1: Configure Cisco ASA for Cisco AnyConnect 101 Task 1: Connection Profile Identification 101 Task 2: VPN Protocols and Device Certificate 102 Task 3: Client Image 102 Task 4: Authentication Methods 103 Task 5: Client Address Assignment 103 Task 6: Network Name Resolution Servers 104 Task 7: Network Address Translation Exemption 104 Task 8: AnyConnect Client Deployment and Summary 105 Phase 2: Configure the Cisco AnyConnect VPN Client 106 Phase 3: Verify AnyConnect Configuration and Connection 108 Study Resources 111 Day 19: Site-to-Site VPN 113 CCNA Security 210-260 IINS Exam Topics 113 Key Topics 113 IPsec Negotiation 113 Cisco IOS CLI-based Site-to-Site IPsec VPN 114 Configuration 115 Step 1: ACL Compatibility 115 Step 2: IKE Phase 1-ISAKMP Policy 115 Step 3: IKE Phase 2-IPsec Transform Set 117 Step 4: Crypto ACLs 117 Step 5: IPsec Crypto Map 118 Verification 119 Cisco ASA Site-to-Site IPsec VPN 122 Configuration 123 Step 1: Launch the ASDM Site-to-Site VPN Wizard 123 Step 2: Peer Device Identification 123 Step 3: Traffic to Protect 124 Step 4: Security 124 Step 5: NAT Exempt 125 Verification 125 Study Resources 128 Day 18: VPN Advanced Topics 131 CCNA Security 210-260 IINS Exam Topics 131 Key Topics 131 Hairpinning and Client U-Turn 131 Split Tunneling 132 Always-on VPN 134 NAT Traversal 134 Endpoint Posture Assessment 135 Study Resources 136 Day 17: Secure Device Access 137 CCNA Security 210-260 IINS Exam Topics 137 Key Topics 137 Cisco IOS Authorization with Privilege Levels 137 Authorization with Role-Based CLI 138 Cisco IOS Resilient Configuration 139 Cisco IOS File Authenticity 140 Study Resources 142 Day 16: Secure Routing Protocols 143 CCNA Security 210-260 IINS Exam Topics 143 Key Topics 143 Routing Protocol Authentication 143 OSPF MD5 Authentication 144 MD5 Authentication with Key Chain 144 MD5 Authentication Without Key Chain 145 OSPF SHA Authentication 146 Study Resources 148 Day 15: Control Plane Security 149 CCNA Security 210-260 IINS Exam Topics 149 Key Topics 149 Functional Planes of the Network 149 Control Plane Policing 150 Control Plane Protection 151 Study Resources 152 Day 14: Layer 2 Infrastructure Security 153 CCNA Security 210-260 IINS Exam Topics 153 Key Topics 153 Common Layer 2 Attacks 153 STP Attacks 153 ARP Spoofing 155 MAC Spoofing 156 CAM Table Overflows 157 CDP/LLDP Reconnaissance 157 VLAN Hopping 157 DHCP Spoofing 158 Study Resources 159 Day 13: Layer 2 Protocols Security 161 CCNA Security 210-260 IINS Exam Topics 161 Key Topics 161 DHCP Snooping 161 Dynamic ARP Inspection 163 IP Source Guard 164 Port Security 165 STP Security Mechanisms 167 PortFast 167 BPDU Guard 168 Root Guard 168 Loop Guard 168 Study Resources 169 Day 12: VLAN Security 171 CCNA Security 210-260 IINS Exam Topics 171 Key Topics 171 Private VLANs 171 PVLAN Edge 174 ACLs on Switches 175 PACL Configuration 176 VACL Configuration 177 Native VLAN 178 Study Resources 180 Day 11: Firewall Technologies 181 CCNA Security 210-260 IINS Exam Topics 181 Key Topics 181 Firewall Overview 181 Packet Filtering 183 Proxy and Application Firewalls 185 Stateful Firewalls 187 Next-Generation Firewalls 188 Personal Firewall 189 Study Resources 189 Day 10: Cisco ASA NAT Implementation 191 CCNA Security 210-260 IINS Exam Topics 191 Key Topics 191 NAT Fundamentals 191 NAT on Cisco ASA 193 Static NAT 195 Dynamic NAT 198 Dynamic PAT 201 Policy NAT 203 Study Resources 208 Day 9: Cisco IOS Zone-Based Policy Firewall 209 CCNA Security 210-260 IINS Exam Topics 209 Key Topics 209 ZPF Concepts 209 ZPF Zones and Zone Pairs 210 Introduction to C3PL 211 Class Maps 212 Policy Maps 212 Service Policy 213 Default Policies and Traffic Flows 213 ZPF Configuration and Verification 214 Configuring Class Maps 214 Configuring Policy Maps 215 Configuration and Verification 216 Study Resources 218 Day 8: Cisco ASA Firewall Concepts 219 CCNA Security 210-260 IINS Exam Topics 219 Key Topics 219 Cisco ASA Family 219 ASA Features and Services 221 ASA Deployments 222 ASA High Availability 223 ASA Contexts 225 Study Resources 226 Day 7: ASA Firewall Configuration 227 CCNA Security 210-260 IINS Exam Topics 227 Key Topics 227 ASA Default Configuration 227 ASA Management Access 229 ASA Interfaces 230 ASA Access Rules 232 ASA Objects and Object Groups 234 ASA Modular Policy Framework 240 Study Resources 244 Day 6: IDS/IPS Concepts 245 CCNA Security 210-260 IINS Exam Topics 245 Key Topics 245 IDS vs. IPS 245 Host-based vs. Network-based IPS 247 IPS Deployment Options 248 IPS Placement 249 IPS Terminology 250 Study Resources 251 Day 5: IDS/IPS Technologies 253 CCNA Security 210-260 IINS Exam Topics 253 Key Topics 253 Detection Technologies 253 Signatures 254 Trigger Actions 255 Blacklisting 256 Next-Generation IPS with FirePOWER 256 Study Resources 257 Day 4: Email-based Threat Mitigation 259 CCNA Security 210-260 IINS Exam Topics 259 Key Topics 259 ESA Overview 259 ESA Deployment 260 ESA Features 263 Filtering Spam 263 Fighting Viruses and Malware 264 Email Data Loss Prevention 264 Advanced Malware Protection 264 ESA Mail Processing 265 Incoming Mail Processing 265 Outgoing Mail Processing 266 Study Resources 267 Day 3: Web-based Threat Mitigation 269 CCNA Security 210-260 IINS Exam Topics 269 Key Topics 269 Cisco WSA 269 Cisco CWS 272 Study Resources 274 Day 2: Endpoint Protection 275 CCNA Security 210-260 IINS Exam Topics 275 Key Topics 275 Endpoint Security Overview 275 Personal Firewalls 276 Antivirus 276 Antispyware 277 Antimalware 278 Data Encryption 279 Study Resources 280 Day 1: CCNA Security Skills Review and Practice 281 CCNA Security 210-260 IINS Exam Topics 281 Key Topics 281 CCNA Security Skills Practice 281 Introduction 281 Topology Diagram 281 Addressing Table 282 ISP Configuration 283 Implementation 283 Step 1: Cable the Network As Shown in the Topology 283 Step 2: Configure Initial Settings for R1_BRANCH 283 Step 3: Configure Initial Settings for HQ_SW 284 Step 4: Configure Initial Settings for HQ-ASA 285 Step 5: Configure Clientless SSL VPN 286 Step 6: Configure Site-to-Site IPsec VPN 286 Step 7: Configure a Zone-Based Policy Firewall 288 Answers to CCNA Security Skills Practice 289 Step 1: Cable the Network As Shown in the Topology 289 Step 2: Configure Initial Settings for R1_BRANCH 289 Step 3: Configure Initial Settings for HQ_SW 290 Step 4: Configure Initial Settings for HQ-ASA 291 Step 5: Configure Clientless SSL VPN 293 Step 6: Configure Site-to-Site IPsec VPN 294 Step 7: Configure a Zone-Based Policy Firewall 295 Exam Day 299 What You Need for the Exam 299 What You Should Receive After Completion 299 Summary 300 Post-Exam Information 301 Receiving Your Certificate 301 U.S. Government Recognition 301 Examining Certification Options 302 If You Failed the Exam 302 Summary 302 9781587205781 TOC 5/24/2016

CCNA Security 210-260 Official Cert Guide
CCNA Security 210-260 Official Cert Guide is a best-of-breed Cisco exam study guide that focuses specifically on the objectives for the CCNA Security Implementing Cisco Network Security (IINS) 210-260 exam. Cisco Security experts Omar Santos and John Stuppi share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.
CCNA Security 210-260 Official Cert Guide presents you with an organized test-preparation routine through the use of proven series elements and techniques. Do I Know This Already? quizzes open each chapter and enable you to decide how much time you need to spend on each section. A list of official exam topics makes referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.
The companion CD-ROM contains the powerful Pearson IT Certification Practice Test engine that enables you to focus on individual topic areas or take complete, timed exams. The assessment engine also tracks your performance and provides feedback on a chapter-by-chapter basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most. The CD also contains 90 minutes of video training on CCP, NAT, object groups, ACLs, port security on a Layer 2 switch, CP3L, and zone-based firewalls.
Well regarded for its level of detail, assessment features, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.
CCNA Security 210-260 Official Cert Guide is part of a recommended learning path from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit
The official study guide helps you master all the topics on the CCNA Security Implementing Cisco Network Security (IINS) 210-260 exam, including Security concepts and threats Implementing AAA using IOS and ISE Bring Your Own Device (BYOD) VPN technology and cryptography IP security Implementing IPsec site-to-site VPNs Implementing SSL remote-access VPNs using Cisco ASA Securing Layer 2 technologies Network Foundation Protection (NFP) Securing the management, data, and control planes Understand, implement, and configure Cisco firewall technologies Cisco IPS fundamentals Mitigation technologies for e-mail, web-based, and endpoint threats The CD-ROM contains two free, complete practice exams and 90 minutes of video training. Includes Exclusive Offer for 70% Off Premium Edition eBook and Practice Test
Pearson IT Certification Practice Test minimum system Windows XP (SP3), Windows Vista (SP2), Windows 7, or Windows 8; Microsoft .NET Framework 4.0 Client; Pentium class 1GHz processor (or equivalent); 512MB RAM; 650MB disk space plus 50MB for each downloaded practice exam; access to the Internet to register and download the exam databases
Cisco PressCisco Certification CCNA Security 210-260

Cisco® ASA All-in-One Next-Generation Firewall, IPS, and VPN Services, Third Edition Identify, mitigate, and respond to today's highly-sophisticated network attacks. Today, network attackers are far more sophisticated, relentless, and dangerous. In response, Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services has been fully updated to cover the newest techniques and Cisco technologies for maximizing end-to-end security in your environment. Three leading Cisco security experts guide you through every step of creating a complete security plan with Cisco ASA, and then deploying, configuring, operating, and troubleshooting your solution. Fully updated for today's newest ASA releases, this edition adds new coverage of ASA 5500-X, ASA 5585-X, ASA Services Module, ASA next-generation firewall services, EtherChannel, Global ACLs, clustering, IPv6 improvements, IKEv2, AnyConnect Secure Mobility VPN clients, and more. The authors explain significant recent licensing changes; introduce enhancements to ASA IPS; and walk you through configuring IPsec, SSL VPN, and NAT/PAT. You'll learn how to apply Cisco ASA adaptive identification and mitigation services to systematically strengthen security in network environments of all sizes and types. The authors present up-to-date sample configurations, proven design scenarios, and actual debugs–all designed to help you make the most of Cisco ASA in your rapidly evolving network. Jazib Frahim, CCIE® No. 5459 (Routing and Switching; Security), Principal Engineer in the Global Security Solutions team, guides top-tier Cisco customers in security-focused network design and implementation. He architects, develops, and launches new security services concepts. His books include Cisco SSL VPN Solutions and Cisco Network Admission Control, Volume II: NAC Deployment and Troubleshooting. Omar Santos, CISSP No. 463598, Cisco Product Security Incident Response Team (PSIRT) technical leader, leads and mentors engineers and incident managers in investigating and resolving vulnerabilities in Cisco products and protecting Cisco customers. Through 18 years in IT and cybersecurity, he has designed, implemented, and supported numerous secure networks for Fortune® 500 companies and the U.S. government. He is also the author of several other books and numerous whitepapers and articles. Andrew Ossipov, CCIE® No. 18483 and CISSP No. 344324, is a Cisco Technical Marketing Engineer focused on firewalls, intrusion prevention, and data center security. Drawing on more than 16 years in networking, he works to solve complex customer technical problems, architect new features and products, and define future directions for Cisco's product portfolio. He holds several pending patents. Understand, install, configure, license, maintain, and troubleshoot the newest ASA devices Efficiently implement Authentication, Authorization, and Accounting (AAA) services Control and provision network access with packet filtering, context-aware Cisco ASA next-generation firewall services, and new NAT/PAT concepts Configure IP routing, application inspection, and QoS Create firewall contexts with unique configurations, interfaces, policies, routing tables, and administration Enable integrated protection ag

Cisco®ASAAll-in-One Next-Generation Firewall, IPS, and VPN Services, Third EditionIdentify, mitigate, and respond to today's highly-sophisticated network attacks. Today, network attackers are far more sophisticated, relentless, and dangerous. In response, Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services has been fully updated to cover the newest techniques and Cisco technologies for maximizing end-to-end security in your environment. Three leading Cisco security experts guide you through every step of creating a complete security plan with Cisco ASA, and then deploying, configuring, operating, and troubleshooting your solution. Fully updated for today's newest ASA releases, this edition adds new coverage of ASA 5500-X, ASA 5585-X, ASA Services Module, ASA next-generation firewall services, EtherChannel, Global ACLs, clustering, IPv6 improvements, IKEv2, AnyConnect Secure Mobility VPN clients, and more. The authors explain significant recent licensing changes; introduce enhancements to ASA IPS; and walk you through configuring IPsec, SSL VPN, and NAT/PAT. You'll learn how to apply Cisco ASA adaptive identification and mitigation services to systematically strengthen security in network environments of all sizes and types. The authors present up-to-date sample configurations, proven design scenarios, and actual debugs-all designed to help you make the most of Cisco ASA in your rapidly evolving network. Jazib Frahim, CCIE®No. 5459 (Routing and Switching; Security), Principal Engineer in the Global Security Solutions team, guides top-tier Cisco customers in security-focused network design and implementation. He architects, develops, and launches new security services concepts. His books include Cisco SSL VPN Solutions and Cisco Network Admission Control, Volume II: NAC Deployment and Troubleshooting. Omar Santos, CISSP No. 463598, Cisco Product Security Incident Response Team (PSIRT) technical leader, leads and mentors engineers and incident managers in investigating and resolving vulnerabilities in Cisco products and protecting Cisco customers. Through 18 years in IT and cybersecurity, he has designed, implemented, and supported numerous secure networks for Fortune®500 companies and the U.S. government. He is also the author of several other books and numerous whitepapers and articles. Andrew Ossipov, CCIE® No. 18483 and CISSP No. 344324, is a Cisco Technical Marketing Engineer focused on firewalls, intrusion prevention, and data center security. Drawing on more than 16 years in networking, he works to solve complex customer technical problems, architect new features and products, and define future directions for Cisco's product portfolio. He holds several pending patents. Understand, install, configure, license, maintain, and troubleshoot the newest ASA devicesEfficiently implement Authentication, Authorization, and Accounting (AAA) servicesControl and provision network access with packet filtering, context-aware Cisco ASA next-generation firewall services, and new NAT/PAT conceptsConfigure IP routing, application inspection, and QoSCreate firewall contexts with unique configurations, interfaces, policies, routing tables, and administration<p style="MARGIN: 0p

Trust the best selling Official Cert Guide series from Cisco Press to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam. --Master Cisco CCNA Security 210-260 Official Cert Guide exam topics --Assess your knowledge with chapter-opening quizzes --Review key concepts with exam preparation tasks This is the eBook edition of the CCNA Security 210-260 Official Cert Guide. This eBook does not include the companion CD-ROM with practice exam that comes with the print edition. CCNA Security 210-260 Official Cert Guide presents you with an organized test-preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. CCNA Security 210-260 Official Cert Guide focuses specifically on the objectives for the Cisco CCNA Security exam. Networking Security experts Omar Santos and John Stuppi share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics. Well regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time. The official study guide helps you master all the topics on the CCNA Security exam, including --Networking security concepts --Common security threats --Implementing AAA using IOS and ISE --Bring Your Own Device (BYOD) --Fundamentals of VPN technology and cryptography --Fundamentals of IP security --Implementing IPsec site-to-site VPNs --Implementing SSL remote-access VPNs using Cisco ASA --Securing Layer 2 technologies --Network Foundation Protection (NFP) --Securing the management plane on Cisco IOS devices --Securing the data plane --Securing routing protocols and the control plane --Understanding firewall fundamentals --Implementing Cisco IOS zone-based firewalls --Configuring basic firewall policies on Cisco ASA --Cisco IPS fundamentals --Mitigation technologies for e-mail- and web-based threats --Mitigation technologies for endpoint threats CCNA Security 210-260 Official Cert Guide is part of a recommended learning path from Cisco

31 Days Before Your CCNA Security Exam 31 Days Before Your CCNA Security Exam offers you an engaging and practical way to understand the certification process, commit to taking the CCNA Security IINS 210-260 certification exam, and finish your preparation using a variety of Primary and Supplemental study resources. The IINS 210-260 exam tests your knowledge of secure network infrastructure, core security concepts, secure access, VPN encryption, firewalls, intrusion prevention, web/email content security, and endpoint security. It also tests your skills for installing, troubleshooting, and monitoring secure networks to maintain the integrity, confidentiality, and availability of data and devices. Sign up for the IINS 210-260 exam and use the book's day-by-day guide and checklist to organize, prepare, and review. Each day in this guide breaks down an exam topic into a manageable bit of information to review using short summaries. A Study Resources section provides you with a quick reference for locating more in-depth treatment of a day's topics within the Primary and Supplemental resources. The features of the book empower you to fit exam preparation into a busy schedule: · A visual calendar summarizing each day's study topic · A checklist providing advice for preparation activities leading up to the exam · A description of the CCNA Security IINS 210-260 exam organization and sign-up process · Strategies from the author to be mentally, organizationally, and physically prepared for exam day · A conversational tone, which makes your study time more enjoyable Primary Resources: CCNA Security 210-260 Official Cert Guide ISBN-13: 978-1-58720-566-8 CCNA Security Course Booklet Version 2 ISBN-13: 978-1-58713-351-0 CCNA Security Lab Manual Version 2 ISBN-13: 978-1-58713-350-3 Supplemental Resources: CCNA Security 210-260 Complete Video Course ISBN-13: 978-0-13-449931-4 CCNA Security Portable Command Guide , Second Edition ISBN-13: 978-1-58720-575-0 Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services , Third Edition ISBN-13: 978-1-58714-307-6 Category: Certification Covers: CCNA Security

Preparing for the latest CCNA Security exam? Here are all the CCNA Security (210-260) commands you need in one condensed, portable resource. Filled with valuable, easy-to-access information, the CCNA Security Portable Command Guide, is portable enough for you to use whether you're in the server room or the equipment closet. Completely updated to reflect the new CCNA Security 210-260 exam, this quick reference summarizes relevant Cisco IOS® Software commands, keywords, command arguments, and associated prompts, and offers tips and examples for applying these commands to real-world security challenges. Configuration examples, throughout, provide an even deeper understanding of how to use IOS to protect networks. Topics covered include Networking security fundamentals: concepts, policies, strategy Protecting network infrastructure: network foundations, security management planes/access; data planes (Catalyst switches and IPv6) Threat control/containment: protecting endpoints and content; configuring ACLs, zone-based firewalls, and Cisco IOS IPS Secure connectivity: VPNs, cryptology, asymmetric encryption, PKI, IPsec VPNs, and site-to-site VPN configuration ASA network security: ASA/ASDM concepts; configuring ASA basic settings, advanced settings, and VPNs Access all CCNA Security commands: use as a quick, offline resource for research and solutions Logical how-to topic groupings provide one-stop research Great for review before CCNA Security certification exams Compact size makes it easy to carry with you, wherever you go “Create Your Own Journal” section with blank, lined pages allows you to personalize the book for your needs “What Do You Want to Do?” chart inside the front cover helps you to quickly reference specific tasks

The only authorized Lab Manual for the Cisco Networking Academy CCNA Security Version 2 course The Cisco Networking Academy course on CCNA Security is a hands-on, career-oriented e-learning solution with an emphasis on practical experience to help you develop specialized security skills to expand your CCENT-level skill set and advance your career. The curriculum helps prepare students for entry-level security career opportunities and the Implementing Cisco IOS Network Security (IINS) certification exam (210-260) leading to the Cisco CCNA Security certification. The CCNA Security Lab Manual provides you with all 15 labs from the course designed as hands-on practice to develop critical thinking and complex problem-solving skills needed to prepare for entry-level security specialist careers. Through procedural, skills integration challenges, troubleshooting, and model building labs, this CCNA Security course aims to develop your in-depth understanding of network security principles as well as the tools and configurations used. Related CCNA Security Course Booklet Version 2, Third Edition 978-1-58713-351-0 CCNA Security (210-260) Portable Command Guide 978-1-58720-575-0 CCNA Security 210-260 Official Cert Guide 978-1-58720-566-8

2020-02-15