In Stock: Marketplace

Buy from our Authorized Marketplace Sellers

5 new and used from $12.20

Guide to Firewalls and Network Security : Intrusion Detection and VPNs

Digital Content Factory Staff (Author)

ISBN-10: 0619130393
ISBN-13: 9780619130398

Available from our Authorized Marketplace Sellers

In our Marketplace:
5 new and used from $12.20

Description

Table of Contents

BDS Summary
Aimed at the student and network administrator who need to learn the basics of network firewall security, this book covers basic installation techniques, how to make an intelligent choice of firewall technology and basic firewall troubleshooting.Long Description
Provides comprehensive overview of building and maintaining firewalls in a business environment, and maps to the objectives of CheckPoint?s CCSA certification.Author Affiliation
Greg Holden has developed a following through his ability to teach highly technical subjects to novice and experienced computer users alike. He has written various booksMain Description
Guide to Firewalls and Network Security: Intrusion Detection and VPNs provides a comprehensive look at firewalls and their use with other network security components to secure a local Area Network. The book begins with an introduction to firewalls -- where they fit into a network security program, and how to combine them with DMZs, routers, and VPNs for optimal perimeter security. Next, important topics related to firewalls and network security are discussed, including packet filtering, proxy servers, authentication, encryption, and securing host computers. The last three chapters cover advanced topics such as setting up a VPN, building a firewall and VPN, and performing system administration. The hands-on projects in these chapters utilize a variety of popular VPN and firewall products available today. Book jacket.

Introduction	p. xiii
Firewall Planning and Design	p. 1
Misconceptions About Firewalls	p. 2
What Is a Security Policy?	p. 3
What Is a Firewall?	p. 3
An Analogy: Security Guard Sam	p. 4
Firewalls Provide Security Features	p. 5
Firewalls Provide Protection for Individual Users	p. 5
Firewalls Provide Perimeter Security for Networks	p. 6
Firewalls Consist of Multiple Components	p. 8
Firewalls Confront Many Threats and Perform Many Security Tasks	p. 8
Types of Firewall Protection	p. 14
Multilayer Firewall Protection	p. 14
Packet Filtering	p. 14
NAT	p. 18
Application Layer Gateways	p. 19
Limitations of Firewalls	p. 20
Evaluating Firewall Packages	p. 21
Firewall Hardware	p. 21
Software-Only Packages	p. 22
Chapter Summary	p. 24
Key Terms	p. 25
Review Questions	p. 28
Hands-on Projects	p. 31
Case Projects	p. 35
Developing a Security Policy	p. 37
What Is a Security Policy?	p. 38
Why Is a Security Policy Important?	p. 39
Setting Goals for an Effective Security Policy	p. 40
The Seven Steps to Building a Security Policy	p. 41
Developing a Policy Team	p. 41
Determining the Organization's Overall Approach to Security	p. 41
Identifying the Assets To Be Protected	p. 43
Determining What Should Be Audited for Security	p. 45
Identifying Security Risks	p. 47
Defining Acceptable Use	p. 47
Providing for Remote Access	p. 48
Accounting for What the Firewall Cannot Do	p. 49
Other Security Policy Topics	p. 49
Defining Responses to Security Violations	p. 50
Overcoming Administrative Obstacles	p. 50
Educating Employees	p. 51
Presenting and Reviewing the Process	p. 52
Amending the Security Policy	p. 52
Chapter Summary	p. 52
Key Terms	p. 53
Review Questions	p. 53
Hands-on Projects	p. 56
Case Projects	p. 60
Firewall Configuration Strategies	p. 61
Establishing Rules and Restrictions for Your Firewall	p. 62
The Role of the Rules File	p. 62
Restrictive Firewalls	p. 63
Connectivity-Based Firewalls	p. 64
Firewall Configuration Strategies: The 10,000-Foot Overview	p. 65
Scalability	p. 65
Productivity	p. 65
Dealing with IP Address Issues	p. 66
Different Firewall Configuration Strategies You Can Use	p. 67
Screening Router	p. 69
Dual-Homed Host	p. 71
Screened Host	p. 71
Two Routers, One Firewall	p. 72
DMZ Screened Subnet	p. 73
Multiple-Firewall DMZs	p. 76
Reverse Firewalls	p. 83
Specialty Firewalls	p. 83
Approaches that Add Functionality to Your Firewall	p. 83
NAT	p. 84
Encryption	p. 85
Application Proxies	p. 85
VPNs	p. 87
Intrusion Detection Systems	p. 87
Chapter Summary	p. 90
Key Terms	p. 90
Review Questions	p. 92
Hands-on Projects	p. 95
Case Projects	p. 99
Packet Filtering	p. 101
Understanding Packets and Packet Filtering	p. 102
Devices That Perform Packet Filtering	p. 102
Anatomy of a Packet	p. 103
A Quick Tutorial on Packet Filtering	p. 106
The Use of Rules	p. 106
Approaches to Packet Filtering	p. 108
Stateless Packet Filtering	p. 108
Stateful Packet Filtering	p. 114
Filtering Based on Packet Contents	p. 116
Setting Specific Packet Filter Rules	p. 117
Packet Filter Rules That Cover Multiple Variations	p. 117
Packet Filter Rules That Cover ICMP	p. 118
Packet Filter Rules That Block Ping Packets	p. 118
Packet Filter Rules That Enable Web Access	p. 120
Packet Filter Rules That Enable DNS	p. 120
Packet Filter Rules That Enable FTP	p. 121
Packet Filter Rules That Enable E-Mail	p. 122
Chapter Summary	p. 123
Key Terms	p. 124
Review Questions	p. 125
Hands-on Projects	p. 128
Case Projects	p. 132
Working with Proxy Servers and Application-Level Firewalls	p. 135
Overview of Proxy Servers	p. 136
The Proxy Analogy	p. 136
How Proxy Servers Work	p. 136
How Proxy Servers Differ From Packet Filters	p. 138
Sample Proxy Server Configurations	p. 138
Goals of Proxy Servers	p. 140
Concealing Internal Clients	p. 140
Blocking URLs	p. 142
Blocking and Filtering Content	p. 143
E-Mail Proxy Protection	p. 143
Improving Performance	p. 144
Ensuring Security	p. 145
Providing User Authentication	p. 146
Redirecting URLs	p. 146
Proxy Server Configuration Considerations	p. 146
Providing for Scalability	p. 147
Working with Client Configurations	p. 147
Working with Service Configurations	p. 148
Creating Filter Rules	p. 149
Recognizing the Single Point of Failure	p. 149
Recognizing Buffer Overflow Vulnerabilities	p. 150
Choosing a Proxy Server	p. 150
Transparent Proxies	p. 150
Nontransparent Proxies	p. 151
SOCKS-Based Proxies	p. 151
Proxy Server-Based Firewalls Compared	p. 153
T.REX Open-Source Firewall	p. 153
Squid	p. 153
WinGate	p. 153
Symantec Enterprise Firewall	p. 154
Microsoft Internet Security & Acceleration Server	p. 154
Reverse Proxies	p. 155
When a Proxy Service Isn't the Correct Choice	p. 157
Chapter Summary	p. 157
Key Terms	p. 158
Review Questions	p. 159
Hands-on Projects	p. 162
Case Projects	p. 169
Authenticating Users	p. 171
The Authentication Process in General	p. 172
How Firewalls Implement the Authentication Process	p. 173
Types of Authentication with Firewalls	p. 174
User Authentication	p. 175
Client Authentication	p. 176
Session Authentication	p. 177
Centralized Authentication	p. 178
Kerberos Authentication	p. 179
TACACS+	p. 180
Remote Authentication Dial-In User Service (RADIUS)	p. 181
TACACS+ and RADIUS Compared	p. 181
Password Security Issues	p. 183
Passwords That Can Be Cracked	p. 183
User Error with Passwords	p. 184
Lax Security Habits	p. 184
Password Security Tools	p. 184
One-Time Password Software	p. 184
The Shadow Password System	p. 185
Other Authentication Systems	p. 185
Single-Password Systems	p. 186
One-Time Password Systems	p. 186
Certificate-Based Authentication	p. 187
802.1x Wi-Fi Authentication	p. 187
Chapter Summary	p. 189
Key Terms	p. 190
Review Questions	p. 192
Hands-on Projects	p. 194
Case Projects	p. 200
Encryption and Firewalls	p. 203
Why Your Firewalls Need To Use Encryption	p. 204
Hackers Take Advantage of a Lack of Encryption	p. 204
The Cost of Encryption	p. 205
Preserving Data Integrity	p. 206
Maintaining Confidentiality	p. 206
Authenticating Network Clients	p. 207
Enabling VPNs	p. 207
Digital Certificates and Public and Private Keys	p. 207
Digital Certificates	p. 208
Keys	p. 210
Analyzing Popular Encryption Schemes	p. 216
Symmetric Versus Asymmetric Encryption	p. 216
PGP	p. 218
X.509	p. 219
X.509 and PGP Compared	p. 220
SSL	p. 221
Using IPSec Encryption	p. 221
Understanding IPSec	p. 222
Modes of IPSec	p. 222
IPSec Protocols	p. 223
Components of IPSec	p. 225
Enabling IPSec	p. 225
Limitations of IPSec	p. 227
Chapter Summary	p. 228
Key Terms	p. 228
Review Questions	p. 231
Hands-on Projects	p. 234
Case Projects	p. 241
Choosing a Bastion Host	p. 243
Installing a Bastion Host: General Requirements	p. 244
Selecting the Host Machine	p. 245
Do You Need More Than One Machine?	p. 245
Memory Considerations	p. 246
Processor Speed	p. 246
Choosing the Operating System	p. 247
Positioning the Bastion Host	p. 248
Physical Location	p. 248
Network Location	p. 250
Securing the Machine Itself	p. 252
Configuring Your Bastion Host	p. 254
Making the Host Defend Itself	p. 254
Selecting Services To Be Provided	p. 255
Special Considerations for UNIX Systems	p. 255
Special Considerations for Windows Systems	p. 256
Disabling Accounts	p. 257
Disabling Unnecessary Services	p. 257
Limiting Ports	p. 258
Handling Backups	p. 259
Auditing the Bastion Host	p. 260
Connecting the Bastion Host	p. 260
Chapter Summary	p. 261
Key Terms	p. 262
Review Questions	p. 263
Hands-on Projects	p. 266
Case Projects	p. 274
Setting Up a Virtual Private Network	p. 277
VPN Components and Operations	p. 278
Components Within VPNs	p. 278
Essential Activities of VPNs	p. 282
Advantages and Disadvantages of VPNs	p. 284
VPNs Extend a Network's Boundaries	p. 285
Types of VPNs	p. 286
VPN Appliances	p. 286
Software VPN Systems	p. 287
VPN Combinations of Hardware and Software	p. 288
VPN Combinations of Different Vendors' Products	p. 289
VPN Setups	p. 289
Mesh Configuration	p. 289
Hub-and-Spoke Configuration	p. 291
Hybrid Configuration	p. 292
Configurations and Extranet and Intranet Access	p. 292
Tunneling Protocols Used with VPNs	p. 293
IPSec/IKE	p. 294
PPTP	p. 295
L2TP	p. 295
PPP Over SSL/PPP Over SSH	p. 295
Enabling Remote Access Connections Within VPNs	p. 296
Configuring the Server	p. 297
Configuring Clients	p. 298
VPN Best Practices	p. 298
The Need for a VPN Policy	p. 299
Packet Filtering and VPNs	p. 299
Auditing and Testing the VPN	p. 302
Chapter Summary	p. 303
Key Terms	p. 305
Review Questions	p. 306
Hands-on Projects	p. 310
Case Projects	p. 318
Building Your Own Firewall	p. 319
Enterprise Versus Desktop Firewalls	p. 320
Desktop Firewalls	p. 322
Tiny Personal Firewall	p. 322
Sygate Firewalls	p. 327
ZoneAlarm Firewalls	p. 331
Enterprise Firewalls	p. 335
Linksys	p. 336
Microsoft Internet Security and Acceleration Server 2000	p. 337
Chapter Summary	p. 341
Key Terms	p. 342
Review Questions	p. 343
Hands-on Projects	p. 346
Case Projects	p. 355
Ongoing Administration	p. 357
Making Your Firewall Meet New Needs	p. 358
Verifying Resources Needed by the Firewall	p. 358
Identifying New Risks	p. 360
Adding Software Updates and Patches	p. 361
Adding Hardware	p. 362
Dealing with Complexity on the Network	p. 363
Adhering to Proven Security Principles	p. 364
Environmental Management	p. 364
BIOS, Boot, and Screen Locks	p. 365
Using Remote Management Interface	p. 366
Why Remote Management Tools Are Important	p. 367
Security Concerns with Remote Management Tools	p. 367
Basic Features Required of Remote Management Tools	p. 367
Tracking the Contents of Log Files for Security	p. 368
Preparing Usage Reports	p. 368
Watching for Suspicious Events	p. 369
Automating Security Checks	p. 372
Security Breaches Will Happen!	p. 373
Using an Intrusion Detection System	p. 373
Receiving Security Alerts	p. 375
When an Intrusion Occurs	p. 375
During and After an Intrusion	p. 375
Configuring Advanced Firewall Functions	p. 376
Data Caching	p. 376
Hot Standby Redundancy	p. 377
Load Balancing	p. 378
Filtering Content	p. 380
Chapter Summary	p. 381
Key Terms	p. 382
Review Questions	p. 384
Hands-on Projects	p. 387
Case Projects	p. 391
Security Resources	p. 393
Security-Related Web Sites	p. 394
The Center for Internet Security (www.cisecurity.org/)	p. 394
SANS Institute (www.sans.org)	p. 394
The Cert Coordination Center (www.cert.org)	p. 394
W3C Security Resources (www.w3.org/security)	p. 394
Microsoft Security and Privacy (www.microsoft.com/security)	p. 395
Anti-Virus Sites	p. 395
Symantec Security Response (http://securityresponse.symantec.com)	p. 395
McAfee.com--Anti-Virus (www.mcafee.com)	p. 395
Free Online Security Scanners	p. 395
Shields UP! Port Scanner (https://grc.com/x/ne.dll?bhObkyd2)	p. 395
Broadbandreports.com	p. 396
Incident Response Sites	p. 396
Incidents.org (www.incidents.org)	p. 396
FIRST (www.first.org)	p. 396
Internet Fraud Complaint Center (http://www1.ifccfbi.gov/index.asp)	p. 396
Security Certification Sites	p. 397
CompTIA Certification Home Page (www.comptia.org/certification/index.htm)	p. 397
Global Information Assurance Certification (GIAC) (www.giac.org)	p. 397
(ISC)[superscript 2] (www.isc2.org)	p. 397
Background Information on Security Topics	p. 397
SANS Reading Room (http://rr.sans.org)	p. 397
SearchSecurity.com (http://searchsecurity.techtarget.com/)	p. 398
Internet Firewalls FAQ (www.interhack.net/pubs/fwfaq/)	p. 398
Newsletters, Newsgroups, and Mailing Lists	p. 398
The Newsgroup (comp.security.firewalls)	p. 398
FIRST membership Mailing Lists (www.first.org/docs/mail.html)	p. 398
SANS Newsletters (http://server2.sans.org/sansnews)	p. 398
CNET Newsletters (http://nl.com.com/general.jsp)	p. 399
Glossary	p. 401
Index	p. 413
Table of Contents provided by Ingram. All Rights Reserved.

Edition:	2004
Publisher:	Course Technology
Binding:	Trade Paper
Pages:	433
Size:	7.75" wide x 9.25" long x 1.00" tall
Weight:	1.72 lbs.
Language:	English

100% Money Back Guarantee: Wrong item? No problem! Our hassle-free returns policy has you covered. We'll also process your order within 24 hours. Learn more about our shipping policy.

In Stock: Marketplace

Guide to Firewalls and Network Security : Intrusion Detection and VPNs

Digital Content Factory Staff (Author)

ISBN-10: 0619130393
ISBN-13: 9780619130398

New & Used Books

Customer Service

Booksellers

TextbooksRus Info

About TextbooksRus.com

In Stock: Marketplace

Guide to Firewalls and Network Security : Intrusion Detection and VPNs

Digital Content Factory Staff (Author)

ISBN-10: 0619130393 ISBN-13: 9780619130398

New & Used Books

Customer Service

Booksellers

TextbooksRus Info

About TextbooksRus.com

ISBN-10: 0619130393
ISBN-13: 9780619130398