Network security architectures - Sean Convery

Network Security Architectures offers a comprehensive how-to guide to understanding and implementing the Cisco security blueprint. Written by the two authors of the Cisco Systems SAFE blueprint, it taps into the design strategies of the experts from Cisco. The book begins by discussing the whys and hows of security, identifying relevant lifecycle models and showing the history behind current architectures. Part II provides a broad overview of all of the important security considerations and moving parts to implementing a security plan, itemizing security threats, and listing the elements of security in a network systems. One chapter is dedicated to the concept of device hardening--an essential, element-specific guide to defending pieces of the network.

Solutions are the focus of Part III, addressing the technology decisions that confront a security design engineer, including IPSec VPN, ICMP, NAT, and DHCP. This section also delves into identity issues and options and gives specific information on the security design process. In Part IV, the vulnerable "edge" and the threats that surround it are explored, specifically addressing campus networks and remote security design. Part V explores network management and network scanning. This section also discusses other ways to keep on top of threats, including using honeypots and sinkholes. It makes the comprehensive security presentation complete by providing readers with end-to-end real-world migration examples