Free
Cisco ASA: All-in-one Next-Generation Firewall, IPS, And VPN Services (3rd Edition)
Ebooks Online

Cisco® ASA All-in-One Next-Generation Firewall, IPS, and VPN Services, Third Edition   Identify, mitigate, and respond to today’s highly-sophisticated network attacks.   Today, network attackers are far more sophisticated, relentless, and dangerous. In response, Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services has been fully updated to cover the newest techniques and Cisco technologies for maximizing end-to-end security in your environment. Three leading Cisco security experts guide you through every step of creating a complete security plan with Cisco ASA, and then deploying, configuring, operating, and troubleshooting your solution.   Fully updated for today’s newest ASA releases, this edition adds new coverage of ASA 5500-X, ASA 5585-X, ASA Services Module, ASA next-generation firewall services, EtherChannel, Global ACLs, clustering, IPv6 improvements, IKEv2, AnyConnect Secure Mobility VPN clients, and more. The authors explain significant recent licensing changes; introduce enhancements to ASA IPS; and walk you through configuring IPsec, SSL VPN, and NAT/PAT.   You’ll learn how to apply Cisco ASA adaptive identification and mitigation services to systematically strengthen security in network environments of all sizes and types. The authors present up-to-date sample configurations, proven design scenarios, and actual debugs–all designed to help you make the most of Cisco ASA in your rapidly evolving network.   Jazib Frahim, CCIE® No. 5459 (Routing and Switching; Security), Principal Engineer in the Global Security Solutions team, guides top-tier Cisco customers in security-focused network design and implementation. He architects, develops, and launches new security services concepts. His books include Cisco SSL VPN Solutions and Cisco Network Admission Control, Volume II: NAC Deployment and Troubleshooting.   Omar Santos, CISSP No. 463598, Cisco Product Security Incident Response Team (PSIRT) technical leader, leads and mentors engineers and incident managers in investigating and resolving vulnerabilities in Cisco products and protecting Cisco customers. Through 18 years in IT and cybersecurity, he has designed, implemented, and supported numerous secure networks for Fortune® 500 companies and the U.S. government. He is also the author of several other books and numerous whitepapers and articles.   Andrew Ossipov, CCIE® No. 18483 and CISSP No. 344324, is a Cisco Technical Marketing Engineer focused on firewalls, intrusion prevention, and data center security. Drawing on more than 16 years in networking, he works to solve complex customer technical problems, architect new features and products, and define future directions for Cisco’s product portfolio. He holds several pending patents.   Understand, install, configure, license, maintain, and troubleshoot the newest ASA devices Efficiently implement Authentication, Authorization, and Accounting (AAA) services Control and provision network access with packet filtering, context-aware Cisco ASA next-generation firewall services, and new NAT/PAT concepts Configure IP routing, application inspection, and QoS Create firewall contexts with unique configurations, interfaces, policies, routing tables, and administration Enable integrated protection against many types of malware and advanced persistent threats (APTs) via Cisco Cloud Web Security and Cisco Security Intelligence Operations (SIO) Implement high availability with failover and elastic scalability with clustering Deploy, troubleshoot, monitor, tune, and manage Intrusion Prevention System (IPS) features Implement site-to-site IPsec VPNs and all forms of remote-access VPNs (IPsec, clientless SSL, and client-based SSL) Configure and troubleshoot Public Key Infrastructure (PKI) Use IKEv2 to more effectively resist attacks against VPNs Leverage IPv6 support for IPS, packet inspection, transparent firewalls, and site-to-site IPsec VPNs    

Paperback: 1248 pages

Publisher: Cisco Press; 3 edition (May 10, 2014)

Language: English

ISBN-10: 1587143070

ISBN-13: 978-1587143076

Product Dimensions: 7.4 x 2.5 x 9.1 inches

Shipping Weight: 4.4 pounds (View shipping rates and policies)

Average Customer Review: 4.7 out of 5 stars  See all reviews (32 customer reviews)

Best Sellers Rank: #202,582 in Books (See Top 100 in Books) #56 in Books > Computers & Technology > Certification > Cisco #128 in Books > Computers & Technology > Security & Encryption > Privacy & Online Safety #262 in Books > Textbooks > Computer Science > Networking

At just over 1200 pages in length, Cisco ASA is the must have bible for Cisco’s newest line of Adaptive Security Appliances (ASA). The basic premise of ASA is to have scalable and modular solutions for everyone from mom & pop shops to massive data centers and everything in-between. Cloud stored data is a large portion of the threat solution for ASA. The authors did a thorough job of explaining the differences between each product, what a license will and won’t do and which features on certain systems are enhanced when combined with other modules.The book begins by examining each Cisco ASA Next Generation (CX) product, unlike most security books that review products at the end of the book. This is a Cisco book, so you are going to be shown all the shiny new goodies first. If you don’t know much about high-end security, this is not the book for you. There is quite a bit of heavy technical expertise dished out along the entire manual and networking as well.You are going to want to grab your highlighter pen and pencil because there is substantial information that is cross referenced several times as you read deeper into the book. A small segment on shared protocol inspection on page 63 is discussed again as components are covered in chapter 4 Initial Setup, chapter 6 Cisco ASA Services Module and even under chapter 14 Virtualization. The information isn’t built as stepping stones to increase the reader’s knowledge but rather built like a manual expecting the reader to already know what they are looking for or build on the knowledge they already have.Cisco ASA is heavy on security, threats and how Cisco handles those issues in detailed discussions.

Are you a network professional who manages network security or installs and configures firewalls? If you are, then this book is for you! Authors Jazib Frahim, Omar Santos and Andrew Ossipov, have done an outstanding job of writing a book that is an insiders guide to planning, implementing, configuring, and troubleshooting the Cisco Adaptive Security Appliances.Authors Frahim, Santos and Ossipov, begin by providing an overview of different technologies that are supported by the Cisco ASA and widely used by today's network security professionals. Then, the authors describe how the Cisco ASA incorporates features from each of the products, integrating comprehensive firewall, intrusion detection and prevention, and VPN technologies in a cost-effective, single-box format. They continue by examining the available licenses for each Cisco ASA model and specific features, and explain how to install such licenses. Then, the authors introduce a comprehensive list of initial setup tasks. They then show you how to perform system maintenance of the Cisco ASA, including system upgrades and health monitoring, and provide tips on how to troubleshoot hardware and data issues. Next, the authors show you how to configure the Cisco ASA Services Module; as well as, how to configure the Cisco Catalyst 6500 Series Switches and 7600 Series Routers to send traffic to be protected and inspected by the module. They continue by showing you how to configure AAA services by defining a list of authentication methods applied to various implementations. Then, the authors show you how to implement your organization's security policy, by using the features that the Cisco ASA provides. They then cover the features, benefits deployment, configuration, and troubleshooting of the Cisco ASA Next-Generation Firewall Services.

At 1,209 pages, and with the print copy tipping the scales at just under 5 pounds, the 3rd edition of Cisco ASA: All-in-One Next-Generation Firewall, IPS, and VPN Services is one of the most comprehensive resources available for the Cisco ASA platform. It serves as an excellent introduction to the ASA product line and also as a reference document for those more familiar with the devices.Seasoned firewall administrators with expertise on other platforms will find this book a great reference tool when the situation arises where they know when they need function “X”, but not how to configure that function with the ASA. Information Security professionals with less hands on technical experience will appreciate the primer on all of the different topics and capabilities offered by the different ASA models. Finally, for those that use the ASA on a daily basis, this book provides a good reference for less common topics such as Multicast or Transparent firewalls.The breadth of scope does come at a cost, as there is not room to dive too deeply into any one topic. This is not a major issue, as the basic topics are all present, and deeper technical information on specifics for areas such as NAT, IPSec troubleshooting, or virtual contexts are available from a multitude of sources. As someone that uses ASA firewalls on a daily basis, I frequently found myself skipping past several pages of ASDM step-by-step screenshots to look at the CLI commands. Also, I would have welcomed a section in Chapter 14 on Virtualization that dealt with the ASA 1000V and its unique position in the security architecture.All things considered, the authors and Cisco Press have delivered an excellent resource for anyone that uses or is interested in using Cisco ASA firewalls.

Cisco ASA: All-in-one Next-Generation Firewall, IPS, and VPN Services (3rd Edition) Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance Cisco CCNA Networking for Beginners: The Ultimate Beginners Crash Course to Learn Cisco Quickly and Easily Cisco CCENT Networking for Beginners: The Ultimate Beginners Crash Course to Learn Cisco Quickly and Easily Cisco Self-Study: Building Cisco Metro Optical Networks (METRO) CISCO ATM Solutions: Master ATM Implementation of Cisco Networks The Fifty-Year Mission: The Next 25 Years: From The Next Generation to J. J. Abrams: The Complete, Uncensored, and Unauthorized Oral History of Star Trek Capitalism at the Crossroads: Next Generation Business Strategies for a Post-Crisis World (3rd Edition) Firewall: The Iran-Contra Conspiracy and Cover-up Implementing Cisco IP Telephony and Video, Part 1 (CIPTV1) Foundation Learning Guide (CCNP Collaboration Exam 300-070 CIPTV1) (3rd Edition) (Foundation Learning Guides) Muu. Beee. ¡Así fue! / Moo, Baa, La La La, Spanish Edition Así habló Zaratustra: el manga (Spanish Edition) The Startrek Scriptbooks Book One: The Q Chronicles (Startrek the Next Generation) Yankee Drover: Being the Unpretending Life of Asa Sheldon, Farmer, Trader, and Working Man, 1788-1870 Nine Minutes, Twenty Seconds: The Tragedy and Triumph of ASA Flight 529 Auditing & Assurance Services, 5th Edition (Auditing and Assurance Services) The Book of Tapping & Clapping: Wonderful Songs and Rhymes Passed Down from Generation to Generation for Infants & Toddlers (First Steps in Music series) The Book of Lullabies: Wonderful Songs and Rhymes Passed Down from Generation to Generation for Infants & Toddlers (First Steps in Music series) The Book of Wiggles & Tickles: Wonderful Songs and Rhymes Passed Down from Generation to Generation for Infants & Toddlers (First Steps in Music series) The Book of Bounces: Wonderful Songs and Rhymes Passed Down from Generation to Generation for Infants & Toddlers (First Steps in Music series)