Author: Andy Richter
Publisher: Syngress
ISBN: 0128045043
Category : Computers
Languages : en
Pages : 300
Get Book Here
Book Description
With the proliferation of mobile devices and bring-your-own-devices (BYOD) within enterprise networks, the boundaries of where the network begins and ends have been blurred. Cisco Identity Services Engine (ISE) is the leading security policy management platform that unifies and automates access control to proactively enforce role-based access to enterprise networks. In Practical Deployment of Cisco Identity Services Engine (ISE), Andy Richter and Jeremy Wood share their expertise from dozens of real-world implementations of ISE and the methods they have used for optimizing ISE in a wide range of environments. ISE can be difficult, requiring a team of security and network professionals, with the knowledge of many different specialties. Practical Deployment of Cisco Identity Services Engine (ISE) shows you how to deploy ISE with the necessary integration across multiple different technologies required to make ISE work like a system. Andy Richter and Jeremy Wood explain end-to-end how to make the system work in the real world, giving you the benefit of their ISE expertise, as well as all the required ancillary technologies and configurations to make ISE work.
Author: Srilatha Vemula
Publisher: Cisco Press
ISBN: 0136448291
Category : Computers
Languages : en
Pages : 567
Get Book Here
Book Description
The definitive Cisco SD-Access resource, from the architects who train Cisco's own engineers and partners This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you'll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network's security and simplify its management. Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting. Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics. * Learn how Cisco SD-Access addresses key drivers for network change, including automation and security * Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility * Master Cisco SD-Access essentials: design, components, best practices, and fabric construction * Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints * Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step * Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices * Extend campus network policies to WANs and data center networks * Choose the right deployment options for Cisco DNA Center in your environment * Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications
Author: Aaron Woland
Publisher: Cisco Press
ISBN: 0134807677
Category : Computers
Languages : en
Pages : 1017
Get Book Here
Book Description
The essential reference for security pros and CCIE Security candidates: identity, context sharing, encryption, secure connectivity and virtualization Integrated Security Technologies and Solutions – Volume II brings together more expert-level instruction in security design, deployment, integration, and support. It will help experienced security and network professionals manage complex solutions, succeed in their day-to-day jobs, and prepare for their CCIE Security written and lab exams. Volume II focuses on the Cisco Identity Services Engine, Context Sharing, TrustSec, Application Programming Interfaces (APIs), Secure Connectivity with VPNs, and the virtualization and automation sections of the CCIE v5 blueprint. Like Volume I, its strong focus on interproduct integration will help you combine formerly disparate systems into seamless, coherent, next-generation security solutions. Part of the Cisco CCIE Professional Development Series from Cisco Press, it is authored by a team of CCIEs who are world-class experts in their Cisco security disciplines, including co-creators of the CCIE Security v5 blueprint. Each chapter starts with relevant theory, presents configuration examples and applications, and concludes with practical troubleshooting. Review the essentials of Authentication, Authorization, and Accounting (AAA) Explore the RADIUS and TACACS+ AAA protocols, and administer devices with them Enforce basic network access control with the Cisco Identity Services Engine (ISE) Implement sophisticated ISE profiling, EzConnect, and Passive Identity features Extend network access with BYOD support, MDM integration, Posture Validation, and Guest Services Safely share context with ISE, and implement pxGrid and Rapid Threat Containment Integrate ISE with Cisco FMC, WSA, and other devices Leverage Cisco Security APIs to increase control and flexibility Review Virtual Private Network (VPN) concepts and types Understand and deploy Infrastructure VPNs and Remote Access VPNs Virtualize leading Cisco Security products Make the most of Virtual Security Gateway (VSG), Network Function Virtualization (NFV), and microsegmentation
Author: Aaron Woland
Publisher: Cisco Press
ISBN: 9780136642947
Category : Computers
Languages : en
Pages : 750
Get Book Here
Book Description
This is Cisco's official, comprehensive self-study resource for Cisco's SISE 300-715 exam (Implementing and Configuring Cisco Identity Services Engine), one of the most popular concentration exams required for the Cisco Certified Network Professional (CCNP) Security certification. It will thoroughly prepare network professionals to deploy and use Cisco ISE to simplify delivery of consistent, highly secure access control across wired, wireless, and VPN connections. Designed for all CCNP Security candidates, CCNP Security Identity Management SISE 300-715 Official Cert Guide covers every SISE #300-715 objective concisely and logically, with extensive teaching features designed to promote retention and understanding. You'll find: Pre-chapter quizzes to assess knowledge upfront and focus your study more efficiently Foundation topics sections that explain concepts and configurations, and link theory to practice Key topics sections calling attention to every figure, table, and list you must know Exam Preparation sections with additional chapter review features Final preparation chapter providing tools and a complete final study plan A customizable practice test library CCNP Security Identity Management SISE 300-715 Official Cert Guide offers comprehensive, up-to-date coverage of all SISE #300-715 Cisco Identity Services Engine topics related to: Architecture and deployment Policy enforcement Web Auth and guest services Profiler BYOD Endpoint compliance Network access device administration
Author: John W. Capobianco
Publisher: Independently Published
ISBN: 9781799237884
Category : Computers
Languages : en
Pages : 214
Get Book Here
Book Description
Network automation is one of the hottest topics in Information Technology today. This revolutionary book aims to illustrate the transformative journey towards full enterprise network automation. This book outlines the tools, technologies and processes required to fully automate an enterprise network. Automated network configuration management is more than converting your network configurations to code. The benefits of source control, version control, automated builds, automated testing and automated releases are realized in the world of networking using well established software development practices. The next-generation network administrative toolkit is introduced including Microsoft Team Foundation Server, Microsoft Visual Studio Code, Git, Linux, and the Ansible framework. Not only will these new technologies be covered at length, a new and continuously integrated / continuously delivered pipeline is also introduced. Starting with safe, simple, non-intrusive, non-disruptive information gathering organizations can ease into network automation while building a dynamic library of documentation and on-demand utilities for network operations. Once comfortable with the new ecosystem, administrators can begin making fully automated, orchestrated, and tactical changes to the network. The next evolutionary leap occurs when fully automated network configuration management is implemented. Important information from the network running-configurations is abstracted into data models in a human readable format. Device configurations are dynamically templated creating a scalable, intent-based, source of truth. Much like in the world of software development, full automation of the network using a CI/CD pipeline can be realized. Automated builds, automated testing and automated scheduled releases are orchestrated and executed when changes are approved and checked into the central repository. This book is unlike any on the market today as it includes multiple Ansible playbooks, sample YAML data models and Jinja2 templates for network devices, and a whole new methodology and approach to enterprise network administration and management. The CLI no longer cuts it. Readers should take away from this book a new approach to enterprise network management and administration as well as the full knowledge and understanding of how to use TFS, VS Code, Git, and Ansible to create an automation ecosystem. Readers should have some basic understanding of modern network design, operation, and configuration. No prior programming or software development experience is required. John Capobianco has over 20 years of IT experience and is currently a Technical Advisor for the Canadian House of Commons. A graduate of St. Lawrence College's Computer Programmer Analyst program, John is also a former Professor at St. Lawrence College in the Computer Networking and Technical Support (CNTS) program. John has achieved CCNP, CCDP, CCNA: Data Center, MCITP: EA/SA, CompTIA A+ / Network+, and ITIL Foundation certifications. Having discovered a new way to interface with the network John felt compelled to share this new methodology in hopes of revolutionizing the industry and bringing network automation to the world.
Author: Russ White
Publisher: Addison-Wesley Professional
ISBN: 0134762851
Category : Computers
Languages : en
Pages : 1107
Get Book Here
Book Description
Master Modern Networking by Understanding and Solving Real Problems Computer Networking Problems and Solutions offers a new approach to understanding networking that not only illuminates current systems but prepares readers for whatever comes next. Its problem-solving approach reveals why modern computer networks and protocols are designed as they are, by explaining the problems any protocol or system must overcome, considering common solutions, and showing how those solutions have been implemented in new and mature protocols. Part I considers data transport (the data plane). Part II covers protocols used to discover and use topology and reachability information (the control plane). Part III considers several common network designs and architectures, including data center fabrics, MPLS cores, and modern Software-Defined Wide Area Networks (SD-WAN). Principles that underlie technologies such as Software Defined Networks (SDNs) are considered throughout, as solutions to problems faced by all networking technologies. This guide is ideal for beginning network engineers, students of computer networking, and experienced engineers seeking a deeper understanding of the technologies they use every day. Whatever your background, this book will help you quickly recognize problems and solutions that constantly recur, and apply this knowledge to new technologies and environments. Coverage Includes · Data and networking transport · Lower- and higher-level transports and interlayer discovery · Packet switching · Quality of Service (QoS) · Virtualized networks and services · Network topology discovery · Unicast loop free routing · Reacting to topology changes · Distance vector control planes, link state, and path vector control · Control plane policies and centralization · Failure domains · Securing networks and transport · Network design patterns · Redundancy and resiliency · Troubleshooting · Network disaggregation · Automating network management · Cloud computing · Networking the Internet of Things (IoT) · Emerging trends and technologies
Author: Omar Santos
Publisher: Cisco Press
ISBN: 0134213041
Category : Computers
Languages : en
Pages : 581
Get Book Here
Book Description
Network threats are emerging and changing faster than ever before. Cisco Next-Generation Network Security technologies give you all the visibility and control you need to anticipate and meet tomorrow’s threats, wherever they appear. Now, three Cisco network security experts introduce these products and solutions, and offer expert guidance for planning, deploying, and operating them. The authors present authoritative coverage of Cisco ASA with FirePOWER Services; Cisco Firepower Threat Defense (FTD); Cisco Next-Generation IPS appliances; the Cisco Web Security Appliance (WSA) with integrated Advanced Malware Protection (AMP); Cisco Email Security Appliance (ESA) with integrated Advanced Malware Protection (AMP); Cisco AMP ThreatGrid Malware Analysis and Threat Intelligence, and the Cisco Firepower Management Center (FMC). You’ll find everything you need to succeed: easy-to-follow configurations, application case studies, practical triage and troubleshooting methodologies, and much more. Effectively respond to changing threat landscapes and attack continuums Design Cisco ASA with FirePOWER Services and Cisco Firepower Threat Defense (FTD) solutions Set up, configure, and troubleshoot the Cisco ASA FirePOWER Services module and Cisco Firepower Threat Defense Walk through installing AMP Private Clouds Deploy Cisco AMP for Networks, and configure malware and file policies Implement AMP for Content Security, and configure File Reputation and File Analysis Services Master Cisco AMP for Endpoints, including custom detection, application control, and policy management Make the most of the AMP ThreatGrid dynamic malware analysis engine Manage Next-Generation Security Devices with the Firepower Management Center (FMC) Plan, implement, and configure Cisco Next-Generation IPS—including performance and redundancy Create Cisco Next-Generation IPS custom reports and analyses Quickly identify the root causes of security problems
Author: Chris Jackson
Publisher: Cisco Press
ISBN: 0136677339
Category : Computers
Languages : en
Pages : 1035
Get Book Here
Book Description
This is the eBook edition of the Cisco Certified DevNet Associate DEVASC 200-901 Official Cert Guide. This eBook does not include access to the companion website with practice exam that comes with the print edition. Access to the video mentoring is available through product registration at Cisco Press; or see the instructions in the back pages of your eBook. Trust the best-selling Official Cert Guide series from Cisco Press to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam. Master Cisco Certified DevNet Associate DEVASC 200-901 exam topics Assess your knowledge with chapter-opening quizzes Review key concepts with exam preparation tasks Learn from more than two hours of video mentoring Cisco Certified DevNet Associate DEVASC 200-901 Official Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. “Do I Know This Already?” quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. Cisco Certified DevNet Associate DEVASC 200-901 Official Cert Guide focuses specifically on the objectives for the Cisco Certified DevNet Associate DEVASC exam. Four leading Cisco technology experts share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics. Well regarded for its level of detail, assessment features, comprehensive design scenarios, , this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time. The official study guide helps you master all the topics on the Cisco Certified DevNet Associate DEVASC 200-901 exam, including: Software Development and Design Understanding and Using APIs Cisco Platforms and Development Application Deployment and Security Infrastructure and Automation Network Fundamentals
Author: Brett Hall
Publisher: Cisco Press
ISBN: 0136654444
Category : Computers
Languages : en
Pages : 780
Get Book Here
Book Description
Master the foundations of modern Cisco Unified Communications (UC) system security This guide helps you build foundational knowledge for securing modern Cisco Unified Communications environments that support voice, video, messaging, and meetings, and support different types of real-time collaboration capabilities based on mobile/remote access and mobile devices based on bring-your-own-device (BYOD) initiatives. Writing for administrators and managers, two Cisco collaboration experts bring together methods and insights to illuminate both the “why” and the “how” of effective collaboration security. Using the proven “Explain, Demonstrate, and Verify” methodology, they explain each threat, demonstrate remediation, and show how to confirm correct implementation. You'll walk through securing each attack surface in a logical progression, across each Cisco UC application domain. The authors address key updates to Cisco collaboration architecture, including Expressway, Cisco Meeting Server, encryption enhancements, and advanced business-to-business collaboration. You'll find quick-reference checklists in each chapter, and links to more detail wherever needed. Begin by protecting your workforce through basic physical security and life/safety techniques Understand how attackers seek to compromise your UC system's network environment—and your best countermeasures Maintain security across all UC deployment types n Protect core UC applications by locking down and hardening the core operating system Use encryption to protect media and signaling, and enforce secure authentication Secure Cisco Unified Communications Manager, Cisco Unity Connection, and Cisco Meeting Server Deploy Session Border Controllers to provide security controls for VoIP and video traffic Provide additional protection at the edge of the network Safeguard cloud-based and hybrid-cloud services Enable organizations to seamlessly and securely connect to cloud UC services Allow remote teleworker users to connect safely to local UC resources
Author: Chris Carthern
Publisher: Apress
ISBN: 1484208595
Category : Computers
Languages : en
Pages : 856
Get Book Here
Book Description
This book is a concise one-stop desk reference and synopsis of basic knowledge and skills for Cisco certification prep. For beginning and experienced network engineers tasked with building LAN, WAN, and data center connections, this book lays out clear directions for installing, configuring, and troubleshooting networks with Cisco devices. The full range of certification topics is covered, including all aspects of IOS, NX-OS, and ASA software. The emphasis throughout is on solving the real-world challenges engineers face in configuring network devices, rather than on exhaustive descriptions of hardware features. This practical desk companion doubles as a comprehensive overview of the basic knowledge and skills needed by CCENT, CCNA, and CCNP exam takers. It distills a comprehensive library of cheat sheets, lab configurations, and advanced commands that the authors assembled as senior network engineers for the benefit of junior engineers they train, mentor on the job, and prepare for Cisco certification exams. Prior familiarity with Cisco routing and switching is desirable but not necessary, as Chris Carthern, Dr. Will Wilson, Noel Rivera, and Richard Bedwell start their book with a review of the basics of configuring routers and switches. All the more advanced chapters have labs and exercises to reinforce the concepts learned. This book differentiates itself from other Cisco books on the market by approaching network security from a hacker’s perspective. Not only does it provide network security recommendations but it teaches you how to use black-hat tools such as oclHashcat, Loki, Burp Suite, Scapy, Metasploit, and Kali to actually test the security concepts learned. Readers of Cisco Networks will learn How to configure Cisco switches, routers, and data center devices in typical corporate network architectures The skills and knowledge needed to pass Cisco CCENT, CCNA, and CCNP certification exams How to set up and configure at-home labs using virtual machines and lab exercises in the book to practice advanced Cisco commands How to implement networks of Cisco devices supporting WAN, LAN, and data center configurations How to implement secure network configurations and configure the Cisco ASA firewall How to use black-hat tools and network penetration techniques to test the security of your network
