Intrusion Prevention Systems » Cisco

Bid for network security technology and win the products for free

intrusion_prevention_systems — Wed, 09 Jun 2010 02:42:16 +0000

This book is ok as a reference, but I would recommend it only as an introduction or guide – perhaps to give an idea of the topics that you might encounter on CCIE written, and which could be the basis of further research of your own. I agree with the previous review that said the book is too brief in many sections – some sections (esp. in Chapter 3) provide minimal value.

I am also very annoyed with the number of basic errors in this book. The technical reviewers have done a truly lousy job here.
Here’s some of the most basic I have found in the just the first couple of chapters.

1. Page 25 – Class D addresses first byte range 224-247.
2. Page 27 – RFC1918 Class B range 172.16.0.0 through 172.32.255.255

I am amazed at how Cisco can let such fundamental gaffes like this out in a book targeted to CCIEs.
Neither of these are currently corrected in the errata on the [...] site either.

“During the rebootubf (sic) process” on Page 59 – I understand that typos can be missed but I wonder if the reviewers from Cisco have actually read this paragraph!

For me the book does provide some value in CCIE preparation, but for books priced around $60 I would have hoped the completeness, accuracy and quality would have been a lot higher. Perhaps later editions of the book will correct these issues (I have the Mar 2008 printing).
[yahooquestion]network+security+technology[/yahooquestion]

A network is two or more computers linked together in order to share data. From a security standpoint, the problem with networks is that unauthorized individuals might also be able to access that data. Network security is a term that encompasses your overall system for keeping your network as impenetrable as possible, be it hardware, software, or company policies.

Whether your network consists of two computers or two hundred computers, there are certain basic security measures you should have in place. Most of these measures aren’t complicated or expensive, and they don’t require any particular expertise in networking or computer security.

One of the most basic steps for securing your network is to have anti-virus software in place. Anti-virus software periodically sweeps your computer looking for known viruses. You can also choose to run a anti-virus test at any time. Once run, the software generates a report that lists the viruses detected. You are then able to select which, if any, of the viruses detected you want quarantined and removed. It’s more important that you keep your software up to date because new viruses are created and released every day.

Next, make sure you have a firewall in place. A firewall is like a gatekeeper. It’s a hardware/software combination that allows you to decide what goes in and out of your network. You determine the “trust level” to which your firewall is set. The trust level dictates which network connections will be automatically allowed and which will require specific permission. Firewalls come with a “default” setting which is unlikely to be stringent enough to meet your security network security technology needs. For optimum security, you should always manually set the trust settings to a higher degree of scrutiny.

Firewalls and anti-virus software are essential for another very important reason: they help protect your system from adware and spyware. Adware and spyware range from annoying to very dangerous. Adware slows down your system, and generates irritating pop-up ads that interfere with your work. Spyware is much more serious. It tracks your computer usage habits, and basically opens up a door to your network that allows hackers to penetrate your system without your knowing it.

Another simple measure is to regularly download patches for your software. Computer programs are tested for vulnerabilities and possible exploits before they are distributed to the public. However, it’s impossible to detect every single vulnerability in advance. As new exploits are discovered, companies “patch” their programs and software to prevent the exploitation of that vulnerability. Without these patches, the software and programs on your computer remain vulnerable.

Network security also depends on common sense. Weak passwords can cause big problems, but are easily avoided. Never use easy-to-guess passwords like your last name, phone number, or birth date. Always use a combination of letters and numbers. Your best bet is to avoid real words altogether and use a string of numbers and letters that stand for a saying or phrase you can easily remember.

Another common sense security measure is to delete suspicious-looking email. More importantly, never open or download an attachment from an email address you don’t recognize. Doing so could be inviting a virus right into your computer. When in doubt, follow this simple rule: delete without opening.

If your business, you should also put in place security policies to govern the behavior of authorized users. Even authorized users can pose a serious security risk, sometimes without realizing it. For instance, “I love to dance, I love to sing” could be “1L2D1L2S,” with the number 1 replacing the letter I.

Here are a few elements of a solid network security policy:

• Require your employees to change their passwords every 3 months.
• Do not allow employees to post their passwords on their desk or cubicle
• Immediately terminate a departing employee’s access to your network.
• Operate on the computer network equivalent to the “need to know” basis. Only allow an employee access to the programs and data that are essential to his or her job.
• Put all of your security guidelines down in writing, and post them where all of your employees can see them.

You want your network security policy to be tight, but not completely rigid. That is, if a given security measure is proving to be unworkable or a serious inconvenience, be willing to adjust. You can often achieve the same result through different means.

Last, but certainly not least, review your network security on a regular basis. A network that’s secure today may not be secure a few months down the road. Hackers are smart and are constantly developing ways to bypass security measures. Be smarter than the hackers by staying on the cutting edge of network security technology.

Watch the video related to network security technology

Linksys WRT120N Wireless N w/ MIMO WiFi Home Router
US $39.99

Buy it now | Add to watch list

NetGear Gigabit Wireless 802.11n 4-Port Router WNR854T
US $29.99

Bid now | Buy it now | Add to watch list

NEW DELL Precision M4500 Q03 i7-740QM 8GB 3.06GHz 1080P
US $1,899.00

Buy it now | Add to watch list

D-Link xStack DES-3828P - switch - 24 ports with POE
US $599.00

Buy it now | Add to watch list

Panasonic BB-HCM531A Outdoor Pan/Tilt PoE Security Network Camera (Silver)

USD $449.00

Intrusion Prevention Systems » Cisco

Bid for network security technology and win the products for free

Discover cisco network Reviews Here

Free Online cisco intrusion Information

Related External Links

cisco ips Free Helpful Knowledgebase

Describe how Cisco IPS sensors are used to mitigate network security threats

Install Cisco IPS sensors/modules and configure essential system parameters

Describe Cisco IPS sensor advanced system parameters

Tune Cisco IPS sensor advanced system parameters to optimize attack mitigation performance