CCNA 3 - Capitulo 3.8

CCNA 3 - Capitulo 3.8

1. NETWORK SECURITY CONCEPTS

   • NETWORK SECURITY BEST PRACTICES
     • CIA INFORMATION TRIAD
       • CONFIDENCIALITY
         • ONLY AUTHORIZED INDIVIDUALS CAN ACCESS INFORMATION
         • ENCRYPTING AND DECRYPTING USING ALGORITHMS SUCH AES
       • INTEGRITY
         • PROTECT DATA FROM UNAUTHORIZED ACCESS
           • CRYPTOGRAPHIC HASHING SUCH SHA
       • AVAILABILITY
         • UTILIZES REDUNDANT SERVICES , GATEWAYS AND LINKS
         • UNINTERRUPTED ACCESS TO RESOURCES AND DATA
     • THE DESENSE IN DEPTH APPROACH
       • INTRUSION PREVENTION SYSTEM - IPS
         • CAN IMEDDIATLY STOP
         • SOLUTIUONS INTEGRATE INTO THE
           • ENTRY AND EXIT POINT THE NETWORK
         • CAN BOTH DEPLOYED ARE SENSORS
         • CAN BE IMPLEMENTED DIFFERENT DEVICES
           • CISCO IOS IPS
           • SPECIFICALLY DEVICE DEDICATED IDS OR IPS
           • INTEGRATED WITH SECURITY APPLIANCE (NGFW ) , SWITCH OR ROUTER
         • CHARACTERISTICS
           • MONITORS INCOMIM AND OUTGOIGN TRAFFIC LOOKING
             • MALWARE
           • DETECTS PATTERNS IN NETWORK TRAFFIC USING SIGNATURES
           • SIGNATURE CAN DETECT ?
             • SIGNATURES CAN DETEC ATOMIC SIGNATURE PATTERNS (SINGLE PACKET )
             • OR COMPOSITE SIGNATURE PATTERNS MULTI PACKET
         • WHATS IS SIGNATURE ?
           • IS A SET OF RULES IDS OR IPS DETEC MALICIOUS ACTIVITY
       • FIREWALL
         • ENSURE THAT INTERNAL TRAFFIC
           • CAN GO OUT AND COME BACK
         • FIREWALL CHARACTERISTICS
           • BUT EXTERNAL TRAFFIC
             • CANNOT INITIATE CONNECTIONS TO INSED HOSTS
           • ONLY ONE TRANSIT POINTS BETWEEN
             • INTERNAL AND EXTERNAL NETWORKS
           • ACCESS CONTROL POLICY BETWEEN NETWORKS
             • ARE RESISTENT NETWORK ATTACKS
           • STATEFUL FIREWALL SERVICES
           • ONLY TRANSIT POINT BETWEEN INTERNAL AND EXTERNAL NETWORKS
         • FIREWALL BENEFITS
           • PREVENT THE EXPOSURE OS SENSITIVE HOSTS , RESOURCES AND APPLICATIONS UNTRUSTED
           • SANITIZE PROTOCOL FLOW
           • BLOCK MALICOUS DATA
           • REDUCE SECURITY MANAGEMENT COMPLEXITY
             • OFF LOADING NETWORK CONTROL ACCESS TO NETWORK FIREWALL
         • FIREWALL LIMITATIONS
           • MISCONFIGURED FIREWALL CAN HAVE CONSEQUENCIES SUCH
             • SINGLE POINT FAILURE
           • USERS SEARCH WAYS AROUNG THE FIREWALL
             • EXPOSES THE NETWORK POTENTIAL ATTACK
           • NETOWRK PERFORMANCE CAN SLOW DOWN
           • UNAUTHORIZED TRAFFIC CAN BE TUNNELED OR HIDDEN
             • SO THAT IT APPEARS AS LEGITIMATE TRAFFIC THROUGH THE FIREWALL
       • CISCO ESA
         • FILTER SPAM AND SUSPICUOUS
         • DESIGNATED TO MONITOR SMTP
         • UPDATED REAL TIME BY CISCO TALOS
       • AAA SERVER
         • SECURE DATABASE
       • VIRTUAL PRIVATE NETWORK - VPN
         • ROUTER USED PROVIDE SECURE VPN WITH
           • COPORATE SITES
           • REMOTE ACCESS
       • COMBINATION NETWORK DEVICES WORKING TOGETHER
       • CISCO WSA
         • MITIGATION TECHONOLOGY FOR WEB BASED THREATS
         • COMBINES ADVANCED MALWARE PROTECTION
         • APPLICATION VISIBILITY AND CONTROL
         • THE WSA CAN PERFORM
           • BLACKLISTING OF URL , URL FILTERING , MALWARE SCANNING , URL CATEGORIZATION
           • ENCRYPT AND DECRYPTION OF WEB TRAFFIC