Chapter 6 Securing the Local Area Network

Chapter 6 Securing the Local Area Network

1. Endpoint Security

   • Layer 2 Security Threats
     • Layer 2 Vulnerabilities
     • Switch Attack Categories
       • CAM Table Attacks
       • VLAN Attacks
       • STP Attacks
       • DHCP Attacks
       • ARP Attacks
   • CAM Table Attacks
     • CAM Table Operation
     • CAM Table Attack
     • Attack Tools
   • Mitigating CAM Table Attacks
     • Countermeasure for CAM Table Attacks
     • Port Security
       • Protect
       • Shutdown
       • Restrict
     • SNMP MAC Address Notification
   • Mitigating VLAN Attacks
     • VLAN Hopping Attacks
     • VLAN Double-Tagging Attack
     • PVLAN Edge
       • Private VLANs
   • Mitigating DHCP Attacks
     • DHCP Spoofing Attack
     • DHCP Starvation Attack
     • DHCP Snooping
   • Mitigating ARP Attacks
     • ARP Spoofing
     • ARP Poisoning Attack Close
     • Dynamic ARP Inspection
   • Mitigating Address Spoofing Attacks
     • Address Spoofing Attack
     • IP Source Guard
   • Spanning Tree Protocol
     • Implementations of STP
     • STP Port Roles
       • Designated ports
       • Root ports
       • Alternate or backup ports
     • STP Root Bridge
     • STP Path Cost
     • 802.1D BPDU Frame Format
       • BPDU Propagation and Process
     • Extended System ID
   • Mitigating STP Attacks
     • STP Manipulation Attacks
     • Configuring
       • PortFast
       • BPDU Guard
       • Root Guard
       • Loop Guard

2. Endpoint Security

   • Endpoint Security
     • Securing LAN Elements
     • Traditional Endpoint Security
     • Borderless Network
     • Modern Endpoint Security Solutions
     • Hardware and Software Encryption of Local Data
   • Antimalware Protection
     • Advanced Malware Protection
     • AMP and Managed Threat Defense
     • AMP for Endpoints
   • Controlling Network Acces
     • Cisco Network Admission Control
     • Cisco NAC
       • Cisco NAC Components
       • Cisco NAC Functions
       • Cisco NAC Profiler
     • Network Access for Guests
   • Email and Web Security
     • Securing Email and Web
     • Cisco Email Security Appliance
     • Cisco Web Security Appliance
     • Cisco Cloud Web Security