en CCNAS v11 ch01 modern network security threats

... information to it Rename the file and save it to the Lab Answers folder on your desktop for discussion 16 Module 3: Identifying Threats to Network Security Lab A: Identifying Threats to Network Security ... the module iii iv Module 3: Identifying Threats to Network Security How to Teach This Module This section contains information that will he...

Ngày tải lên: 21/12/2013, 19:15

... wired and wireless networks Security Threats in Mobile Ad Hoc Networks Chapter Introduction Although mobile ad hoc networks have several advantages over the traditional wired networks, on the other ... overwhelmed 21 Security Threats in Mobile Ad Hoc Networks Chapter Security Threats in Network Layer 6.2.2 Routing Cache Poisoning Attack Routing cache pois...

Ngày tải lên: 16/01/2014, 16:33

... o n to De ep Packet Inspection2 PAGE 21 www.esoft.com SoftPaks Desktop Anti-Virus / Anti-Spyware This easy -to- deploy SoftPak, which combines full Anti-Virus and Anti-Spyware protection into a ... Deep Packet Inspection (DPI) technology, where the appliance has the brains - and the horsepower- to inspect every byte of every packet even across multiple thousands of str...

Ngày tải lên: 14/02/2014, 16:20

... words Use hardware and software firewall Use protection software against trojan, spyware, viruses and other malwares Carefully handle emails, usually viruses, spyware and other malware are distributed ... destination host and can also inject any type of false data MITM attacks can affect on availability, confidentiality, integrity and authenticity of data Strong cryptography can...

Ngày tải lên: 23/07/2014, 00:25

... 20 01 January 20 03 August 20 03 August 20 03 November 20 03 January 20 04 April 20 04 August 20 05 January 20 06 January 20 07 20 07 June 20 08 July 20 09 June 20 11 September 20 12 Examples of other worms ... network security professionals manage the constantly evolving threats to networks Page | 1 .2. 1.3 Page 1.1.1.3 Evolution of Network Security Tools The evol...

Ngày tải lên: 19/11/2014, 19:54

... wide-open world of the Internet, the networks of today are more open © 2012 Cisco and/or its affiliates All rights reserved Threats • There are four primary classes of threats to network security: ... affiliates All rights reserved 31 Trends Driving Network Security • Increase of network attacks • Increased sophistication of attacks • Increased dependence on the network • Wirel...

Ngày tải lên: 12/10/2015, 02:40

... be utilized: – Enforce minimum password length: security passwords min-length – Disable unattended connections: exec-timeout – Encrypt config file passwords: service password-encryption © 2012 ... occurs and when Authenticate access – Ensure that access is granted only to authenticated users, groups, and services – Limit the number of failed login attempts and the time between logins © ... re...

Ngày tải lên: 12/10/2015, 02:43

... auxiliary, and console login, exec, and enable commands Packet (interface mode) Dial-up and VPN access including asynchronous and ISDN (BRI and PRI) ppp and network commands © 2012 Cisco and/ or its ... AAA Accounting Remote Client Cisco Secure ACS Server AAA Router 1.When a user has been authenticated, the AAA accounting process generates a start message to begin the accoun...

Ngày tải lên: 12/10/2015, 02:46

... statement is added to the end Without sequence numbers the only way to add a statement between existing entries was to delete the ACL and recreate it • • Likewise, the only way to delete an entry ... to fully implement a security policy Order of statements: – ACLs have a policy of first match; when a statement is matched, the list is no longer examined – Ensure that statements at the top ......

Ngày tải lên: 12/10/2015, 02:52

... Event Monitoring and Management There are two key functions of event monitoring and management: Real-time event monitoring and management Analysis based on archived information (reporting) Event ... Features Sensors are connected to network segments A single sensor can monitor many hosts Sensors are network appliances tuned for intrusion detection analysis The operating system is “hardened....

Ngày tải lên: 12/10/2015, 02:54

... the frames to the wrong VLAN – The first switch strips the first tag off the frame and forwards the frame – The second switch then forwards the packet to the destination based on the VLAN identifier ... managing online users The Cisco NAM manages the Cisco NAS, which is the enforcement component of the Cisco NAC Appliance Cisco NAC Appliance Agent (NAA) – – Optiona...

Ngày tải lên: 12/10/2015, 02:56

... reserved Authentication • Data nonrepudiation is a similar service that allows the sender of a message to be uniquely identified • This means that a sender / device cannot deny having been the source ... Cipher • When Julius Caesar sent messages to his generals, he didn't trust his messengers • He encrypted his messages by replacing every letter: – A with a D – B with an E – and so on • His g...

Ngày tải lên: 12/10/2015, 02:58

... Conventional Private Networks © 2012 Cisco and/or its affiliates All rights reserved 15 Virtual Private Networks © 2012 Cisco and/or its affiliates All rights reserved 16 VPNs • A Virtual Private Network ... does not provide confidentiality (encryption) – It is appropriate to use when confidentiality is not required or permitted – All text is transported unencrypted • It only en...

Ngày tải lên: 12/10/2015, 03:02

... username scpADMIN privilege 15 password scpPa55W04D ip domain-name scp.cisco.com crypto key generate rsa general-keys modulus 1024 aaa new-model aaa authentication login default local aaa authorization ... steps: – Step Enable AAA with the aaa new-model global configuration command – Step Define a named list of authentication methods, with the aaa authentication login {default |list-name} m...

Ngày tải lên: 12/10/2015, 03:06

... the pre-installed licenses creates a permanent license – – The permanent license is activated by installing a permanent activation key using the activation-key command Only one permanent license ... conf t ciscoasa(config)# hostname CCNAS- ASA CCNAS- ASA(config)# domain-name ccnasecurity.com CCNAS- ASA(config)# enable password class CCNAS- ASA(config)# passwd cisco CCNAS- ASA(con...

Ngày tải lên: 12/10/2015, 03:09