Modules: | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | All |

Modules 1-15: Links

Module 1: Overview of Network Security

1.1 | Overview of Network Security

1.1.1 | National Institute of Standards and Technology Security Division (NIST) http://csrc.nist.gov/ Security Focus http://www.securityfocus.com/ Computer Security Institute
http://www.gocsi.com/

System Administration, Networking, and Security Institute or SANS
http://www.sans.org/newlook/home.htm

Carnegie Mellon Software Engineering Institute or CERT
http://www.cert.org

Cisco Security and VPN
http://www.cisco.com/en/US/netsol/ns110/ns170/net_solution_home.html

1.1.2 | Electronic Privacy Information Center http://www.epic.org/ US Federal Trade Commission http://www.ftc.gov/privacy/ HIPPA
http://dchealth.dc.gov/hipaa/hipaaoverview.shtm

CIPA
http://ftp.fcc.gov/cgb/consumerfacts/cipa.html

1.2 | Vulnerabilities and Threats

1.2.2 | Vulnerability Statistics Report http://www.cisco.com/warp/public/778/security/vuln_stats_02-03-00.html Incident Response http://www.cisco.com/warp/public/707/sec_incident_response.shtml
1.2.3 | Vulnerability Statistics Report http://www.cisco.com/warp/public/778/security/vuln_stats_02-03-00.html Incident Response http://www.cisco.com/warp/public/707/sec_incident_response.shtml
1.2.7 | Cisco Secure Encyclopedia http://www.cisco.com/pcgi-bin/front.x/csec/csecHome.pl Extensive Database of executable Denial of Service files http://www.attrition.org/security/denial/ Miscellaneous
http://www.cert.org/tech_tips/denial_of_service.html
http://www.irchelp.org/irchelp/nuke/
http://www.nwfusion.com/research/dos.html

1.2.8 | Distributed denial of service attacks http://www.cisco.com/warp/public/707/newsflash.html http://staff.washington.edu/dittrich/misc/ddos/ http://www.cert.org/incident_notes/IN-99-07.html
1.2.9 | OSI Basics http://www.rad.com/networks/1994/osi/intro.htm Miscellaneous http://www.insecure.org/stf/smashstack.txt

1.3 | Security Framework and Policy

1.3.3 | RFC 2196 "Site Security Handbook" http://www.ietf.org/rfc/rfc2196.txt A sample security policy for the University of Illinois http://www.aits.uillinois.edu/security/securestandards.html Cisco Related Materials
http://www.cisco.com/warp/public/779/largeent/issues/security/safe.html
http://www.cisco.com/warp/public/126/secpol.html

Sun Microsystems
http://www.sun.com/software/white-papers/wp-security-devsecpolicy

Microsoft
http://www.microsoft.com/technet/security/default.asp

1.4 | Security Products and Solutions

1.4.3 | Cisco http://www.cisco.com/warp/public/cc/pd/iosw/ioft/iofwft/ http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/ Microsoft http://www.microsoft.com/isaserver/

Firewall Certifications
http://www.icsalabs.com

1.4.4 | Security and VPN http://www.cisco.com/en/US/netsol/ns110/ns170/net_solution_home.html
1.4.5 | Intrusion detection http://www.snort.org/ http://www.networkintrusion.co.uk/ids.htm http://iss.net/ http://www.enterasys.com/home.html

1.4.6 | Monitor, manage, and audit http://www.cisco.com/en/US/products/sw/cscowork/ps2330/index.html http://www.networkintrusion.co.uk/scanners.htm http://www.openview.hp.com/ http://www.solarwinds.net/

Module 2: General Router Security

2.1 | General Router and Switch Security

2.1.4 | Passwords http://www.cisco.com/warp/public/474/index.shtml

2.2 | Disable Unneeded Services

2.2.2 | Routing, proxy arp, ICMP http://www.cisco.com/warp/public/474/index.shtml

2.3 | Disable Unneeded Services

2.3.4 | Bogon Reference Page http://www.cymru.com/Bogons/ RFC 1918 http://www.faqs.org/rfcs/rfc1918.html RFC 2827
http://www.faqs.org/rfcs/rfc2827.html

2.4 | Router Management

2.4.3 | Time http://tycho.usno.navy.mil/time.html http://www.eecis.udel.edu/~mills/ntp/servers.html http://www.beaglesoft.com http://www.trusted-time.com/syncserver_s100.asp
http://www.gpsclock.com/specs.html
http://www.absolutetime.com/products/products.htm
http://www.symmetricom.com/

2.4.4 | Security Advisories http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/ products_tech_note09186a0080132a8a.shtml#advisories http://www.cert.org/advisories/ Putty
http://www.chiark.greenend.org.uk/~sgtatham/putty/

WinSCP
http://winscp.vse.cz/eng/download.php

Cisco
http://www.cisco.com/en/US/products/
sw/iosswrel/ps1839/products_feature_guide
09186a0080087b18.html

2.5 | Securing Switches and LAN Access

2.5.2 | http://www.cisco.com/en/US/about/ac123/ac114/ac173/ac222/ about_cisco_packet_feature09186a0080142deb.html http://www.blackhat.com/presentations/bh-usa-02/ bh-us-02-convery-switches.pdf

Module 3: Router ACLs and CBAC

3.2 | Types of IP ACLs

3.2.5 | Configuring Lock-and-Key Security, Dynamic Access Lists http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/ products_configuration_guide_chapter09186a00800d9814.html
3.2.6 | Active and Passive FTP http://www.cisco.com/warp/public/759/ipj_2-3/ipj_2-3_oneb.html

3.4 | Configure CBAC (Task 1 and 2)

3.4.1 | Context Based Access Control Commands: http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121sup/121csum1/121cssec/ssdcbac.pdf
3.4.2 | TCP Performance (PDF File) http://www.cisco.com/en/US/about/ ac123/ac147/ac174/ac196/ about_cisco_ipj_archive_article09186a00800c8417.html

3.6 | Task 4: Define Inspection Rules

3.6.4 | http://www.cisco.com/en/US/products/sw/iosswrel /ps5012/products_feature_guide09186a0080146556.html N2H2 http://www.n2h2.com Websense
http://www.websense.com

3.6.5 | http://www.cisco.com/en/US/products/sw/iosswrel/ ps5012/products_feature_guide09186a0080146558.html

Module 4: Router AAA Security

4.1 | AAA Secure Network Access

4.1.3 | s/key http://www.ietf.org/rfc/rfc1760.txt?number=1760 one-time password http://www.ietf.org/rfc/rfc2289.txt

4.2 | Network Access Server (NAS) AAA Authentication Process

4.2.2 | Kerberos Overview http://web.mit.edu/kerberos/www/

4.4 | AAA Servers Overview and Configuration

4.4.4 | Kerberos Overview http://web.mit.edu/kerberos/www/

4.5 | The Cisco IOS Firewall Authentication Proxy

4.5.4 | http://www.cisco.com/en/US/products/sw/iosswrel/ ps5012/products_feature_guide09186a0080146562.html

Module 5: Router Intrusion Detection, Monitoring, and Management

5.1 | IOS Firewall IDS

5.1.1 | IDS Sans- http://www.sans.org/resources/idfaq/ Ceria- http://www.cerias.purdue.edu/coast/intrusion-detection/ Talisker- http://www.networkintrusion.co.uk/index.htm IDS Sensors:

Network Based
Cisco Products and Services- http://www.cisco.com/en/US/
products/hw/vpndevc/ps4077/index.html

Host Based
Cisco Products and Services- http://www.cisco.com/en/US/
products/hw/vpndevc/ps976/index.html

5.2 | Setting up the Cisco IOS Firewall IDS

5.2.3 | Cisco Intrusion Detection System (IDS) 4200 Sensors http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/index.html Cisco Catalyst 6500 Series Intrusion Detection System (IDSM-2) Services Module http://www.cisco.com/en/US/products/hw/modules/ps2706/ps5058/index.html

5.3 | Monitoring with Logging and Syslog

5.3.5 | The BSD syslog Protocol http://www.ietf.org/rfc/rfc3164.txt Reliable Delivery for syslog http://www.ietf.org/rfc/rfc3195.txt Carnegie Mellon
http://www.cert.org/security-improvement/implementations/i041.08.html

Security Issues with Syslog
IETF
http://www.employees.org/~lonvick/index.shtml

5.3.8 | Kiwi Enterprises http://www.kiwisyslog.com/products.htm MikroTik Utilities http://www.mt.lv/3index.html#utils Mac Netlogger
http://www.laffeycomputer.com/netlogger.html
ClassicalGuitar.net
http://www.classicalguitar.net/brian/apps/syslogd/
Winsyslog
http://www.winsyslog.com/en/

5.4 | SNMP

5.4.2 | http://www.cisco.com/en/US/tech/tk648/tk362/ technologies_tech_note09186a0080094489.shtml
5.4.3 | SNMP Link.org http://www.snmplink.org/SNMPv3.html CiscoWorks VPN Solutions Center http://www.cisco.com/en/US/products/sw/netmgtsw/ps2327/index.html AdventNet SNMP Utilities
http://www.adventnet.com/products/snmputilities/index.html

MG-SOFT (supports SNMPv3)
http://www.mg-soft.si/mgMibBrowserPE.html

SNMP Research International
http://www.snmp.com/products/enterpol.html

HP Openview
http://www.openview.hp.com

5.4.4 | http://www.cisco.com/en/US/products/sw/iosswrel/ ps1830/products_feature_guide09186a00800878fa.html http://www.cisco.com/en/US/products/sw/iosswrel/ ps1839/products_command_reference_chapter09186a008010a3f8.html
5.4.5 | SNMP Trap Watcher http://www.bttsoftware.co.uk/snmptrap.html SolarWinds.net http://solarwinds.net/Download-Tools.htm Loroit
http://www.llecointe.com/downloads.html

MRTG
http://www.mrtg.org/

Dartware
http://www.dartware.com/snmpwatcher/
index.html

Net-SNMP
http://net-snmp.sourceforge.net/

SimpleWeb
http://www.simpleweb.org/

SNMPLink
http://www.snmplink.org/

5.5 | Testing and Security Validation

5.5.3 | Software Center http://www.cisco.com/public/sw-center/index.shtml
5.5.4 | VA Linux http://ncat.sourceforge.net/ Nessus http://www.nessus.org/ NMAP
http://www.insecure.org/nmap/
RAT - Center for Internet Security
http://www.cisecurity.org/

5.6 | Security Device Manager (SDM)

5.6.2 | http://www.cisco.com/en/US/products/sw/ secursw/ps5318/products_user_guide_list.html
5.6.3 | http://www.cisco.com/en/US/products/sw/secursw/ ps5318/prod_installation_guide09186a008017dcd0.html#92034

Module 6: Router Site-to-site VPN

6.2 | IOS Cryptosystem

6.2.2 | Books http://williamstallings.com Cryptography http://world.std.com/~franl/crypto/
6.2.3 | RSA Cryptography FAQ http://www.rsasecurity.com/rsalabs/faq/

6.4 | Site-to-site IPSec VPN Using Pre-shared Keys

6.4.1 | Tasks to configure IPSec http://www.cisco.com/en/US/products/ sw/iosswrel/ps1828/ products_configuration_ guide_chapter09186a00800ca56c.html

6.5 | Digital Certificates

6.5.2 | http://www.ietf.org/
6.5.3 | CA Servers www.entrust.com www.verisign.com www.baltimore.com

Module 7: Router Remote Access VPN

7.1 | Remote Access VPN

7.1.1 | Cisco http://www.cisco.com/en/US/netsol/ns110/ns170 /ns171/ns125/networking_solutions_package.html

7.3 | Remote Access VPN

7.3.1 | Cisco http://www.cisco.com/en/US/products/sw/ secursw/ps2308/index.html

7.4 | VPN Enterprise Management

7.4.4 | VMS http://www.cisco.com/en/US/products/sw/ cscowork/ps2330/products_quick_start_list.html

Module 8: PIX Security Appliance

8.1 | Introduction to Firewalls

8.1.3 | The firewall marketplace http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/index.html www.checkpoint.com http://www.microsoft.com/isaserver/ http://www.linux-firewall-tools.com/linux/#a_ref_firewall
www.netscreen.com
www.sonicwall.com
www.watchguard.com

8.1.4 | http://csrc.nist.gov/cryptval/ http://www.commoncriteria.org http://www.icsalabs.com http://niap.nist.gov http://www.cisco.com/go/securitycert

8.2 | The Cisco PIX Security Appliance

8.2.9 | License types and VPN capabilities http://www.cisco.com/kobayashi/sw-center/ciscosecure/pix.shtml

Module 9: PIX Security Appliance Translations and Connections

9.1 | Transport Protocols

9.1.1 | RFC 1180 http://www.faqs.org/rfcs/rfc1180.html

Module 10: PIX Security Appliance ACLs

10.2 | Using ACLs

10.2.5 | Ping www.Websense.com/ www.n2h2.com/ http://www.securecomputing.com

Module 11: PIX Security Appliance AAA

| There are no links for this module. |

Module 12: PIX Advanced Protocols and Intrusion Detection

12.3 | Attack Guards

12.3.1 | smtp commands http://www.ietf.org/rfc/rfc0821.txt http://www.cisco.com/en/US/products/hw/vpndevc/ ps2030/products_tech_note09186a00800b2ecb.shtml

12.5 | Shunning

12.5.1 | IDS Sensor information http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/index.html http://www.cisco.com/en/US/products/hw/modules/ps2706/ps5058/index.html

12.6 | Syslog Configuration on the PIX

12.6.2 | http://www.cisco.com/en/US/products/sw/secursw/ps2120/ products_system_message_guide_chapter09 186a00800891c4.html#1020397

12.7 | SNMP

12.7.2 | MIB tree and further information on SNMP http://www.cisco.com/univercd/cc/td/doc/product/ Webwebscale/css/advcfggd/snmp.htm

Module 13: PIX Failover and System Maintenance

13.4 | System Maintenance via Remote Access

13.4.3 | Cisco − How To Perform Authentication and Enabling on the Cisco Secure PIX Security Appliance (5.2 Through 6.2) http://www.cisco.com/warp/public/110/authtopix.pdf clear ssh: http://www.cisco.com/en/US/products/sw/secursw/ps2120/ products_command_reference_chapter09186a00800ec9eb.html#xtocid19

13.6 | PIX Security Appliance Password Recovery and Upgrades

13.6.1 | CCO password recovery procedures http://www.cisco.com/warp/public/474/index.shtml
13.6.2 | http://www.cisco.com/en/US/products/hw/vpndevc/ ps2030/products_tech_note09186a0080094a5d.shtml http://www.cisco.com/en/US/products/hw/vpndevc ps2030/products_tech_note09186a0080094a5d.shtml

Module 14: PIX Security Appliance VPN

14.1 | The PIX Security Appliance Enables a Secure VPN

14.1.5 | IPSec standards supported by the PIX Security Appliance http://www.ietf.org/html.charters/IPSec-charter.html

Module 15: PIX Security Appliance Management

15.2 | The Cisco PIX Device Manager

15.2.3 | Sun Microsystems - Java Software http://java.sun.com/getjava/

15.6 | Using PDM to Create Remote Access VPNs

15.6.1 | The PIX Security Appliance for unity and Cisco VPN clients http://www.cisco.com/en/US/products/sw /netmgtsw/ps2032/index.html

| Close Window |

| All contents copyright © 2002 Cisco Systems, Inc. All rights reserved.