Cisco ASA All-in-one Next-Generation Firewall, IPS, and VPN Services

Jazib Frahim, CCIE No. 5459, is a Principal Engineer in the Global Security Services Practice at Cisco. He has been with Cisco for over 15 years, with a focus on cyber-security and emerging security technologies. Jazib is also responsible for guiding customers in

the design and implementation of security solutions and technologies in their networks with a focus on network security. He leads a team of solutions architects to guide them through the lifecycle of services and solutions development. Jazib has also been engaged

in the development of a number of customer-focused services, such as managed threat defense, network-based identity, bring-your-own-device (BYOD), and many others. Jazib holds a bachelor’s degree in computer engineering from Illinois Institute of

Technology and a master’s degree in business administration (MBA) from North Carolina State University. In addition to CISSP, Jazib also holds two CCIEs, one in routing and switching and the other in security. He has presented at many industry events, such as Cisco Live, Interop, and ISSA, on multiple occasions. He has also authored and coauthored numerous technical documents, whitepapers, and books, including the following Cisco Press titles:

¿ Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

¿ Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance, Second Edition

¿ Cisco Network Admission Control, Volume II: NAC Deployment and Troubleshooting

¿ SSL Remote Access VPNs

Omar Santos, CISSP No. 463598 is a Senior Incident Manager of Cisco’s Product Security Incident Response Team (PSIRT), where he mentors and leads engineers and incident managers during the investigation and resolution of security vulnerabilities in all Cisco products. Omar has designed, implemented, and supported numerous secure networks for Fortune 500 companies and the U.S. government. Prior to his current role, he was a technical leader within the World Wide Security Practice and Cisco’s Technical Assistance Center (TAC), where he taught, led, and mentored many engineers within both organizations. Omar is an active member of the security community, where he leads several industrywide initiatives and standards bodies. His active role helps businesses, academic institutions, state and local law enforcement agencies, and other participants that are dedicated to increasing the security of the critical infrastructure. Omar has delivered numerous technical presentations at conferences and to Cisco customers and partners, as well as many C-level executive presentations to many organizations. He has authored numerous whitepapers, articles, and security configuration guidelines and best practices, and has also authored or coauthored the following Cisco Press books:

¿ Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

¿ Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security

¿ Cisco Network Admission Control, Volume II: NAC Deployment and Troubleshooting

¿ End-to-End Network Security: Defense-in-Depth

Andrew Ossipov, CCIE No. 18483 and CISSP No. 344324, is currently a Technical Marketing Engineer at Cisco with primary concentration on firewall, intrusion prevention, and other Cisco Data Center Security solutions. With over 15 years of networking

experience, Andrew previously worked with LAN switching, routing protocol, and network data storage technologies and performed academic research in the area of VoIP. At Cisco, Andrew is involved in a broad range of activities that include solving customers’ technical problems of the highest complexity, architecting features and products, and defining the future direction of the product portfolio. He is an inventor and co-inventor of multiple pending cross-technology patents. Andrew received his bachelor of science in computer engineering and master of science in electrical engineering degrees from Wichita State University.

Part I Product Overview
1. Introduction to Security Technologies
2. Cisco ASA Product and Solution Overview
3. Licensing
4. Initial Setup
5. System Maintenance
6. IPv6 Support

Part II Firewall Technology
7. Controlling Network Access
8. Network Address Translation
9. ASA IP Routing
10. Multicast Routing
11. Authentication, Authorization, and Accounting (AAA) Services
12. ASA Application Inspection (Fixup protocols)
13. Virtualization
14. Transparent Firewalls
15. Failover and Redundancy
16. Quality of Service (QoS)

Part III Intrusion Prevention System (IPS) Solution
17. Configuring and Troubleshooting Intrusion Prevention System (IPS) Technologies
18. Tuning and Monitoring (IPS)

Part V Virtual Private Network (VPN) Solutions
19. Site-to-site IPSec VPNs
20. IPSec Remote Access VPNs
21. Configuring and Troubleshooting Public Key Infrastructure (PKI)
22. Clientless Remote Access SSL VPN (104 pages)
23. Client-based Remote Access SSL VPN

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.