This is Cisco's authorized, self-paced, foundation learning tool for the latest version of the Cisco IOS Network Security (IINS 640-554) exam, required for CCNA Security certification. Using IOS security features and technologies as examples, it brings together all the core knowledge professionals need to design, implement, and monitor comprehensive security policies. The book shows how to utilize the security controls of IOS devices, and offers a functional introduction to Cisco's ASA Adaptive Security Appliances. Readers learn to secure small branch office networks using Cisco IOS security features available through web-based GUIs (Cisco Configuration Professional) and the command-line interface on Cisco routers and switches. In the context of policy implementation, the book covers all these security countermeasures: device protection for routers and switches; identity-aware access control; firewall services; IPS; Layer 2 attack mitigation; and VPNs. This edition's new coverage includes: * Security strategies for borderless networks * Network foundation protection * Spanning Tree, VLANs, and trunking security * IPv6 data plane security * ACL and ASA Firewall updates * IKEv2 and more As an Authorized Self-Study Guide, this book fully reflects the content of the newest version of the Cisco IINS course. Real-world scenarios illustrate key concepts; chapter learning objectives and summaries help focus study; and review questions help readers assess their knowledge

Catherine Paquet is a practitioner and a published author in the field of Internetworking, Network Security and Security Financials.  Catherine has in-depth knowledge of security systems, remote access, and routing technology. She is a Cisco Certified Security Professional and a Cisco Certified Network Professional.  She is also a Certified Cisco Systems Instructor and a Cisco IronPort Security Systems Instructor with Cisco's largest training partner, Global Knowledge Inc.  Her most recent consulting projects include conducting security assessments, performing network designs, configuring and implementing security solutions such as firewalls, virtual private networks, web filters and intrusion prevention solutions.

Recently, on the invitation of Cisco Systems, she visited 22 emerging countries as part of a book tour promoting her manuscript her latest Security book. In 2002 and 2003, Catherine volunteered with the United Nations mission in Kabul, Afghanistan, to train Afghan public servants in the area of networking.

Catherine holds a Bachelor degree from the Royal Military College of St-Jean and a Masters from York University.  Catherine lives in Toronto with her husband.  They have two children both attending university.

Part 1. Networking Security Fundamentals
1. Network Security Concepts and Policies
2. Security Strategy for Borderless Networks

Part 2. Protecting the Network Infrastructure
3. Network Foundation Protection (NFP) and Cisco Configuration Professional (CCP)
4. Securing the Management Plane on Cisco Routers
5. Securing the Data Plane on Cisco Switches
6. Securing the Data Plane in IPv6 Environments

Part 3. Threat Control and Containment
7. Threat Control Strategy
8. Access Control Lists
9. Firewalls

10. Cisco Firewall Solutions: IOS and ASA
11. Intrusion Prevention Systems

Part 4. Secure Connectivity
12. Fundamentals of Cryptography and VPN
13. IPSec Fundamentals
14. Site-to-Site IPsec VPN with Cisco IOS Routers
15. Remote-Access VPN with Cisco ASA Firewalls

A. Answers Appendix