Cisco PIX Firewalls

This completely updated bestseller covers Cisco PIX Security Appliance Software Version 7.0, as well as the entire family of Cisco PIX 500 Series Firewalls. The book clearly explains how to leverage the integrated remote access and site-to-site VPN capabilities found in PIX Firewalls. It also illustrates how to securely extend your network to tele-workers, remote and satellite offices, business partners, suppliers, and customers. The authors thoroughly document all enhancements to PIX 7.0, including virtual LAN (VLAN)-based virtual interfaces, OSPF Dynamic Routing over VPNs, Secure Hypertext Transfer Protocol (HTTPS) Authentication Proxy, Local User Authentication Database for Network and VPN Access, Advanced Encryption Standard (AES), Support for VPN Accelerator Card+ (VAC+), DHCP Server Support on Multiple Interfaces. Special attention is paid to intrusion protection configuration.

• Create Multiple Security ContextsCreate virtual firewalls within a single appliance, each with its own set of security policies, logical interfaces, and administrative domain.

• Utilize PIX 7.0's Advanced Active Failover DesignCreate an easy-to-manage, high-availability solution using geographically separated appliances, that continuously synchronize their connection state and device configuration data.

• Sleep Easy with Scheduled System ReloadsSchedule PIX security appliance reloads at specific times to better manage network downtime and remote-access VPN connections more efficiently.

• Secure Communications with SSHv2 and Secure Copy ProtocolUse SSHv2 to securely manage PIX appliances and begin using SCP for secure file transfer between appliances.

• Take Advantage of the New ASDMWith ASDM all you need is a Web browser to deploy, configure, and monitor a PIX appliance, or to setup a VPN.

• Deploy OSPF Dynamic RoutingUse OSPF to detect service outages and automatically reroute your network and VPN traffic for optimal performance and flexibility.

• Realize the Benefits of IPv6PIX 7.0 provides IPv6-enabled inspection services for HTTP, FTP, SMTP, ICMP, TCP, and UDP.

• Manage and Contain Malicious AttacksUse your PIX firewall to protect against SYN Floods, malicious fragmentation of traffic, and excessive connection establishment by configuring limits.

• Download the Bonus, Complete E-Book for PIX Software 6.xIf you are migrating from 6.x or running a mixed environment, download a FREE copy of Syngress's best-selling PIX 6.x book.

Your Solutions Membership Gives You Access to:

A comprehensive FAQ page that consolidates all of the key points of this book into an easy-to-search Web page

"From the Author" Forum where the authors post timely updates and links to related sites

Downloadable chapters from these best-selling books:

Configuring NetScreen Firewalls

Dr. Tom Shinder's Configuring ISA Server 2004

Microsoft Log Parser Toolkit

Google Hacking for Penetration Testers

TABLE OF CONTENTS

Introduction to Security and Firewalls

Introduction to PIX Firewalls

PIX Firewall Operations

Adaptive Security Device Manager

Application Inspection

Filtering, Intrusion Detection, and Attack Management

Services

Configuring Authentication, Authorization, and Accounting

PIX Firewall Management

Configuring Virtual Private Networking

Configuring Failover

Troubleshooting and Performance Monitoring