Network Security 1 and 2 Companion Guide (Cisco Networking Academy)

by Rufi, Antoon

• ISBN13: 9781587131622
• ISBN10: 1587131625
• Edition: CD
• Format: Hardcover w/CD
• Copyright: 2007-01-01
• Publisher: Cisco Press

Summary

The completely revised, updated and only authorized textbook for the Cisco Networking Academy Program Network Security 1 and 2 course.

Table of Contents

Course 1
Vulnerabilities, Threats, and Attacks	1	(50)
Key Terms	1	(1)
Introduction to Network Security	2	(15)
The Need for Network Security	3	(2)
Identifying Potential Risks to Network Security	5	(1)
Open Versus Closed Security Models	6	(4)
Trends Driving Network Security	10	(4)
Information Security Organizations	14	(3)
Introduction to Vulnerabilities, Threats, and Attacks	17	(6)
Vulnerabilities	17	(3)
Threats	20	(1)
Attacks	21	(2)
Attack Examples	23	(16)
Reconnaissance Attacks	24	(3)
Access Attacks	27	(4)
Denial-of-Service (DoS) Attacks	31	(2)
Masquerade/IP Spoofing Attacks	33	(1)
Distributed Denial-of-Service Attacks	34	(2)
Malicious Code	36	(3)
Vulnerability Analysis	39	(8)
Policy Identification	40	(1)
Network Analysis	41	(4)
Host Analysis	45	(1)
Analysis Tools	46	(1)
Summary	47	(1)
Check Your Understanding	48	(3)
Security Planning and Policy	51	(60)
Key Terms	51	(1)
Discussing Network Security and Cisco	52	(7)
The Security Wheel	52	(4)
Network Security Policy	56	(3)
Endpoint Protection and Management	59	(4)
Host- and Server-Based Security Components and Technologies	59	(3)
PC Management	62	(1)
Network Protection and Management	63	(11)
Network-Based Security Components and Technologies	63	(6)
Network Security Management	69	(5)
Security Architecture	74	(9)
Security Architecture (SAFE)	74	(2)
The Cisco Self-Defending Network	76	(1)
Secure Connectivity	76	(1)
Threat Defense	77	(2)
Cisco Integrated Security	79	(2)
Plan, Design, Implement, Operate, Optimize (PDIOO)	81	(2)
Basic Router Security	83	(24)
Control Access to Network Devices	83	(4)
Remote Configuration Using SSH	87	(2)
Router Passwords	89	(2)
Router Privileges and Accounts	91	(2)
Cisco IOS Network Services	93	(6)
Routing, Proxy ARP, and ICMP	99	(3)
Routing Protocol Authentication and Update Filtering	102	(2)
NTP, SNMP, Router Name, DNS	104	(3)
Summary	107	(1)
Check Your Understanding	108	(3)
Security Devices	111	(108)
Device Options	112	(8)
Cisco IOS Firewall Feature Set	113	(1)
Creating a Customized Firewall	114	(1)
PIX Security Appliance	115	(2)
Adaptive Security Appliance	117	(1)
Finesse Operating System	118	(1)
The Adaptive Security Algorithm	119	(1)
Firewall Services Module	119	(1)
Using Security Device Manager	120	(10)
Using the SDM Startup Wizard	122	(2)
SDM User Interface	124	(1)
SDM Wizards	125	(1)
Using SDM to Configure a WAN	126	(1)
Using the Factory Reset Wizard	126	(1)
Monitor Mode	127	(3)
Introduction to the Cisco Security Appliance Family	130	(10)
PIX 501 Security Appliance	130	(1)
PIX 506E Security Appliance	131	(1)
PIX 515E Security Appliance	131	(1)
PIX 525 Security Appliance	131	(1)
PIX 535 Security Appliance	132	(1)
Adaptive Security Appliance Models	132	(3)
PIX Security Appliance Licensing	135	(1)
PIX VPN Encryption License	136	(1)
Security Contexts	136	(1)
PIX Security Appliance Context Licensing	136	(1)
ASA Security Appliance Licensing	137	(1)
Expanding the Features of the PIX 515E	138	(1)
Expanding the Features of the PIX 525	138	(1)
Expanding the Features of the PIX 535	139	(1)
Expanding the Features of the Adaptive Security Appliance Family	140	(1)
Getting Started with the PIX Security Appliance	140	(24)
Configuring the PIX Security Appliance	141	(1)
The help Command	142	(1)
Security Levels	142	(2)
Basic PIX Security Appliance Configuration Commands	144	(5)
Additional PIX Security Appliance Configuration Commands	149	(6)
Examining the PIX Security Appliance Status	155	(5)
Time Setting and NTP Support	160	(1)
Syslog Configuration	161	(3)
Security Appliance Translations and Connections	164	(21)
Transport Protocols	164	(2)
NAT	166	(2)
Dynamic Inside NAT	168	(1)
Two Interfaces with NAT	168	(1)
Three Interfaces with NAT	169	(1)
PAT	170	(3)
Augmenting a Global Pool with PAT	173	(1)
The static Command	173	(3)
The nat 0 Command	176	(1)
Connections and Translations	177	(8)
Manage a PIX Security Appliance with Adaptive Security Device Manager	185	(8)
ASDM Operating Requirements	186	(2)
Prepare for ASDM	188	(2)
Using ASDM to Configure the PIX Security Appliance	190	(3)
PIX Security Appliance Routing Capabilities	193	(16)
Virtual LANs	193	(5)
Static and RIP Routing	198	(3)
OSPF	201	(4)
Multicast Routing	205	(4)
Firewall Services Module Operation	209	(7)
FWSM Requirements	211	(1)
Getting Started with the FWSM	211	(1)
Verify FWSM Installation	212	(3)
Configure the FWSM Access Lists	215	(1)
Using PDM with the FWSM	215	(1)
Resetting and Rebooting the FWSM	216	(1)
Summary	216	(1)
Check Your Understanding	217	(2)
Trust and Identity Technology	219	(26)
Key Terms	219	(1)
AAA	220	(5)
TACACS	220	(2)
RADIUS	222	(1)
Comparing TACACS+ and RADIUS	223	(2)
Authentication Technologies	225	(7)
Static Passwords	225	(1)
One-Time Passwords	226	(1)
Token Cards	227	(1)
Token Card and Server Methods	227	(1)
Digital Certificates	228	(3)
Biometrics	231	(1)
Identity Based Networking Services (IBNS)	232	(3)
802.1x	234	(1)
Wired and Wireless Implementations	235	(1)
Network Admission Control (NAC)	236	(5)
NAC Components	236	(2)
NAC Phases	238	(1)
NAC Operation	239	(1)
NAC Vendor Participation	240	(1)
Summary	241	(1)
Check Your Understanding	242	(3)
Cisco Secure Access Control Server	245	(28)
Key Terms	245	(1)
Cisco Secure Access Control Server Product Overview	246	(11)
Authentication and User Databases	248	(1)
The Cisco Secure ACS User Database	249	(1)
Keeping Databases Current	250	(2)
Cisco Secure ACS for Windows Architecture	252	(1)
How Cisco Secure ACS Authenticates Users	253	(3)
User-Changeable Passwords	256	(1)
Configuring RADIUS and TACACS+ with Cisco Secure ACS	257	(5)
Installation Steps	257	(2)
Administering Cisco Secure ACS for Windows	259	(2)
Troubleshooting	261	(1)
Enabling TACACS+	262	(3)
Verifying TACACS+	265	(3)
Failure	265	(1)
Pass	266	(2)
Configuring RADIUS	268	(1)
Summary	269	(1)
Check Your Understanding	270	(3)
Configure Trust and Identity at Layer 3	273	(38)
Key Terms	273	(1)
Cisco IOS Firewall Authentication Proxy	274	(9)
Authentication Proxy Operation	274	(1)
Supported AAA Servers	275	(1)
AAA Server Configuration	276	(1)
AAA Configuration	277	(1)
Allow AAA Traffic to the Router	278	(2)
Authentication Proxy Configuration	280	(2)
Test and Verify Authentication Proxy	282	(1)
Introduction to PIX Security Appliance AAA Features	283	(4)
PIX Security Appliance Authentication	283	(1)
PIX Security Appliance Authorization	284	(1)
PIX Security Appliance Accounting	285	(1)
AAA Server Support	285	(2)
Configure AAA on the PIX Security Appliance	287	(21)
PIX Security Appliance Access Authentication	287	(1)
Interactive User Authentication	287	(3)
The Local User Database	290	(1)
Authentication Prompts and Timeout	291	(1)
Cut-Through Proxy Authentication	292	(2)
Authentication of Non-Telnet, -FTP, or -HTTP Traffic	294	(2)
Tunnel User Authentication	296	(1)
Authorization Configuration	297	(2)
Downloadable ACLs	299	(2)
Accounting Configuration	301	(2)
Console Session Accounting	303	(1)
Command Accounting	304	(1)
Troubleshooting the AAA Configuration	304	(4)
Summary	308	(1)
Check Your Understanding	309	(2)
Configure Trust and Identity at Layer 2	311	(28)
Key Terms	311	(1)
Identity Based Networking Services (IBNS)	312	(16)
Features and Benefits	313	(1)
IEEE 802.1x	313	(7)
Selecting the Correct EAP	320	(1)
Cisco LEAP	321	(2)
IBNS and Cisco Secure ACS	323	(2)
ACS Deployment Considerations	325	(2)
Cisco Secure ACS RADIUS Profile Configuration	327	(1)
Configuring 802.1x Port-Based Authentication	328	(7)
Enabling 802.1x Authentication	330	(2)
Configuring the Switch-to-RADIUS Server Communication	332	(1)
Enabling Periodic Reauthentication	333	(1)
Manually Reauthenticating a Client Connected to a Port	334	(1)
Enabling Multiple Hosts	334	(1)
Resetting the 802.1x Configuration to the Default Values	334	(1)
Displaying 802.1x Statistics and Status	335	(1)
Summary	335	(1)
Check Your Understanding	336	(3)
Configure Filtering on a Router	339	(34)
Key Terms	339	(1)
Filtering and Access Lists	340	(4)
Packet Filtering	340	(2)
Stateful Filtering	342	(2)
URL Filtering	344	(1)
Cisco IOS Firewall Context-Based Access Control	344	(5)
CBAC Packets	345	(1)
Cisco IOS ACLs	345	(1)
How CBAC Works	346	(2)
CBAC-Supported Protocols	348	(1)
Configuring Cisco IOS Firewall Context-Based Access Control	349	(21)
CBAC Configuration Tasks	349	(1)
Prepare for CBAC	350	(2)
Setting Audit Trails and Alerts	352	(1)
Setting Global Timeouts	353	(1)
Setting Global Thresholds	354	(1)
Half-Open Connection Limits by Host	355	(1)
System-Defined Port-to-Application Mapping	356	(1)
User-Defined PAM	357	(1)
Defining Inspection Rules for Applications	358	(2)
Defining Inspection Rules for IP Fragmentation	360	(1)
Defining Inspection Rules for ICMP	361	(2)
Applying Inspection Rules and ACLs to Interfaces	363	(4)
Testing and Verifying CBAC	367	(2)
Configuring a Cisco IOS Firewall Using SDM	369	(1)
Summary	370	(1)
Check Your Understanding	371	(2)
Configure Filtering on a PIX Security Appliance	373	(62)
Key Terms	373	(1)
Configuring ACLs and Content Filters	374	(16)
PIX Security Appliance ACLs	374	(2)
Configuring ACLs	376	(1)
ACL Line Numbers	377	(1)
The icmp Command	378	(1)
nat 0 ACLs	379	(2)
Turbo ACLs	381	(1)
Using ACLs	382	(4)
Malicious Code Filtering	386	(2)
URL Filtering	388	(2)
Object Grouping	390	(10)
Getting Started with Object Groups	392	(1)
Configuring Object Groups	392	(2)
Nested Object Groups	394	(4)
Managing Object Groups	398	(2)
Configure a Security Appliance Modular Policy	400	(7)
Configuring a Class Map	402	(2)
Configure a Policy Map	404	(2)
Configuring a Service Policy	406	(1)
Configuring Advanced Protocol Inspection	407	(24)
Default Traffic Inspection and Port Numbers	408	(2)
FTP Inspection	410	(4)
FTP Deep Packet Inspection	414	(1)
HTTP Inspection	415	(2)
Protocol Application Inspection	417	(4)
Multimedia Support	421	(2)
Real-Time Streaming Protocol (RTSP)	423	(3)
Protocols Required to Support IP Telephony	426	(2)
DNS Inspection	428	(3)
Summary	431	(1)
Check Your Understanding	432	(3)
Configure Filtering on a Switch	435	(20)
Key Terms	435	(1)
Introduction to Layer 2 Attacks	436	(1)
MAC Address, ARP, and DHCP Vulnerabilities	436	(9)
Mitigating CAM Table Overflow Attacks	438	(2)
MAC Spoofing: Man-in-the-Middle Attacks	440	(1)
ARP Spoofing	441	(1)
DHCP Snooping	442	(2)
Dynamic ARP Inspection	444	(1)
DHCP Starvation Attacks	444	(1)
VLAN Vulnerabilities	445	(4)
VLAN Hopping Attacks	446	(2)
Private VLAN Vulnerabilities	448	(1)
Defending Private VLANs	449	(1)
Spanning Tree Protocol Vulnerabilities	449	(2)
Preventing Spanning Tree Protocol Manipulation	450	(1)
Summary	451	(2)
Check Your Understanding	453	(2)
Course 2
Intrusion Detection and Prevention Technology	455	(14)
Key Terms	455	(1)
Introduction to Intrusion Detection and Prevention	456	(4)
Network Based Versus Host Based	456	(2)
Types of Alarms	458	(2)
Inspection Engines	460	(2)
Signature-Based Detection	460	(1)
Types of Signatures	461	(1)
Anomaly-Based Detection	462	(1)
Cisco IDS and IPS Devices	462	(4)
Cisco Integrated Solutions	463	(2)
Cisco IPS 4200 Series Sensors	465	(1)
Summary	466	(1)
Check Your Understanding	467	(2)
Configure Network Intrusion Detection and Prevention	469	(26)
Key Terms	469	(1)
Cisco IOS Intrusion Prevention System (IPS)	470	(9)
Origin of Cisco IOS IPS	472	(1)
Router Performance	472	(1)
Cisco IOS IPS Signatures	472	(2)
Cisco IOS IPS Configuration Tasks	474	(5)
Configure Attack Guards on the PIX Security Appliance	479	(7)
Mail Guard	479	(1)
DNS Guard	480	(1)
FragGuard and Virtual Reassembly	481	(2)
AAA Flood Guard	483	(1)
SYN Flood Guard	483	(1)
TCP Intercept	484	(1)
SYN Cookies	485	(1)
Connection Limits	486	(1)
Configuring Intrusion Prevention on the PIX Security Appliance	486	(5)
Intrusion Detection and the PIX Security Appliance	486	(2)
Configuring Intrusion Detection	488	(1)
Configuring IDS Policies	489	(2)
Configure Shunning on the PIX Security Appliance	491	(1)
Summary	492	(1)
Check Your Understanding	493	(2)
Encryption and VPN Technology	495	(46)
Key Terms	495	(1)
Encryption Basics	496	(4)
Symmetrical Encryption	496	(1)
Asymmetrical Encryption	497	(2)
Diffie-Hellman	499	(1)
Integrity Basics	500	(5)
Hashing	500	(1)
Hashed Method Authentication Code (HMAC)	501	(1)
Digital Signatures and Certificates	502	(3)
Implementing Digital Certificates	505	(7)
Certificate Authority Support	505	(2)
Simple Certificate Enrollment Protocol (SCEP)	507	(1)
CA Servers	508	(3)
Enroll a Device with a CA	511	(1)
VPN Topologies	512	(2)
Site-to-Site VPNs	512	(1)
Remote-Access VPNs	513	(1)
VPN Technologies	514	(7)
WebVPN	515	(2)
Tunneling Protocols	517	(3)
Tunnel Interfaces	520	(1)
IPsec	521	(16)
Authentication Header (AH)	523	(1)
Encapsulating Security Payload (ESP)	524	(1)
Tunnel and Transport Modes	525	(3)
Security Associations	528	(1)
Five Steps of IPsec	529	(3)
Internet Key Exchange (IKE)	532	(2)
IKE and IPsec	534	(1)
Cisco VPN Solutions	535	(2)
Summary	537	(1)
Check Your Understanding	538	(3)
Configure Site-to-Site VPN Using Pre-Shared Keys	541	(42)
Key Terms	541	(10)
IPsec Encryption with Pre-Shared Keys	542	(2)
Planning the IKE and IPsec Policy	544	(1)
Step 1: Determine ISAKMP (IKE Phase 1) Policy	544	(3)
Step 2: Determine IPsec (IKE Phase 2) Policy	547	(1)
Step 3: Check the Current Configuration	548	(1)
Step 4: Ensure the Network Works Without Encryption	549	(1)
Step 5: Ensure ACLs Are Compatible with IPsec	550	(1)
Configure a Router for IKE Using Pre-Shared Keys	551	(6)
Step 1: Enable or Disable IKE	551	(1)
Step 2: Create IKE Policies	551	(4)
Step 3: Configure Pre-Shared Keys	555	(1)
Step 4: Verify the IKE Configuration	556	(1)
Configure a Router with IPsec Using Pre-Shared Keys	557	(9)
Step 1: Configure Transform Set Suites	557	(2)
Step 2: Determine the IPsec (IKE Phase 2) Policy	559	(1)
Step 3: Create Crypto ACLs	560	(2)
Step 4: Create Crypto Maps	562	(3)
Step 5: Apply Crypto Maps to Interfaces	565	(1)
Test and Verify the IPsec Configuration of the Router	566	(4)
Display the Configured ISAKMP Policies	566	(1)
Display the Configured Transform Sets	566	(1)
Display the Current State of IPsec SAs	567	(1)
Display the Configured Crypto Maps	568	(1)
Enable debug Output for IPsec Events	568	(1)
Enable debug Output for ISAKMP Events	568	(1)
Configure a VPN Using SDM	569	(1)
Configure a PIX Security Appliance Site-to-Site VPN Using Pre-Shared Keys	570	(9)
Task 1: Prepare to Configure VPN Support	571	(1)
Task 2: Configure IKE parameters	571	(3)
Task 3: Configure IPsec Parameters	574	(4)
Task 4: Test and Verify the IPsec Configuration	578	(1)
Summary	579	(1)
Check Your Understanding	580	(3)
Configure Site-to-Site VPN Using Digital Certificates	583	(24)
Key Terms	583	(1)
Configure CA Support on a Cisco Router	584	(13)
Step 1: Manage the NVRAM	585	(1)
Step 2: Set the Router Time and Date	586	(1)
Step 3: Add a CA Server Entry to the Router Host Table	586	(2)
Step 4: Generate an RSA Key Pair	588	(1)
Step 5: Declare a CA	589	(2)
Step 6: Authenticate the CA	591	(1)
Step 7: Request a Certificate for the Router	592	(1)
Step 8: Save the Configuration	593	(1)
Step 9: Monitor and Maintain CA Interoperability	593	(3)
Step 10: Verify the CA Support Configuration	596	(1)
Configure a Cisco IOS Router Site-to-Site VPN Using Digital Certificates	597	(5)
Task 1: Prepare for IKE and IPsec	598	(1)
Task 2: Configure CA Support	598	(1)
Task 3: Configure IKE	599	(1)
Task 4: Configure IPsec	600	(1)
Task 5: Test and Verify IPsec	601	(1)
Configure a PIX Security Appliance Site-to-Site VPN Using Digital Certificates	602	(2)
Enroll the PIX Security Appliance with a CA	602	(2)
Summary	604	(1)
Check Your Understanding	605	(2)
Configure Remote Access VPN	607	(58)
Key Terms	607	(1)
Introduction to Cisco Easy VPN	608	(5)
Overview of the Easy VPN Server	609	(1)
Overview of Cisco Easy VPN Remote	609	(1)
How Cisco Easy VPN Works	610	(3)
Cisco Easy VPN Server Configuration Tasks	613	(9)
Task 1: Create an IP Address Pool	614	(1)
Task 2: Configure Group Policy Lookup	614	(1)
Task 3: Create ISAKMP Policy for Remote VPN Access	615	(1)
Task 4: Define a Group Policy for a Mode Configuration Push	615	(2)
Task 5: Create a Transform Set	617	(1)
Task 6: Create a Dynamic Crypto Map with RRI	617	(1)
Task 7: Apply Mode Configuration to the Dynamic Crypto Map	618	(1)
Task 8: Apply a Dynamic Crypto Map to the Router Interface	619	(1)
Task 9: Enable IKE Dead Peer Detection	619	(1)
Task 10: (Optional) Configure XAUTH	620	(1)
Task 11: (Optional) Enable the XAUTH Save Password Feature	621	(1)
Cisco Easy VPN Client 4.x Configuration Tasks	622	(7)
Task 1: Install the Cisco VPN Client 4.x on the Remote PC	622	(1)
Task 2: Create a New Client Connection Entry	623	(1)
Task 3: Choose an Authentication Method	624	(2)
Task 4: Configure Transparent Tunneling	626	(2)
Task 5: Enable and Add Backup Servers	628	(1)
Task 6: Configure Connection to the Internet Through Dialup Networking	629	(1)
Configure Cisco Easy VPN Remote for Access Routers	629	(8)
Easy VPN Remote Modes of Operation	630	(2)
Configuration Tasks for Cisco Easy VPN Remote for Access Routers	632	(5)
Configure the PIX Security Appliance as an Easy VPN Server	637	(7)
Task 1: Create an ISAKMP Policy for Remote VPN Client Access	638	(1)
Task 2: Create an IP Address Pool	638	(1)
Task 3: Define a Group Policy for Mode Configuration Push	639	(2)
Task 4: Create a Transform Set	641	(1)
Tasks 5 Through 7: Dynamic Crypto Map	641	(1)
Task 8: Configure XAUTH	642	(1)
Task 9: Configure NAT and NAT 0	643	(1)
Task 10: Enable IKE DPD	643	(1)
Configure a PIX 501 or 506E as an Easy VPN Client	644	(5)
PIX Security Appliance Easy VPN Remote Feature Overview	645	(1)
Easy VPN Remote Configuration	646	(1)
Easy VPN Client Device Mode and Enabling Easy VPN Remote Clients	646	(1)
Easy VPN Remote Authentication	647	(2)
Configure the Adaptive Security Appliance to Support WebVPN	649	(12)
WebVPN End-User Interface	649	(3)
Configure WebVPN General Parameters	652	(3)
Configure WebVPN Servers and URLs	655	(2)
Configure WebVPN Port Forwarding	657	(2)
Configure WebVPN E-Mail Proxy	659	(1)
Configure WebVPN Content Filters and ACLs	660	(1)
Summary	661	(1)
Check Your Understanding	662	(3)
Secure Network Architecture and Management	665	(52)
Key Terms	665	(1)
Factors Affecting Layer 2 Mitigation Techniques	666	(14)
Single Security Zone, One User Group, and One Physical Switch	667	(2)
Single Security Zone, One User Group, and Multiple Physical Switches	669	(1)
Single Security Zone, Multiple User Groups, and One Physical Switch	670	(1)
Single Security Zone, Multiple User Groups, Multiple Physical Switches	671	(1)
Multiple Security Zones, One User Group, and One Physical Switch	672	(2)
Multiple Security Zones, One User Group, Multiple Physical Switches	674	(2)
Multiple Security Zones, Multiple User Groups, Single Physical Switch	676	(1)
Multiple Security Zones, Multiple User Groups, Multiple Physical Switches	677	(1)
Layer 2 Security Best Practices	678	(2)
SDM Security Audit	680	(2)
Router Management Center (MC)	682	(17)
Hub-and-Spoke Topology	685	(1)
VPN Settings and Policies	685	(1)
Device Hierarchy and Inheritance	686	(1)
Activities	686	(1)
Jobs	686	(1)
Building Blocks	687	(1)
Supported Tunneling Technologies	687	(1)
Router MC Installation	688	(2)
Getting Started with the Router MC	690	(1)
Router MC interface	691	(2)
Router MC Tabs	693	(5)
Basic Workflow and Tasks	698	(1)
Simple Network Management Protocol (SNMP)	699	(14)
SNMP Introduction	699	(3)
SNMP Security	702	(2)
SNMP Version 3 (SNMPv3)	704	(2)
SNMP Management Applications	706	(1)
Configure SNMP Support on a Cisco IOS Router	707	(3)
Configure SNMP Support on a PIX Security Appliance	710	(3)
Summary	713	(1)
Check Your Understanding	714	(3)
PIX Security Appliance Contexts, Failover, and Management	717	(38)
Key Terms	717	(8)
Configure a PIX Security Appliance to Perform in Multiple Context Mode	718	(3)
Enabling Multiple Context Mode	721	(2)
Configuring a Security Context	723	(2)
Managing Security Contexts	725	(1)
Configure PIX Security Appliance Failover	725	(7)
Understanding Failover	725	(2)
Failover Requirements	727	(3)
Serial Cable-Based Failover Configuration	730	(1)
Active/Standby LAN-Based Failover Configuration	731	(1)
Active/Active Failover	731	(1)
Configure Transparent Firewall Mode	732	(7)
Transparent Firewall Mode Overview	733	(2)
Enable Transparent Firewall Mode	735	(3)
Monitor and Maintain a Transparent Firewall	738	(1)
PIX Security Appliance Management	739	(13)
Managing Telnet Access	739	(2)
Managing SSH Access	741	(1)
Command Authorization	742	(3)
PIX Security Appliance Password Recovery	745	(1)
Adaptive Security Appliance Password Recovery	746	(1)
File Management	747	(2)
Image Upgrade and Activation Keys	749	(3)
Summary	752	(1)
Check Your Understanding	753	(2)
Appendix A Check Your Understanding Answer Key	755	(20)
Glossary	775	(8)
Index	783