Hardening Cisco Routers |
 |
 click here for more details, find new or used items |
Thomas Akin
|
|
Pages: 190 (Paperback)
ISBN: 0596001665
Pub: O'Reilly Media, Inc.
Pub date: 2002-02-21
Amazon.co.uk Sales Rank: 106768
Editorial Review:
To harden a router is to render it more heavily defended and more difficult to attack. Because routers (by definition) serve as points of entry into your network, it makes sense to devote extra effort to their security. Hardening Cisco Routers shows how to make adjustments to the configurations of routers from Cisco Systems to improve their resistance to attack, particularly external attack. This is essentially a book of specialised Internetwork Operating System (IOS) commands, as well as explanations of their behaviour. It'll appeal to the router administrator--employed either by an organisation's internal network staff, an outside consultancy, or a service provider--who wants to know which IOS commands he or she should add to routers' configuration files to tighten their security without a lot of hassle.
The great thing about this book is that you can approach it in either of two ways. If you just want to clamp down on your routers' security weaknesses as soon as possible, you can begin with the checklists at the end of each chapter (each of which focuses on a particular area, such as SMTP) or the big one in an appendix, which is comprehensive. These checklists include both "how" and "why" information, as exemplified by "Disable ICMP broadcasts with the no ip directed-broadcast command". If you want more information on the big picture, or want to prepare for a specific kind of attack, read the individual chapters for detailed advice on how to set IOS to behave as you want. --David Wall
Topics covered: Internetwork Operating System (IOS) commands you can use to protect Cisco Systems routers from a variety of attacks. Specialised sections deal with security assessment, auditing, access control, privileges, optional services and the legal importance of your login banners' contents.
Reader Reviews:
Good content - easy to apply the information (5/5 people found this helpful)
As a engineer working on Cisco devices all day for an ISP, I thought that it would be good to read this book and see router security from another's perspective. I was not disappointed.
The book is organised in almost a workbook fashion, allowing you to read and apply the ideas as you progress. Each chapter has a summary, which you can use as a checklist before delving deeper and Appendix A is a 'master checklist' of sorts.
Some of the information in the book was completely new to me, even after reading the NSA guides and a few Cisco texts. Whilst I did find that one or two of the recommendations 'broke' something for me, I was easily able to backtrack and find the issues that affected me.
If you are not security-savvy, this book provides a simple clear approach to minimising your exposure to risk. Even if you think you are this book represents good value and is good for the shelf.
A bonus for me was some US centric information about incident reporting and procedures along with some excellent links to general information sites.
Similar Products
Cisco IOS Cookbook (Cookbooks (O'Reilly))
Cisco IOS Access Lists
Cisco IOS in a Nutshell (In a Nutshell (O'Reilly))
Cisco ASA, PIX, and FWSM Firewall Handbook (Networking Technology: Security)
Categories
Amazon.co.uk places this book into the following categories:
Books -> Subjects -> Computing & Internet -> Networking & Security -> Security -> General AAS
Books -> Subjects -> Computing & Internet -> Networking & Security -> Network Hardware -> Routers
Books -> Subjects -> Computing & Internet -> Networking & Security -> Network Hardware -> General AAS
Books -> Subjects -> Computing & Internet -> Networking & Security -> General AAS
Books -> Subjects -> Computing & Internet -> Networking & Security -> Network Topics -> General AAS
Books -> Subjects -> Computing & Internet -> General
Books -> Subjects -> Computing & Internet -> Digital Lifestyle -> Online Shopping -> Amazon
Books -> Subjects -> Computing & Internet -> Digital Lifestyle -> Online Shopping -> General AAS
Books -> Subjects -> Computing & Internet -> General AAS
Books -> Special Features -> Search Inside!
Books -> Refinements -> Language (feature_browse-bin) -> English
Books -> Refinements -> Age (feature_two_browse-bin)
Books -> Refinements -> Format (binding_browse-bin) -> Paperback
Books -> Refinements -> Condition (condition-type)