tailieunhanh - Configuring Juniper Networks NetScreen & SSG Firewalls

we expand networks to include new services, we must continually strive secure them. It is not an inherently easy thing to do. First, we need to balance growth and total security without duplicating operations. Second, our networks need to support the mobility of our workforces as the number of remote sites that are connected continues to multiply. finally, while one cannot predict what will be needed for tomorrow, we build in the flexibility to adapt to whatever unknown priorities may the near future | 11/7/06 6:37 PM Page i Configuring Juniper ® Networks NetScreen® & SSG Firewalls Rob Cameron Technical Editor Brad Woodberg Mohan Krishnamurthy Madwachar Mike Swarm Neil R. Wyler Matthew Albers FOREWORD BY SCOTT KRIENS Ralph Bonnell CEO, JUNIPER NETWORKS 11/7/06 6:37 PM Page ii Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its Work is sold AS IS and WITHOUT may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other inci- dental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable care, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media®, Syngress®,“Career Advancement Through Skill Enhancement®,”“Ask the Author UPDATE®,” and “Hack Proofing®,” are registered trademarks of Syngress Publishing, Inc.“Syngress:The Definition of a Serious Security Library”™,“Mission Critical™,” and “The Only Way to Stop a Hacker is to Think Like One™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 HJIRTCV764 002 PO9873D5FG 003 829KM8NJH2 004 5489IJJLPP 005 CVPLQ6WQ23 006 VBP965T5T5 007 HJJJ863WD3E 008 2987GVTWMK 009 629MP5SDJT 010 IMWQ295T6T PUBLISHED BY Syngress Publishing, Inc. 800 Hingham Street Rockland, MA 02370 Configuring Networks NetScreen & SSG .