tailieunhanh - Lecture CCNA security partner - Chapter 2: Security strategy and Cisco borderless Network

This chapterdiscusses the concept of borderless Networks. It discusses Cisco borderless Network architecture, including the components and underlying technologies. You will learn about the Cisco security portfolio products that address specifically issues of borderless Networks, and more precisely about Cisco SecureX. This chapter introduces Cisco threat control and containment products and VPN technologies that will be covered in greater detail in subsequent chapters. | Security Strategy and Cisco Borderless Network 1 In this chapter, you learn about the following Cisco Borderless Networks topics: • Cisco Borderless Network Architecture • Cisco security portfolio of products solving issues of Borderless Networks • Cisco SecureX Architecture presenting its features and benefits • Cisco threat control and containment products and technologies • Cisco content security products and technologies • Cisco VPN solutions and technologies • Security management products and technologies 2 Borderless Networks Cisco Borderless Network Security Architecture Borderless End Zone Borderless Internet Intelligent Access Policies Provides Context Awareness for Adaptive Securing of Endpoints Borderless Data Center Evolution of Security in the Data Center Policy Management Layer Borderless Security Products Policy Management Provided by Cisco Borderless Security Products SecureX, a Context-Aware | Security Strategy and Cisco Borderless Network 1 In this chapter, you learn about the following Cisco Borderless Networks topics: • Cisco Borderless Network Architecture • Cisco security portfolio of products solving issues of Borderless Networks • Cisco SecureX Architecture presenting its features and benefits • Cisco threat control and containment products and technologies • Cisco content security products and technologies • Cisco VPN solutions and technologies • Security management products and technologies 2 Borderless Networks Cisco Borderless Network Security Architecture Borderless End Zone Borderless Internet Intelligent Access Policies Provides Context Awareness for Adaptive Securing of Endpoints Borderless Data Center Evolution of Security in the Data Center Policy Management Layer Borderless Security Products Policy Management Provided by Cisco Borderless Security Products SecureX, a Context-Aware Security Approach SecureX Context Awareness Cisco SecureX Security Products Context-Aware Policies Context-Aware Policies Decide Access Privileges At the core of the Cisco SecureX Architecture is context awareness, which allows enforcement elements (such as firewalls, web proxies, IPS sensors, and even network infrastructure elements such as routers and switches) to define the access policy by using information such as the identity of the user, the security posture of the connecting device, the point of access to the network, and many other components. 11 TrustSec Secure Resources Using TrustSec AnyConnect AnyConnect at Work Cisco Identity Services Engine (ISE) is the centralized policy engine for business-relevant policy definition and enforcement. Cisco ISE complements global contextual information that is offered by Cisco SIO Cisco ISE combines the functionality of other Cisco products, such as the Cisco Secure Access Control Server for authentication, authorization, and accounting

• An ninh - Bảo mật
• CCNA Security Partner
• Network Security
• Security strategy
• Cisco borderless Network
• Cisco borderless Network architecture
• Borderless Networks
• Purpose of security
• Basic security requirements
• Managing the risk
• Risk analysis
• Threat control strategy
• Network security threats
• Threat control design
• Security intelligence analysis
• Network Foundation Protection
• Cisco Configuration Professional
• Cisco NFP Framework
• Secure management
• Securing the management plane
• Cisco IOS devices
• Network Time Protocol
• Simple Network Management Protocol
• Native VLANs
• Configuring VLANs
• Configuring Inter VLAN routing
• Spanning Tree
• IPv6 environments
• IPv6 headers
• IPv6 address types
• Configure IPv6 addressing
• Access Control Lists
• Threat mitigation
• Operational framework
• VLSM environments
• Firewall Fundamentals
• Network Address Translation
• Firewall technologies
• Application layer firewalls
• Cisco IOS Zone Based Firewall
• Cisco IOS Zone Based Policy Firewall
• Intrusion Prevention Systems
• IPS fundamentals
• IPS attack responses
• IPS Anti Evasion techniques
• Fundamentals of cryptography
• VPN technologies
• Public Key Infrastructure
• IPsec fundamentals
• IPsec protocol
• IPsec’s main components
• Site to Site IPsec VPNs
• Cisco IOS Routers
• VPN configuration
• Cisco SSL VPNs
• Protocol framework
• Cisco VPN clientless mode
• Cisco full tunnel mode