忍者ブログ
ネットワークセキュリティやってます。技術よりも趣味と雑談が多めのブログです。最近はオンライン英会話にはまっています。

2017-11

カレンダー
10 2017/11 12
S M T W T F S
1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30
最新コメント
[05/10 メモリ]
[07/24 hechtia]
[06/23 Stream.T]
アーカイブ
カウンター
ブログ内検索
PIX Firewallの机上勉強を一通り終えて、PIX2台もあることだしそろそろ手を動かそうとおもいIEWB vol.1を購入しました。R/Sの時は同じくvol1を買ったが1周しかしていなかったせいでvol2の最初の部分のかなり苦労した覚えがある。vo1は各セクションこそ短いがフルラボを全てフルラボを構成する重要なパーツみたいな位置づけで、全部完璧に理解できればvol2も理解しやすくなる。CCSPすら取得していないのにワークブックをやるのは早いとおもわれるけど、自分にとってはvol2からが本当のワークブック。





IEWB-SC-VOL1のコンテンツ(159項目) ((((;゚Д゚)))ガクガクブルブル
  • PIX/ASA Firewall
  • Basic Configuration
  • Configuring VLANs and IP Addressing
  • Configuring and Authenticating RIP
  • Configuring and Authenticating OSPF
  • Redistribution, Summarization and Route Filtering
  • Access Control
  • Common Configuration
  • Filtering with IP Access Lists
  • Using Object Groups
  • Administrative Access Management
  • ICMP Traffic Management
  • Configuring Filtering Services
  • Configuring NAT
  • Dynamic NAT and PAT
  • Static NAT and PAT
  • Dynamic Policy NAT
  • Static Policy NAT and PAT
  • Identity NAT and NAT Exemption
  • Outside Dynamic NAT
  • DNS Doctoring with Alias
  • DNS Doctoring with Static
  • Same-Security Traffic and NAT
  • Advanced Firewall
  • Firewall Contexts Configuration
  • Administrative Context and Resource Management
  • Active/Standby Stateful Failover with Failover Interface
  • Active/Active Stateful Failover with Failover Interface
  • Monitoring Interfaces with Active/Active Failover
  • Filtering with L2 Transparent Firewall
  • ARP Inspection with Transparent Firewall
  • Filtering Non-IP Traffic with L2 Transparent FW
  • Handling Fragmented Traffic
  • Handling Some Application Issues
  • BGP Through the PIX/ASA Firewall
  • Multicast Routing across the PIX/ASA Firewall
  • System Monitoring
  • DHCP Server
  • Modular Policy Framework
  • HTTP Inspection with MPF
  • Advanced FTP Inspection
  • Advanced ESMTP Inspection
  • Authenticating BGP Session Through the Firewall
  • Implementing Traffic Policing
  • Implementing Low Latency Queueing
  • TCP Normalization
  • Management Traffic and MPF
  • ICMP Inspection Engine
  • VPN
  • Common Configurations
  • IOS Router and the PIX/ASA
  • IOS Router and VPN3k
  • GRE and DMVPN
  • VPN3k Easy VPN/WebVPN
  • IOS Easy VPN
  • PIX/ASA Easy VPN/WebVPN
  • IPsec LAN-to-LAN
  • IOS and the PIX/ASA with PSK
  • IOS and the PIX/ASA with PSK and NAT on the Firewall
  • IOS and the PIX/ASA with Digital Certificates
  • IOS and the PIX/ASA: Matching Name in Certificate
  • IOS and IOS with PSK Across the PIX/ASA
  • IOS and IOS with PSK Across the PIX/ASA and NAT
  • IOS and IOS with PSK Across the PIX/ASA with Overlapping Subnets
  • IOS and IOS with PSK Across the PIX/ASA and NAT with IKE AM
  • IOS and IOS with Digital Certificates Across the PIX/ASA
  • IOS and VPN3k with PSK
  • IOS and VPN3k with PSK using CLI only
  • IOS and VPN3k with Digital Certificates
  • IOS and VPN3k with PSK: Tuning IPsec Parameters
  • IOS and VPN3k: Filtering Tunneled Traffic
  • GRE and DMVPN
  • GRE Tunnels over IPsec with Static Crypto Maps
  • GRE Tunnels over IPsec with Crypto Profiles
  • DMVPN with PSK
  • Easy VPN
  • VPN3k and Cisco VPN Client
  • VPN3k and Cisco VPN Client with Split-Tunneling
  • VPN3k and Cisco VPN Client with HoId-Down Route
  • VPN3k and Cisco VPN Client with RRI
  • VPN3k and Cisco VPN Client with DHCP Server
  • VPN3k and Cisco VPN Client with RADIUS Authentication
  • VPN3k and Cisco VPN Client with External Group
  • VPN3k and Cisco VPN Client with Digital Certificates
  • VPN3k and IOS ezVPN Remote Client Mode with Split-Tunneling
  • VPN3k and IOS ezVPN Remote NW Extension Mode with RRI
  • IOS and IOS ezVPN Remote Client Mode with Xauth/RRI
  • IOS and IOS ezVPN Remote NW Extension Mode with Xuath/RRI
  • PIX/ASA and Cisco VPN Client with Split-Tunneling/Xauth/RRI
  • The PIX/ASA and Cisco VPN Client with External Policy
  • The PIX/ASA and Cisco VPN Client with RADIUS Auth/ACL
  • The PIX/ASA and Cisco VPN Client with Digital Certificates
  • The PIX/ASA and IOS ezVPN Remote NW Extension Mode
  • WebVPN and SSL VPN
  • ASA and WebVPN Client
  • ASA and WebVPN Port Forwarding
  • ASA and SSL VPN Client
  • VPN3k and WebVPN Client
  • VPN3k and WebVPN Port Forwarding
  • VPN QoS
  • IOS and the PIX/ASA: Policing the L2L IPsec tunnel
  • IOS and VPN3k: QoS for L2L Tunnel
  • The PIX/ASA and Cisco VPN Client: Per-Flow Policing
  • QoS Pre-Classify for IPsec Tunnel
  • Advanced VPN Topics
  • Decoding IPsec Debugging Output on VPN3k
  • IPsec and Fragmentation Issues
  • ISAKMP Pre-Shared Keys via AAA
  • IPsec NAT-T: L2L Tunnel with VPN3k and IOS Box
  • IKE Tunnel Endpoint Discovery (TED)
  • IPsec VPN High-Availability with HSRP
  • IPsec High Availability with NAT and HSRP
  • IPsec Pass-Through Inspection on the PIX/ASA
  • L2TP over IPsec between the ASA and Windows 2000 PC
  • VPN3k and PPTP Client
  • Using ISAKMP Profiles
  • IOS Firewall
  • Common Configuration
  • Basic Access-Lists
  • Reflexive Access-Lists
  • Dynamic Access-Lists
  • Stateful Inspection with CBAC
  • CBAC Port-to-Application Mapping
  • Preventing DoS Attacks with CBAC
  • CBAC Performance Tuning
  • Authentication Proxy with RADIUS
  • Content Filtering with IOS Firewall
  • Identity Management
  • Network Admission Control
  • ACS Setup for NAC
  • NAC L3 IP With the ASA and Cisco VPN Client
  • NAC L3 IP with VPN3k and Cisco VPN Client
  • Intrusion Prevention
  • Basic Configuration
  • IPS Initial Setup
  • Configuring Inline VLAN Pair
  • Promiscuous Mode Monitoring with RSPAN
  • Monitoring IPS with IPS Event Viewer
  • Event Processing
  • Configuring Event Summarization
  • Creating Custom Signature
  • Event Counting
  • Inline Blocking
  • Event Action Override
  • Event Action Filtering
  • IPS Network Access Control (Shunning)
  • Rate Limiting with IPS
  • Network Attacks
  • Layer 2/3 Attacks
  • Mitigating ARP Spoofing Attack with PIX/ASA
  • Mitigating DHCP Attacks with DHCP Snooping
  • Mitigating ARP Attacks in DHCP Environment
  • Mitigating MAC/IP Spoofing in DHCP Environment
  • Protecting Spanning-Tree Protocol
  • Protecting Against Broadcast Storms
  • Mitigating VLAN Hopping Attacks
  • Protecting Against Network Mapping
  • Blackhole Routing using PBR
  • Intrusion Prevention with PIX/ASA
  • PR
    この記事にコメントする
    お名前:
    タイトル:
    文字色:
    メールアドレス:
    URL:
    コメント:
    パスワード:   Vodafone絵文字 i-mode絵文字 Ezweb絵文字
    この記事へのトラックバック
    この記事にトラックバックする:
    著書




    プロフィール
    HN:
    ぜん吉
    性別:
    男性
    職業:
    割と自由なリーマン
    趣味:
    海外出張
    自己紹介:
    2006年のCCNA合格を皮切りにCCIE-RSを含めて数々のシスコ資格をパスし、2009年に念願の海外受験(ドバイ)でCCIE-SCを取得。そして、2010年に目標だったトリプルCCIEを香港の地にて達成した。今はネットワークセキュリティやデータ分析などをやっています。

    ■2006年の目標
    CCNA(達成)

    ■2007年の目標
    CCNP(達成)
    CCDA(達成)
    CCDP(達成)
    CCIP(達成)

    ■2008年の目標
    CCSP(達成)
    CCIE-RS(達成)
    TOEIC700点(達成)

    ■2009年の目標
    CCIE-Sec(達成)
    TOEIC800点(達成)
    JNCIA-JUNOS(達成)

    ■2010年の目標
    JNCIA-M(達成)
    CCIE-SP(達成)
    JNCIS-M(達成)
    JNCIA-EX(達成)
    JNCIS-SEC(達成)

    ■2011年の目標
    異動(未達成)

    ■2012年の目標
    異動(未達成)
    TOEIC850点(達成)

    ■2013年の目標
    異動(達成)
    CCIE更新(達成)

    ■2015年の目標
    本を出す(達成)

    ■2017年の目標
    TOEIC900(達成)
    TOEIC950(達成)

    ■2018年の目標
    海外勤務








    英会話







    忍者ブログ [PR]
    by 桜花素材サイト様. . . .