新版CCNP教程ISCW Vol.6.doc

Module 6 Cisco IOS Threat Defense Features Overview Cisco IOS Firewall software offers a full set of security features that you can implement to provide security for a network. In this module, you will learn about the Cisco IOS Firewall and Cisco IOS intrusion prevention system (IPS) functionality. The module explains various firewall technologies, such as packet filters, stateful firewalls, and proxy servers, and discusses their filtering capabilities and features. Further, the module describes how to design effective firewall topologies, and how to configure Cisco IOS Firewall functionality on Cisco IOS routers. The module covers the two configuration methods for Cisco IOS Firewall: using the command-line interface (CLI) and the Security Device Manager (SDM). The module also explains the IDS and IPS technologies, describes types of intrusion detection system (IDS) and IPS systems, compares host-based and network-based approaches, describes the placement of IPS systems, lists signature categories, and discusses possible actions that an IOS router can take when an attack is detected. Cisco IOS IPS can, just like the Cisco IOS Firewall, be configured using the CLI and SDM, and both methods are covered. This module explains the IPS configuration wizard included in the SDM, and explains the IPS verification and customization options of the SDM. Module Objectives Upon completing this module, you will be able to describe and configure Cisco IOS Firewall features. This ability includes being able to meet these objectives: ? Explain the Cisco IOS Firewall functionality ? Describe the procedure to configure Cisco IOS Firewall features using the CLI and SDM, explain the resulting configurations, and verify firewall operations using SDM and show commands ? Explain the features, components, and functionality of Cisco IOS IPS ? Describe the procedure to configure Cisco IOS IPS operations using SDM The PDF files and any printed representation for this material are the property