chapter 4 network security
TRANSCRIPT
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 1/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 1Version 4.0
Enterprise NetworkSecurity
Accessing the WAN ± Chapter 4
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 2/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 2
Objectives
Describe the general methods used to mitigatesecurity threats to Enterprise networks
Configure Basic Router Security
Explain how to disable unused Cisco router networkservices and interfaces
Explain how to use Cisco SDM
Manage Cisco IOS devices
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 3/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 3
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Explain how sophisticated attack tools and opennetworks have created an increased need for networksecurity and dynamic security policies
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 4/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 4
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Describe the most common security threats and howthey impact enterprises
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 5/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 5
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Describe the most common types of network attacksand how they impact enterprises
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 6/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 6
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Describe the common mitigation techniques thatenterprises use to protect themselves against threats
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 7/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 7
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Explain the concept of the Network Security Wheel
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 8/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 8
Describe the General Methods used to MitigateSecurity Threats to Enterprise Networks
Explain the goals of a comprehensive security policy inan organization
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 9/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 9
Configure Basic Router Security
Explain why the security of routers and their configuration settings is vital to network operation
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 10/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 10
Configure Basic Router Security
Describe the recommended approach to applying CiscoIOS security features on network routers
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 11/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 11
Configure Basic Router Security
Describe the basic security measures needed to secureCisco routers
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 12/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 12
Explain How to Disable Unused CiscoRouter Network Services and Interfaces
Describe the router services and interfaces that arevulnerable to network attack
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 13/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 13
Explain How to Disable Unused CiscoRouter Network Services and Interfaces
Explain the vulnerabilities posed by commonlyconfigured management services
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 14/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 14
Explain How to Disable Unused CiscoRouter Network Services and Interfaces
Explain how to secure a router with the command-lineinterface (CLI) auto secure command
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 15/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 15
Explain How to Use Cisco SDM
Provide an overview of Cisco SDM
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 16/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 16
Explain How to Use Cisco SDM
Explain the steps to configure a router to use CiscoSDM
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 17/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 17
Explain How to Use Cisco SDM
Explain the steps you follow to start SDM
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 18/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 18
Explain How to Use Cisco SDM
Describe the Cisco SDM Interface
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 19/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 19
Explain How to Use Cisco SDM
Describe the commonly used Cisco SDM wizards
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 20/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 20
Explain How to Use Cisco SDM
Explain how to use Cisco SDM for locking down your router
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 21/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 21
Manage Cisco IOS Devices
Describe the file systems used by a Cisco router
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 22/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 22
Manage Cisco IOS Devices
Describe how to backup and upgrade a Cisco IOSimage
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 23/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 23
Manage Cisco IOS Devices
Explain how to back up and upgrade Cisco IOSsoftware images using a network server
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 24/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 24
Manage Cisco IOS Devices
Explain how to recover a Cisco IOS software image
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 25/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 25
Manage Cisco IOS Devices
Compare the use of the show and debug commandswhen troubleshooting Cisco router configurations
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 26/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 26
Manage Cisco IOS Devices
Explain how to recover the enable password and theenable secret passwords
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 27/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 27
Summary
Security Threats to an Enterprise network include:
±Unstructured threats
±Structured threats
±External threats
±Internal threats
Methods to lessen security threats consist of:
±Device hardening
±Use of antivirus software
±Firewalls
±Download security updates
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 28/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 28
Summary
Basic router security involves the following: ±Physical security
±Update and backup IOS
±Backup configuration files
±Password configuration
±Logging router activity
Disable unused router interfaces & services to minimizetheir exploitation by intruders
Cisco SDM
±A web based management tool for configuring securitymeasures on Cisco routers
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 29/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 29
Summary
Cisco IOS Integrated File System (IFS)
±Allows for the creation, navigation & manipulation of directories on a cisco device
8/3/2019 Chapter 4 Network Security
http://slidepdf.com/reader/full/chapter-4-network-security 30/30
© 2006 Cisco Systems, Inc. All rights reserved. Cisco Public 30