Table of Contents

• Chapter 1 Networking Security Concepts
• Chapter 2 Common Security Threats
• Chapter 3 Implementing AAA in Cisco IOS
• Chapter 4 Bring Your Own Device (BYOD)
• Chapter 5 Fundamentals of VPN Technology and Cryptography
• Chapter 6 Fundamentals of IP Security
• Chapter 7 Implementing IPsec Site-to-Site VPNs
• Chapter 8 Implementing SSL VPNs Using Cisco ASA
• Chapter 9 Securing Layer 2 Technologies
• Chapter 10 Network Foundation Protection
• Chapter 11 Securing the Management Plane on Cisco IOS Devices
• Chapter 12 Securing the Data Plane in IPv6
• Chapter 13 Securing Routing Protocols and the Control Plane
• Chapter 14 Understanding Firewall Fundamentals
• Chapter 15 Implementing Cisco IOS Zone-Based Firewalls
• Chapter 16 Configuring Basic Firewall Policies on Cisco ASA
• Chapter 17 Cisco IDS/IPS Fundamentals
• Chapter 18 Mitigation Technologies for E-mail-Based and Web-Based Threats
• Chapter 19 Mitigation Technologies for Endpoint Threats
• Chapter 20 Final Preparation
• Appendix A Answers to the “Do I Know This Already?” Quizzes
• Appendix B CCNA Security 210-260 (IINS) Exam Updates
• Glossary
•  
• On the CD
• Glossary
• Appendix C Memory Tables
• Appendix D Memory Tables Answer Key
• Appendix E Study Planner

About the Author

Omar Santos is the technical leader for the Cisco Product Security Incident Response Team (PSIRT). He mentors and leads engineers and incident managers during the investigation and resolution of security vulnerabilities in all Cisco products. Omar has been working with information technology and cybersecurity since the mid-1990s. Omar has designed, implemented, and supported numerous secure networks for Fortune 100 and 500 companies and for the U.S. government. Prior to his current role, he was a technical leader within the World Wide Security Practice and the Cisco Technical Assistance Center (TAC), where he taught, led, and mentored many engineers within both organizations.

Omar is an active member of the security community, where he leads several industrywide initiatives and standards bodies. His active role helps businesses, academic institutions, state and local law enforcement agencies, and other participants that are dedicated to increasing the security of the critical infrastructure.

Omar is the author of several books and numerous white papers, articles, and security configuration guidelines and best practices. Omar has also delivered numerous technical presentations at many conferences and to Cisco customers and partners, in addition to many C-level executive presentations to many organizations.

John Stuppi, CCIE No. 11154 (Security), is a technical leader in the Cisco Security Solutions (CSS) organization at Cisco, where he consults Cisco customers on protecting their network against existing and emerging cybersecurity threats. In this role, John is responsible for providing effective techniques using Cisco product capabilities to provide identification and mitigation solutions for Cisco customers who are concerned with current or expected security threats to their network environments. Current projects include helping customers leverage DNS and NetFlow data to identify and subsequently mitigate network-based threats. John has presented multiple times on various network security topics at Cisco Live, Black Hat, and other customer-facing cybersecurity conferences. In addition, John contributes to the Cisco Security Portal through the publication of white papers, security blog posts, and cyber risk report articles. Before joining Cisco, John worked as a network engineer for JPMorgan and then as a network security engineer at Time, Inc., with both positions based in New York City. John is also a CISSP (#25525) and holds an Information Systems Security (INFOSEC) professional certification. In addition, John has a BSEE from Lehigh University and an MBA from Rutgers University. John lives in Ocean Township, New Jersey (a.k.a. the “Jersey Shore”) with his wife, two kids, and dog.