| | Copyright |
| | The CSIDS Cramsheet |
| | | INTRODUCTION TO NETWORK SECURITY THREATS |
| | | IDSS |
| | | CAPTURING NETWORK TRAFFIC FOR IDS |
| | | CISCO IDS ARCHITECTURE AND COMMUNICATIONS PROTOCOLS |
| | | IDS SENSOR APPLIANCE |
| | | CISCO IDS NAVIGATION |
| | | COMMANDS |
| | | IEV AND IDM |
| | | SIGNATURES |
| | | SECURITY MONITOR |
| | | IDS MC |
| | | MASTER BLOCKING |
| | A Note from Series Editor Ed Tittel |
| | About the Authors |
| | Acknowledgments |
| | We Want to Hear from You! |
| | Introduction |
| | | Taking a Certification Exam |
| | | How to Prepare for an Exam |
| | | About This Book |
| | Self-Assessment |
| | | IDS Certification in the Real World |
| | | Putting Yourself to the Test |
| | | Assessing Readiness for the Exam CSIDS 642-531 |
| | | Onward, Through the Fog! |
| | Chapter 1. Introduction to Cisco Certification |
| | | The Exam Situation |
| | | Exam Layout and Design |
| | | Using Cisco's Exam Software Effectively |
| | | Exam-Taking Basics |
| | | Question-Handling Strategies |
| | | Mastering the Inner Game |
| | | Additional Resources |
| | Chapter 2. Introduction to Network Security |
| | | The Need for Network Security |
| | | Network Security Policy |
| | | Cisco Security Wheel |
| | | Attack Types |
| | | Attack Tools and Methods (Attack Taxonomy) |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 3. Intrusion Detection Overview |
| | | IDS Triggers |
| | | Attack Response |
| | | Intrusion Detection Evasive Techniques |
| | | Cisco Secure IDS Environment |
| | | Cisco IDS Communication Overview |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 4. Capturing Network Traffic for Intrusion Detection Systems |
| | | Traffic Capture Overview |
| | | Configuring SPAN for the Catalyst 2900XL, 3500XL, 2950, and 3550 Switch Series |
| | | Configuring SPAN for Catalyst 4000, 4500, and 6500 Series Switches |
| | | Configuring Remote SPAN (RSPAN) for Catalyst 4000 and 6500 |
| | | Configuring VACLs for Catalyst 6500 Traffic Capture |
| | | Using the mls ip ids Command for Catalyst 6500 Traffic Capture |
| | | Advanced Traffic Capture Configurations for the Catalyst 6500 |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 5. Cisco IDS Architecture and Communications Protocols |
| | | Cisco IDS Software Architecture |
| | | Cisco IDS Communications |
| | | Sensor User Accounts |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 6. Sensor Appliance Installation |
| | | Sensor Placements |
| | | Cisco IDS Sensor Appliances |
| | | Cisco IDS Sensor Modules |
| | | Upgrading Sensors to IDS 4.0 Preparations |
| | | Upgrading Sensors to IDS 4.0 |
| | | Cisco IDS Sensor Initialization |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 7. Cisco IDS Navigation and General Configuration Using the Command-Line Interface |
| | | Accessing the CLI |
| | | Command CLI Features and Navigation Options |
| | | CLI Modes |
| | | Interface Configuration Modes (Level 3) |
| | | Services Mode Configurations (Level 3) |
| | | Practice Labs |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 8. Command-Line Interface Commands |
| | | Current-Config and Backup-Config Files |
| | | Knowing the Basic Commands |
| | | User Account and Privilege Levels |
| | | User Commands |
| | | Show Commands |
| | | SSH Commands |
| | | IP Logging |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 9. Cisco IDS Signatures, Alarms, and Signature Series |
| | | Cisco IDS Signatures |
| | | Cisco IDS Alarms |
| | | Cisco IDS Signature Engines |
| | | Signature Engine Selection |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 10. Global Sensing and Signature Configuration |
| | | Global Sensing Configuration |
| | | Accessing Signatures Through Signature Groups |
| | | Signature Configuration and Tuning |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 11. IP Blocking Configuration |
| | | Blocking Terminology |
| | | Blocking Devices, Requirements, and Guidelines |
| | | ACL Considerations |
| | | Blocking Sensor Configuration |
| | | Master Blocking Configuration |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 12. Cisco IDS Maintenance |
| | | Cisco Secure IDS Maintenance |
| | | Software Updates |
| | | Sensor Maintenance |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 13. Monitor a Cisco IDS Protection Solution for Small and Medium Networks Using Cisco IDM and Cisco IEV |
| | | Cisco IDM and IEV Overview |
| | | Cisco IDM |
| | | Features and Benefits of IEV |
| | | Installing IEV Software and Configuring It to Monitor IDS Devices |
| | | Creating Custom IEV Views and Filters |
| | | Navigating IEV to View Alarm Details |
| | | NSDB |
| | | IEV Filters |
| | | Performing IEV Database Administration Functions |
| | | Configuring IEV Application Settings and Preferences |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 14. Enterprise IDS Management with the Cisco IDS Management Center for VMS |
| | | Architecture |
| | | Installation |
| | | Getting Started |
| | | IDS Sensor Device and Sensor Groups |
| | | IDS Configuration |
| | | Deploying Sensor Configurations |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 15. Enterprise IDS Monitoring with the Cisco Security Monitor for VMS |
| | | Installation |
| | | Getting Started |
| | | Configuring Security Monitor |
| | | Security Monitor Event Viewer |
| | | Reporting and Administration |
| | | Summary |
| | | Exam Prep Questions |
| | | Need to Know More? |
| | Chapter 16. Practice Exam 1 |
| | Chapter 17. Answer Key for Practice Exam 1 |
| | Chapter 18. Practice Exam 2 |
| | Chapter 19. Answer Key for Practice Exam 2 |
| | Appendix A. Resources |
| | Appendix B. What's on the CD-ROM? |
| | | Using PrepLogic Practice Exams, Preview Edition |
| | | Exam Simulation |
| | | Question Quality |
| | | Interface Design |
| | | Effective Learning Environment |
| | | Software Requirements |
| | | Installing PrepLogic Practice Exams, Preview Edition |
| | | Using PrepLogic Practice Exams, Preview Edition |
| | | Get More Exams |
| | | Customer Service |
| | Glossary |
| | Index |