Volume I - Advanced Technology Labs is the hands on practice companion to the Advanced Technologies Class, and is the first step in CCIE lab preparation. Each lab is designed to walk you through the technology, and provide in depth explanations of the necessary configurations.

Authors

At-a-Glance

• The CCIE Security Lab Workbook Volume I is covered by our exclusive Investment Protection Program
• Free online discussion forum actively monitored by the actual authors of the labs

• PIX/ASA Firewall
• Basic Configuration
• Configuring VLANs and IP Addressing
• Configuring and Authenticating RIP
• Configuring and Authenticating OSPF
• Redistribution, Summarization and Route Filtering
• Access Control
• Common Configuration
• Filtering with IP Access Lists
• Using Object Groups
• Administrative Access Management
• ICMP Traffic Management
• Configuring Filtering Services
• Configuring NAT
• Dynamic NAT and PAT
• Static NAT and PAT
• Dynamic Policy NAT
• Static Policy NAT and PAT
• Identity NAT and NAT Exemption
• Outside Dynamic NAT
• DNS Doctoring with Alias
• DNS Doctoring with Static
• Same-Security Traffic and NAT
• Advanced Firewall
• Firewall Contexts Configuration
• Administrative Context and Resource Management
• Active/Standby Stateful Failover with Failover Interface
• Active/Active Stateful Failover with Failover Interface
• Monitoring Interfaces with Active/Active Failover
• Filtering with L2 Transparent Firewall
• ARP Inspection with Transparent Firewall
• Filtering Non-IP Traffic with L2 Transparent FW
• Handling Fragmented Traffic
• Handling Some Application Issues
• BGP Through the PIX/ASA Firewall
• Multicast Routing across the PIX/ASA Firewall
• System Monitoring
• DHCP Server
• Modular Policy Framework
• HTTP Inspection with MPF
• Advanced FTP Inspection
• Advanced ESMTP Inspection
• Authenticating BGP Session Through the Firewall
• Implementing Traffic Policing
• Implementing Low Latency Queueing
• TCP Normalization
• Management Traffic and MPF
• ICMP Inspection Engine
• VPN
• Common Configurations
• IOS Router and the PIX/ASA
• IOS Router and VPN3k
• GRE and DMVPN
• VPN3k Easy VPN/WebVPN
• IOS Easy VPN
• PIX/ASA Easy VPN/WebVPN
• IPsec LAN-to-LAN
• IOS and the PIX/ASA with PSK
• IOS and the PIX/ASA with PSK and NAT on the Firewall
• IOS and the PIX/ASA with Digital Certificates
• IOS and the PIX/ASA: Matching Name in Certificate
• IOS and IOS with PSK Across the PIX/ASA
• IOS and IOS with PSK Across the PIX/ASA and NAT
• IOS and IOS with PSK Across the PIX/ASA with Overlapping Subnets
• IOS and IOS with PSK Across the PIX/ASA and NAT with IKE AM
• IOS and IOS with Digital Certificates Across the PIX/ASA
• IOS and VPN3k with PSK
• IOS and VPN3k with PSK using CLI only
• IOS and VPN3k with Digital Certificates
• IOS and VPN3k with PSK: Tuning IPsec Parameters
• IOS and VPN3k: Filtering Tunneled Traffic
• GRE and DMVPN
• GRE Tunnels over IPsec with Static Crypto Maps
• GRE Tunnels over IPsec with Crypto Profiles
• DMVPN with PSK
• Easy VPN
• VPN3k and Cisco VPN Client
• VPN3k and Cisco VPN Client with Split-Tunneling
• VPN3k and Cisco VPN Client with HoId-Down Route
• VPN3k and Cisco VPN Client with RRI
• VPN3k and Cisco VPN Client with DHCP Server
• VPN3k and Cisco VPN Client with RADIUS Authentication
• VPN3k and Cisco VPN Client with External Group
• VPN3k and Cisco VPN Client with Digital Certificates
• VPN3k and IOS ezVPN Remote Client Mode with Split-Tunneling
• VPN3k and IOS ezVPN Remote NW Extension Mode with RRI
• IOS and IOS ezVPN Remote Client Mode with Xauth/RRI
• IOS and IOS ezVPN Remote NW Extension Mode with Xuath/RRI
• PIX/ASA and Cisco VPN Client with Split-Tunneling/Xauth/RRI
• The PIX/ASA and Cisco VPN Client with External Policy
• The PIX/ASA and Cisco VPN Client with RADIUS Auth/ACL
• The PIX/ASA and Cisco VPN Client with Digital Certificates
• The PIX/ASA and IOS ezVPN Remote NW Extension Mode
• WebVPN and SSL VPN
• ASA and WebVPN Client
• ASA and WebVPN Port Forwarding
• ASA and SSL VPN Client
• VPN3k and WebVPN Client
• VPN3k and WebVPN Port Forwarding
• VPN QoS
• IOS and the PIX/ASA: Policing the L2L IPsec tunnel
• IOS and VPN3k: QoS for L2L Tunnel
• The PIX/ASA and Cisco VPN Client: Per-Flow Policing
• QoS Pre-Classify for IPsec Tunnel
• Advanced VPN Topics
• Decoding IPsec Debugging Output on VPN3k
• IPsec and Fragmentation Issues
• ISAKMP Pre-Shared Keys via AAA
• IPsec NAT-T: L2L Tunnel with VPN3k and IOS Box
• IKE Tunnel Endpoint Discovery (TED)
• IPsec VPN High-Availability with HSRP
• IPsec High Availability with NAT and HSRP
• IPsec Pass-Through Inspection on the PIX/ASA
• L2TP over IPsec between the ASA and Windows 2000 PC
• VPN3k and PPTP Client
• Using ISAKMP Profiles
• IOS Firewall
• Common Configuration
• Basic Access-Lists
• Reflexive Access-Lists
• Dynamic Access-Lists
• Stateful Inspection with CBAC
• CBAC Port-to-Application Mapping
• Preventing DoS Attacks with CBAC
• CBAC Performance Tuning
• Authentication Proxy with RADIUS
• Content Filtering with IOS Firewall
• Identity Management
• Network Admission Control
• ACS Setup for NAC
• NAC L3 IP With the ASA and Cisco VPN Client
• NAC L3 IP with VPN3k and Cisco VPN Client
• Intrusion Prevention
• Basic Configuration
• IPS Initial Setup
• Configuring Inline VLAN Pair
• Promiscuous Mode Monitoring with RSPAN
• Monitoring IPS with IPS Event Viewer
• Event Processing
• Configuring Event Summarization
• Creating Custom Signature
• Event Counting
• Inline Blocking
• Event Action Override
• Event Action Filtering
• IPS Network Access Control (Shunning)
• Rate Limiting with IPS
• Network Attacks
• Layer 2/3 Attacks
• Mitigating ARP Spoofing Attack with PIX/ASA
• Mitigating DHCP Attacks with DHCP Snooping
• Mitigating ARP Attacks in DHCP Environment
• Mitigating MAC/IP Spoofing in DHCP Environment
• Protecting Spanning-Tree Protocol
• Protecting Against Broadcast Storms
• Mitigating VLAN Hopping Attacks
• Protecting Against Network Mapping
• Blackhole Routing using PBR
• Intrusion Prevention with PIX/ASA

What is the difference between the printed and electronic versions?

With the printed version you will receive the workbook professionally printed along with 20 full color laminated diagrams. Additionally with the printed version you will get access to the electronic version FREE OF CHARGE! If your order is placed before 3PM PDT (-7 GMT) you will received access the same day!

The electronic version is exactly the same as the printed version with the exception of the fact the workbook, solutions and diagrams are Adobe PDF format. With the electronic version you can save the file locally to your computer, use it offline and even print it out. There are not any restrictions on the PDF with regards to how many times you can print it.

Try out the Security Lab Workbook as well as our other products with our unique free product demo!