سیاست‌های فایروال و پیکربندی‌های VPN

The security provided by firewalls and VPNs is only as strong as the protocol rules and policies that you create. The concepts of "defense-in-depth" and "least privilege" are merely holes in your perimeter waiting to be exploited, unless you can define and maintain protocol rules that allow only the minimum protocols required to provide your requisite services. This book provides fundamental information necessary to configure firewalls and build VPNs and DMZs to survive the dangers of today's internet. The book includes a bonus chapter from the companion Web site on using Ethereal to monitor and analyze network traffic. While you may now feel overwhelmed by the countless firewalls with a dizzying array of features, you will feel empowered by the knowledge gained from this book. This book covers the leading firewall products. It describes in plain English what features can be controlled by a policy, and walks the reader through the steps for writing the policy to fit the objective. Because of their vulnerability and their complexity, VPN policies are covered in more depth with numerous tips for troubleshooting remote connections. Products covered include Cisco PIX Firewall, ISA Server 2004, Check Point NGX, Juniper'?s NetScreen Firewalls, SonicWall, and Nokia.

The first book on the market covering the #2 best-selling firewall appliances in the world from NetScreen. This book continues Syngress' history from ISA Server to Check Point to Cisco Pix of being first to market with best-selling firewall books for security professionals.

Configuring NetScreen Firewalls is the first book to deliver an in-depth look at the NetScreen firewall product line. It covers all of the aspects of the NetScreen product line from the SOHO devices to the Enterprise NetScreen firewalls. Also covered are advanced troubleshooting techniques and the NetScreen Security Manager. This book offers novice users a complete opportunity to learn the NetScreen firewall appliance. Advanced users will find it a rich technical resource.

* NetScreen is the #2 best-selling firewall appliance in the world (behind only Cisco PIX) and there are no competing books.

* Covers the materials found on the NetScreen NCSA 5.0 exam.

* Syngress firewall books are consistent best-sellers with market-leading books on ISA Server, Cisco PIX, and Check Point Next Generation.

The first book on the market covering the #2 best-selling firewall appliances in the world from NetScreen. This book continues Syngress' history from ISA Server to Check Point to Cisco Pix of being first to market with best-selling firewall books for security professionals.

Configuring NetScreen Firewalls is the first book to deliver an in-depth look at the NetScreen firewall product line. It covers all of the aspects of the NetScreen product line from the SOHO devices to the Enterprise NetScreen firewalls. Also covered are advanced troubleshooting techniques and the NetScreen Security Manager. This book offers novice users a complete opportunity to learn the NetScreen firewall appliance. Advanced users will find it a rich technical resource. NetScreen is the #2 best-selling firewall appliance in the world (behind only Cisco PIX) and there are no competing books. Covers the materials found on the NetScreen NCSA 5.0 exam. Syngress firewall books are consistent best-sellers with market-leading books on ISA Server, Cisco PIX, and Check Point Next Generation

Firewall Policies and VPN Configurations 1 Contents 13 Part I Security Policy -1 Chapter 1 Network Security Policy -1 Introduction 26 Defining Your Organization 28 Different Access for Different Organizations 41 Untrusted Networks 45 Chapter 2 Using Your Policies to Create Firewall and VPN Configurations 69 Introduction 70 What Is a Logical Security Configuration? 71 Planning Your Logical Security Configuration 72 Writing Logical Security Configurations 82 Part II Firewall Concepts 93 Chapter 3 Defining a Firewall 95 Introduction 96 Why Have Different Types of Firewalls? 96 Back to Basics—Transmission Control Protocol/Internet Protocol 105 Firewall Types 120 Application Proxy 121 Gateway 125 Chapter 4 Deciding on a Firewall 145 Introduction 146 Appliance/Hardware Solution 146 Software Solutions 197 Part III VPN Concepts 231 Chapter 5 Defining a VPN 233 Introduction 234 What Is a VPN? 234 Public Key Cryptography 243 IPSec 246 SSL VPNs 258 Layer 2 Solutions 266 SSH Tunnels 271 Technical Description 272 Others 279 Chapter 6 Deciding on a VPN 289 Introduction 290 Appliance / Hardware Solution 293 Software Solutions 312 Part IV Implementing Firewalls and VPNs (Case Studies) 327 Chapter 7 IT Infrastructure Security Plan 329 Introduction 330 Infrastructure Security Assessment 330 Project Parameters 379 Project Team 388 Project Organization 388 Project Work Breakdown Structure 389 Project Risks and Mitigation Strategies 394 Project Constraints and Assumptions 396 Project Schedule and Budget 397 IT Infrastructure Security Project Outline 398 Chapter 8 Case Study: SOHO (Five Computers, Printer, Servers, etc.) 407 Introduction 408 Employing a Firewall in a SOHO Environment 417 Introducing the SOHO Firewall Case Study 418 Chapter 9 Medium Business (