• Learn about IPSec protocols and Cisco IOS IPSec packet processing
• Understand the differences between IPSec tunnel mode and transport mode
• Evaluate the IPSec features that improve VPN scalability and fault tolerance, such as dead peer detection and control plane keepalives
• Overcome the challenges of working with NAT and PMTUD
• Explore IPSec remote-access features, including extended authentication, mode-configuration, and digital certificates
• Examine the pros and cons of various IPSec connection models such as native IPSec, GRE, and remote access
• Apply fault tolerance methods to IPSec VPN designs
• Employ mechanisms to alleviate the configuration complexity of a large- scale IPSec VPN, including Tunnel End-Point Discovery (TED) and Dynamic Multipoint VPNs (DMVPN)
• Add services to IPSec VPNs, including voice and multicast
• Understand how network-based VPNs operate and how to integrate IPSec VPNs with MPLS VPNs

SSL Remote Access VPNs

An introduction to designing and configuring SSL virtual private networks

Jazib Frahim, CCIE® No. 5459

Qiang Huang, CCIE No. 4937

Cisco® SSL VPN solutions (formerly known as Cisco WebVPN solutions) give you a flexible and secure way to extend networking resources to virtually any remote user with access to the Internet and a web browser. Remote access based on SSL VPN delivers secure access to network resources by establishing an encrypted tunnel across the Internet using a broadband (cable or DSL) or ISP dialup connection.

SSL Remote Access VPNs provides you with a basic working knowledge of SSL virtual private networks on Cisco SSL VPN-capable devices. Design guidance is provided to assist you in implementing SSL VPN in existing network infrastructures. This includes examining existing hardware and software to determine whether they are SSL VPN capable, providing design recommendations, and guiding you on setting up the Cisco SSL VPN devices. Common deployment scenarios are covered to assist you in deploying an SSL VPN in your network.

SSL Remote Access VPNs gives you everything you need to know to understand, design, install, configure, and troubleshoot all the components that make up an effective, secure SSL VPN solution.

Jazib Frahim, CCIE® No. 5459, is currently working as a technical leader in the Worldwide Security Services Practice of the Cisco Advanced Services for Network Security. He is responsible for guiding customers in the design and implementation of their networks, with a focus on network security. He holds two CCIEs, one in routing and switching and the other in security.

Qiang Huang, CCIE No. 4937, is a product manager in the Cisco Campus Switch System Technology Group, focusing on driving the security and intelligent services roadmap for market-leading modular Ethernet switching platforms. During his time at Cisco, Qiang has played an important role in a number of technology groups, including the Cisco TAC security and VPN team, where he was responsible for trouble-shooting complicated customer deployments in security and VPN solutions. Qiang has extensive knowledge of security and VPN technologies and experience in real-life customer deployments. Qiang holds CCIE certifications in routing and switching, security, and ISP Dial.

* Understand remote access VPN technologies, such as Point-to-Point Tunneling Protocol (PPTP), Internet Protocol Security (IPsec), Layer 2 Forwarding (L2F), Layer 2 Tunneling (L2TP) over IPsec, and SSL VPN
* Learn about the building blocks of SSL VPN, including cryptographic algorithms and SSL and Transport Layer Security (TLS)
* Evaluate common design best practices for planning and designing an SSL VPN solution
* Gain insight into SSL VPN functionality on Cisco Adaptive Security Appliance (ASA) and Cisco IOS® routers
* Install and configure SSL VPNs on Cisco ASA and Cisco IOS routers
* Manage your SSL VPN deployment using Cisco Security Manager

This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.

This is the eBook version of the printed book. If the print book includes a CD-ROM, this content is not included within the eBook version.
IP Telephony has revolutionized many aspects of telecommunications and it continues to be deployed at a rapid pace. The benefits of transporting voice over an IP infrastructure include increased flexibility, better scalability, and a significant cost savings over traditional telephony networks. However, during the deployment of these VoIP solutions, other types of traditional telephony communications that can also realize these same benefits are often overlooked or ignored.
Fax, Modem, and Text for IP Telephony is a comprehensive resource that confronts the need for information on transporting alternative, non-voice communications over the IP protocol. Beginning with the basic theory and operation of fax, modem, and text telephony, this book then educates you on all of the current transport options that are available. An extensive design guide then provides the pertinent advice and best practices for making the correct planning decisions and choosing the best transport option for your network.
Fax, Modem, and Text for IP Telephony also includes meticulous configuration and troubleshooting guides. The configuration guides in this book include a number of sample configurations and tips to manage any fax, modem, or text deployment. The troubleshooting guides present the essential methodologies, debugs, and analysis tools for quickly resolving both the common and complex issues that may be encountered. This book is the perfect companion to other VoIP resources, and it is the only book that empowers you to successfully handle any fax, modem, or text implementation.
David Hanes, CCIE® No. 3491, is currently a senior engineer specializing in training, network design assistance, and troubleshooting of fax technologies for the Customer Assurance Engineering (CAE) group at Cisco®. Since joining Cisco in 1997, David has worked as a TAC engineer for the WAN, WAN Switching, and Multiservice Voice teams, a team lead for the Multiservice Voice team, and an escalation engineer covering a variety of voice and fax technologies. David has troubleshot escalated issues in Cisco customer networks worldwide and remains a technical resource for other Cisco employees and customers.
Gonzalo Salgueiro CCIE No. 4541, is a senior escalation engineer supporting voice, fax, and modem technologies for the Cisco TAC. Gonzalo has spent more than 11 years troubleshooting complex issues in large-scale VoIP networks as well as providing technical leadership for some of the most critical worldwide voice and fax deployments. Prior to joining the Escalation Team in 1999 Gonzalo had roles as a TAC engineer for both the Access/Dial and Multiservice Voice teams as well as a team lead for the Access/Dial team.

• Learn basic and advanced operational theory and practical implementation of fax, modem, and text communications
• Understand how to implement fax, modem, and text communications using protocols such as H.323, SIP, MGCP, and SCCP.
• Explore the functionality and advantages of T.38 fax relay, passthrough, modem relay, T.37 Store-and-Forward Fax, and text relay for IP network deployments
• Employ expert-recommended best practices and design solutions for deploying fax, modem, and text in an IP telephony environment
• Optimize your network with comprehensive fax, modem, and text configuration and design tips for use with IOS and non-IOS gateways
• Master the latest fax, modem, and text troubleshooting tools and techniques employed by Cisco engineers

• An easy-to-read introduction to the most commonly deployed network security device
• Understand the threats firewalls are designed to protect against
• Learn basic firewall architectures, practical deployment scenarios, and common management and troubleshooting tasks
• Includes configuration, deployment, and management checklists

"Richard Deal's gift of making difficult technology concepts understandable has remained constant. Whether it is presenting to a room of information technology professionals or writing books, Richard's communication skills are unsurpassed. As information technology professionals we are faced with overcoming challenges every day...Cisco ASA Configuration is a great reference and tool for answering our challenges." --From the Foreword by Steve Marcinek (CCIE 7225), Systems Engineer, Cisco Systems

A hands-on guide to implementing Cisco ASA

Configure and maintain a Cisco ASA platform to meet the requirements of your security policy. Cisco ASA Configuration shows you how to control traffic in the corporate network and protect it from internal and external threats. This comprehensive resource covers the latest features available in Cisco ASA version 8.0, and includes detailed examples of complex configurations and troubleshooting. Implement and manage Cisco's powerful, multifunction network adaptive security appliance with help from this definitive guide.

• Configure Cisco ASA using the command-line interface (CLI) and Adaptive Security Device Manager (ASDM)
• Control traffic through the appliance with access control lists (ACLs) and object groups
• Filter Java, ActiveX, and web content
• Authenticate and authorize connections using Cut-through Proxy (CTP)
• Use Modular Policy Framework (MPF) to configure security appliance features
• Perform protocol and application inspection
• Enable IPSec site-to-site and remote access connections
• Configure WebVPN components for SSL VPN access
• Implement advanced features, including the transparent firewall, security contexts, and failover
• Detect and prevent network attacks
• Prepare and manage the AIP-SSM and CSC-SSM cards

Competitive market pressures demand that service providers continuously upgrade and maintain their networks to ensure the delivery of higher-speed, higher-quality applications and services to customers.
The advent of triple play and high speed systems raises the level of testing, accuracy, and precision required on the fiber infrastructure to support these new services. JDSU reduces the complexity around these new network architectures and this book makes them easier to test.
Following on from the earlier Fiber Optic Guide booklet (with over 25,000 copies printed worldwide), this new JDSU "Reference Guide to Fiber Optic Testing" is aimed at fiber optic installers, project managers, telecom technicians and engineers that need to understand, apply, and correctly measure and record the performance of fiber infrastructures.
This first volume reviews the basics in systems, standards, and network architectures and focuses on how to make the most of Optical Time Domain Reflectometers (OTDRs) to install, turn-up, and maintain fiber optic networks. The book covers:

• Basic system and fiber infrastructure design
• Basic fiber infrastructure testing
• Basic OTDR testing
• Advanced OTDR testing

Competitive market pressures demand that service providers continuously upgrade and maintain their networks to ensure the delivery of higher-speed, higher-quality applications and services to customers.
The advent of triple play and high speed systems raises the level of testing, accuracy, and precision required on the fiber infrastructure to support these new services. JDSU reduces the complexity around these new network architectures and this book makes them easier to test.
Following on from the earlier Fiber Optic Guide booklet (with over 25,000 copies printed worldwide), this new JDSU "Reference Guide to Fiber Optic Testing" is aimed at fiber optic installers, project managers, telecom technicians and engineers that need to understand, apply, and correctly measure and record the performance of fiber infrastructures.
This first volume reviews the basics in systems, standards, and network architectures and focuses on how to make the most of Optical Time Domain Reflectometers (OTDRs) to install, turn-up, and maintain fiber optic networks. The book covers:

• Basic system and fiber infrastructure design
• Basic fiber infrastructure testing
• Basic OTDR testing
• Advanced OTDR testing

A comprehensive guide to North American and international telecommunications standards

• Complete reference for ITU standards
• Covers signaling methods and SS7 node types and infrastructures
• Elucidates E1 and R2 configuration and Japanese digital hierarchy
• Thoroughly covers the North American T3 and international E3 digital hierarchies, including information on how to get more bandwidth out of both
• Addresses T1 line coding and frame format schemes as well as implementation requirements
• Itemizes Frame Relay specifications and covers its functions and configuration
• Explains ATM and B-ISDN development and functionality
• Presents the DOCSIS initialization sequence, configurations, and topologies
• Explains the SMDS interface protocol, configuration, troubleshooting, and Data Exchange Interface (DXI)
• Covers xDSL architectures, encoding technologies, circuit attributes, and power levels
• Includes a detailed, thorough comparison of SONET and SDH technologies

Knowledge of telecommunications technologies such as DDS, ISDN, T1/E1, ATM, and SONET is critical in today's competitive IT job market. A comprehensive reference for IT engineers and managers working with WAN connectivity, Telecommunications Technologies Reference covers not only DDS, ISDN, T1, and other physical media but goes further to explain how their international counterparts work-much-needed information when working with today's global, sophisticated networks.

In addition to thoroughly explaining the practical applications of each of these technologies, Telecommunications Technologies Reference includes historical material on how and why each was designed and delves into the underlying principles that support the technologies. With its clear, logical organization, this valuable guide helps telecommunications professionals stay abreast of ever-evolving technologies and key new developments. "Expert whiteboards"-detailed sidebars written by seasoned industry professionals-impart advanced real-world information on major topics throughout the book. Chapter summaries and end-of-chapter review questions help reinforce important concepts and assess your comprehension level.

Whether you are an engineer seeking detailed information on routing data and voice communication, a student looking for an introductory overview of telecommunications resources, or a manager needing fundamental information on WAN technologies, Telecommunications Technologies Reference has all the information you need, collected neatly into one simple-to-reference book. This comprehensive resource will earn a place on your technical library bookshelf as a frequently referenced, indispensable telecommunications guide.

* By Priscilla Oppenheimer.
* Published by Cisco Press.
* Series: Networking Technology.

Learn the differences between various log aggregation and correlation systems

This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks.

Your first step into the world of TCP/IP

* No TCP/IP experience required
* Includes clear and easily understood explanations
* Makes learning easy

Junos For Dummies by Michael Bushong, Cathy Gadecki, Aviva Garrett

JUNOS Enterprise Routing Mar 2008 by OReilly

Junos Cookbook (Juniper Networks Routing Platform) by OReilly