RE: Expected to know Security Attacks for R+S?

From: Joseph Brunner (joe@affirmedsystems.com)
Date: Fri Aug 24 2007 - 17:55:16 ART


Danke Schon!

Joe

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Ronnie Angello
Sent: Friday, August 24, 2007 4:20 PM
To: Joseph Brunner
Cc: Gregory Gombas; Cisco certification
Subject: Re: Expected to know Security Attacks for R+S?

Add unicast RPF, IP source tracker, and IOS login enhancements to that
list. Reading through all of the 12.4 security config guides should cover
it.

On 8/24/07, Joseph Brunner <joe@affirmedsystems.com> wrote:
>
> -Lock and Key
> -Lock and Key for 1 host
> -reflexive acl
> -reflexive acl with time-ranges
> -traffic filtering via mqc
> -traffic filtering via mqc with time-ranges
> -dropping smurf traffic via car police 8000
> -dropping fragments via acl & car police 8000
> -alerting that a dos attack is on going via ip icmp & rmon
> -TCP intercept watch mode
> -TCP intercept intercept mode
> -CBAC
> -CBAC with nat
>
> I would say make this your first study page,
>
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hsec_c
> /part15/index.htm
>
> from the DocCD
>
> Joe
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Gregory Gombas
> Sent: Friday, August 24, 2007 10:49 AM
> To: Cisco certification
> Subject: Expected to know Security Attacks for R+S?
>
> Hello group,
>
> For the R+S lab, are we expected to know what all the common security
> attacks are and how to defend against them?
>
> Or will the lab describe the attack for you i.e this attack sends
> fragmented packets to port 666?
>
> Also can someone recommend some good web pages that have sample
> configurations.
>
> Thank You
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>

-- 
Ronald Angello
CCIE #17846


This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:13 ART