cisco certification hardware kits

cisco certification hardware kits.Security threats can only be successfully identified if the network and the people who use it are prepared. Therefore, the first step in this preparation is to be able to see any "wind in the sails" of the network. How can network administrators prevent or mitigate security threats if they don't know anything about the network they are managing? It is possible to gain insight into the network by using certain features that have or have not been turned on by the devices on the network. In addition, an accurate "defense-in-depth" strategic network map should be created, not only to clearly identify packet flow routes, but also to determine where in the network security mechanisms can be enabled to detect, classify and mitigate security threats. Don't forget that cybersecurity is a constant battle. In addition to having to be familiar with your network, you must also have a well-developed defense mechanism in place to defend it from the enemy.Sometimes an onion-shaped graphic is used to demonstrate and analyze how to deploy protection and enforcement measures in a network that meet the "defense-in-depth" strategy concept. Figure 3.2 shows such an onion-shaped "defense-in-depth" strategy diagram, in which network resources are protected by layers of protection.By creating such a "strategy map", you can not only understand the network structure of your organization, but also strategically choose where to deploy network insight tools (e.g., NetFlow) to discover the "strongholds" that will kill security incidents. ". Note that the access, distribution and core layers and the boundaries between the three layers need to be clearly defined.Such a strategy map also provides a visual representation of the risks within the unit network. The strategy map shown in Figure 3-2 is drawn based on the functions of the network devices and can also be drawn based on the critical systems to be protected. For example, after sorting through the critical systems deployed within the unit network, a hierarchical strategy diagram similar to that in Figure 3.2 can be drawn. As seen in Figure 3.2, the "critical database in the data center" is the most important source of applications/data for the unit. This database sits at the "heart" of Figure 3-2.158 Chapter 3 Security PrinciplesCritical Databases in the Data CenterData center access and distribution layers (including firewalls, IPS, etc.)Core layerFigure 3-2 Layered onion-like "defense in depth" strategyStrategy diagram