ccna 6.0

ccna 6.0.5.5 SummaryThe network must be able to immediately identify and mitigate worm and virus threats. In order for the network to defend against rapidly evolving Internet worms and must-reads, a network-based IPS should be implemented online (inline) along with the IDS implementation offline.IPS features are similar to the antivirus.dat file in that they provide the IPS with a list of identified problems. IPS profiles are configured to use different triggers and behaviors. Security personnel must continuously monitor the IPS solution to ensure that it provides an adequate level of security. If it does not, the features must be tuned for the specific network.Chapter 6 Protecting the Local Area NetworkProtecting a network involves making its weakest link strong. For this reason, in addition to protecting the network boundaries, an equally important thing is to protect the endpoint devices within the network. Endpoint security includes protecting the network infrastructure in the local area network (LAN) as well as endpoint systems such as workstations, servers, IP phones, access points, and storage area network (SAN) devices. There are a number of endpoint security applications and devices that can be used to accomplish these protections, including Cisco Email and Web Security Appliance security appliances and Network Admission Control (NAC).Endpoint security also revolves around protecting Layer 2 of the network architecture to prevent Layer 2 attacks like MAC address spoofing and STP manipulation attacks. Layer 2 security configurations include enabling port security, BPDU protection, root protection, storm control, and PVLAN Edgeo ultimately, which type of security solution is implemented depends on the type of LAN technology in use. For example, networks that deploy wireless, VoIP, and SAN technologies require additional security considerations and solutions.6.1 Endpoint Security6.1.1 Endpoint Security Overview6.1.1.1 Endpoint Security OverviewThe high-profile threats that are often discussed in the media are external threats, such as Internet worms and Dos attacks. However, protecting an internal LAN is just as important as protecting the network perimeter. Without a secure LAN, users in an organization can be exposed to cyber threats and network disruptions that can have a direct impact on a company's productivity and profits.