Organizations continue to deploy firewalls as their central gatekeepers to prevent unauthorized users from entering their networks. However, network security is in many ways similar to physical security in that no one technology serves all needs-rather, a layered defense provides the best results. Organizations are increasingly looking to additional security technologies to counter risk and vulnerability that firewalls alone cannot address. Network-based intrusion detection systems (IDSs) provide around-the-clock network surveillance. The Cisco Secure Intrusion Detection System (CSIDS) is a real-time, network-based IDS designed to detect, report, and terminate unauthorized activity throughout a network.

Cisco Secure Intrusion Detection System is a Cisco authorized self-paced learning tool providing a clear explanation of why network security is crucial in today's converged networking environment, how CSIDS improves the security on a network, and how to install and configure CSIDS. This book is divided into seven parts: In Part I, you are exposed to how networks are attacked, along with ways to secure networks. This leads into Part II, which provides an explanation of the components of CSIDS and how they fit into a secure network design. The installation of CSIDS is examined in Part III. Part IV discusses the management of alarms. Normal traffic generates many alarms, both from actual attacks as well as false positives. Without proper management, this flood of alarms can render the IDS ineffective. Part IV also explains how the various types of alarm signatures are classified, along with the severity levels that can be associated with an alarm signature. Part V analyzes the configuration of the major features of CSIDS. This information allows you to configure your CSIDS in an efficient manner, thus providing the best security for the network. Part VI looks at the configuration of the Cisco Secure Intrusion Detection Director (CSIDD) platform, as well as the Cisco IOS® Firewall IDS. This book concludes with Part VII on upcoming features and enhancements planned for the CSIDS.

Cisco Secure Intrusion Detection System is part of a recommended learning path from Cisco Systems that can include simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press.

CCSP Self-Study: Cisco Secure Intrusion Detection System (CSIDS), Second Edition, is a Cisco authorized, self-paced learning tool that helps you gain mastery over the use of both the host-based and network-based IDS options (as well as the Cisco Threat Response functionality) by presenting a consolidated all-inclusive reference on all of the current Cisco IDS sensor platforms and management platforms. Chapter overviews bring you quickly up to speed and help you get to work right away. Configuration examples are designed to show you how to make the most of your IDS system, and unique chapter-ending review questions test your knowledge.

Whether you are seeking a reference guide to working with the CIDS sensor and management platforms or a study guide for the 642-531 exam, CCSP Self-Study: Cisco Secure Intrusion Detection System (CSIDS), Second Edition, supports your effective use of the Cisco IDS.

CCSP Self-Study: Cisco Secure Intrusion Detection System (CSIDS), Second Edition, is part of a recommended learning path from Cisco Systems that can include simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit www.cisco.com/go/authorizedtraining.

This volume is in the Certification Self-Study Series offered by Cisco Press. Books in this series provide officially developed training solutions to help networking professionals understand technology implementations and prepare for the Cisco Career Certifications examinations.

Simple Chinese Cooking offers Kylie Kwong’s philosophy of marrying the freshest ingredients and the simplest techniques to create amazing flavor. Kylie grew up devouring the mouthwatering heartiness of her mother’s traditional Cantonese cuisine. Armed with the fundamental techniques, she set out to give ancient tradition a modern twist and bring the joys of Chinese cooking to all. Now, people from all over the globe flock to her popular restaurant in Sydney, billy kwong. But in this book, she brings her delicious recipes to Chinese food lovers everywhere.

Simple Chinese Cooking demystifies the preparation of Chinese cuisine—with ingredients that are readily available in any grocery store, and recipes that are friendly and easy-to-follow. From soy sauce chicken and steamed fish fillets with ginger and spring onions, to prawn wonton soup, this book offers delicious everyday meals, as well as dishes that are perfect for entertaining. With succulent 4-color photographs throughout and step-by-step instructional pictures, Simple Chinese Cooking will guide anyone to create a delectable feast.

Like the other books in the Cisco Press certification line, this one reads like an instructor's lecture, albeit frequently supplemented by reference material (command documentation, for example). The authors begin with material that should be familiar to a Cisco Certified Network Associate (CCNA) or anyone else with basic network grounding, and build from there into the more specialized areas of VPNs, NAT, and access-control lists as they pertain to PIX environments. As always, you'll learn more if you have a testbed PIX firewall on which to try the procedures that appear in the text (the companion CD-ROM holds no simulator, only a quiz program), but this book gives test candidate a great base from which to work. --David Wall

Topics covered: The stated objectives of the two CSPFA exams, one of which candidates must pass in order to earn the Cisco Secure PIX Firewall Advanced (CSPFA) certification. The two exams are 9E0-111 (soon to be retired) and 642-521. Coverage includes PIX firewall installation and configuration, as well as techniques for adding such services as remote access management, virtual private networks (VPNs), network address translation (NAT, and accounting features.