Cisco Cisco IPS 4360 Sensor 백서

다운로드
페이지 79
2
2
Introduction
August 2012 Series
Introduction
Cisco SBA Borderless Networks is a solid network foundation designed to 
provide networks with up to 10,000 connected users the flexibility to sup-
port new users and network services without re-engineering the network. 
We created a prescriptive, out-of-the-box deployment guide that is based 
on best-practice design principles and that delivers flexibility and scalability. 
The Firewall and IPS Deployment Guide focuses on the Internet edge fire-
wall and intrusion prevention system (IPS) security services that protect your 
organization’s gateway to the Internet. Internet service-provider connectivity 
and routing options provide resiliency to the design. This guide covers the 
creation and use of DMZ segments for use with Internet-facing services like 
a web presence. The IPS guidance covers Internet edge inline deployments 
as well as internal distribution layer IDS (promiscuous) deployments. 
Related Reading
The Internet Edge Design Overview orients you to the overall Cisco SBA 
design and explains the requirements that were considered when selecting 
specific products. 
The Remote Access VPN Deployment Guide focuses on provisioning the 
network to provide remote access (RA) services. The deployment includes 
VPN access as part of the Internet edge firewalls as well as the ability to 
deploy RA VPN services on separate dedicated devices.
The Web Security Using WSA Deployment Guide covers deploying the 
Cisco Web Security Appliance for clients accessing the Internet. This covers 
protection from malware and viruses as well as acceptable use controls for 
what sites are appropriate to be visited.
The Email Security Using ESA Deployment Guide covers deployment of the 
Email Security Appliance in order to provide protection for the organization’s 
email system. Inspection of inbound emails for spam and malicious content 
is the focus of the deployment. It also covers adding an email demilitarized 
zone (DMZ) to the Internet Firewall to increase the overall security.