In this chapter, we are going to look at networking components and how they could affect the security of your network. We will look at firewalls, switches, and routers. We will start by looking at the OSI Reference model that was created to improve communications between devices.
We will cover the following exam objectives in this chapter:
- Install and configure network components, both hardware–and software-based, to support organizational security:
- Firewall—ACL—application-based versus network-based—stateful versus stateless—implicit deny
- VPN concentrator—remote access versus site-to-site—IPSec—tunnel mode—transport mode—AH—ESP—split tunnel versus full tunnel—TLS—always-on VPN
- NIPS/NIDS—signature-based—heuristic/behavioral—anomaly...
