Cisco Router Firewall Security

Rating:
Summary: Access This Book!
Review: Cisco Router Firewall Security by Richard A. Deal delivers exactly what the title says: using a Cisco router for every possible perimeter security scenario. The book is written for someone who has at least an intermediate level knowledge of Cisco router and switching technologies. Advanced security consultants may want to go to Chapter 21, Case Study Configuration, and refer back to the previous chapters for more explanation when needed. However, those responsible for network security should read the entire book to be familiar with all of the latest security features that Cisco routers are capable of as well as a number of vulnerabilities that should be hardened, when possible.
Deal fills in much of the lacunae of Cisco IOS configuration that are left out of certification handbooks. His sprinkling of many anecdotes from his personal experience makes the book immensely practical. For example, the author points out that Reflexive Access Control Lists can be used as a less expensive substitute for Content Based Access Control when filtering traffic for a few dozen users.
Deal's book will prepare you to deal with special situations where company policy demands something different than what a firewall in a box solution offers. As he shows you how to accomplish Intrusion Detection, Content Filtering, Security Logging, Virtual Private Networking, Denial of Service Prevention, and Access Management solutions with Cisco routers, he points out when these features should be used with a router or dedicated equipment, like the PIX firewall.
I give Deal 5 stars for the layout and structure, which includes notes, cautions, tables, and configurations. But what I found most valuable was his many real life illustrations from his consulting business.