Chapter 6

This chapter covered network security. The beginning of the chapter covered the OSI model again, then went through the differences between various network devices (routers, switches, etc.), all of which was covered in depth in CIS-155. Network security devices were next; things like firewalls, proxies and (software) spam and content filters. IDS's were covered, along with the various monitoring methods they use to detect potential attacks (anomaly, behavior, heuristic, etc.) Network technologies were next, such as network address translation (NAT), which masks the IP address of the sender and network access control (NAC) which blocks devices from joining a network that lacks a defined level of security. Increasing network security through DMZ'a and through subnetting schemes were discussed next. VLANs and remote access were covered last, each one of them are used to group devices, thus segmenting away some devices from more secure data.