Hardening Cisco Routers (O'Reilly Networking)

By Thomas Akin

Book Overview

As a network administrator, auditor or architect, you know the importance of securing your network and finding security solutions you can implement quickly. This succinct book departs from other security literature by focusing exclusively on ways to secure Cisco routers, rather than the entire network. The rational is simple: If the router protecting a network is exposed to hackers, then so is the network behind it. Hardening Cisco Routers is a reference for protecting the protectors. Included are the following topics: The importance of router security and where routers fit into an overall security plan Different router configurations for various versions of Cisco's IOS Standard ways to access a Cisco router and the security implications of each Password and privilege levels in Cisco routers Authentication, Authorization, and Accounting (AAA) control Router warning banner use (as recommended by the FBI) Unnecessary protocols and services commonly run on Cisco routers SNMP security Anti-spoofing Protocol security for RIP, OSPF, EIGRP, NTP, and BGP Logging violations Incident response Physical security Written by Thomas Akin, an experienced Certified Information Systems Security Professional (CISSP) and Certified Cisco Academic Instructor (CCAI), the book is well organized, emphasizing practicality and a hands-on approach. At the end of each chapter, Akin includes a Checklist that summarizes the hardening techniques discussed in the chapter. The Checklists help you double-check the configurations you have been instructed to make, and serve as quick references for future security procedures. Concise and to the point, Hardening Cisco Routers supplies you with all the tools necessary to turn a potential vulnerability into a strength. In an area that is otherwise poorly documented, this is the one book that will help you make your Cisco routers rock solid.

• Format: Paperback
• Language: English
• ISBN: 0596001665
• ISBN13: 9780596001667
• Release Date: April 2002
• Publisher: O'Reilly Media
• Length: 190 Pages
• Weight: 0.75 lbs.
• Dimensions: 0.5" x 7.0" x 9.2"

Customer Reviews

"The facts Ma'am, just the fact".

Intended audiences: network administrators, security advisors/auditors, system architects.This book is, pound for pound, among the best in my technical library. Having almost no previous knowledge in router hardening (although I was aware of the basics of Cisco routers) a few hours with this book enabled me to review the "hardening" plan submitted by a highly paid security consultant, and provide useful comments on improving the proposal. No doubt this book is the beginning, not the end, of my education on this subject. But this fine book got me off to a quick and productive start, which is high praise when compared to what could be said about so many other technical titles. Highly recommended.

No-nonsense reference for securing Cisco routers

This book is concise and well written. It covers most, if not all of the areas involved in locking down Cisco routers. And it does so in clearly defined chapters, making it very easy to navigate as a reference. In addition, each topic is accompanied by clear configuration examples.I also found it very complete. Even covering information which I haven't yet come across in the various NSA guides and Cisco texts on the subject. As someone already mentioned, you'll no longer need to trawl the web and other sources for this info; Thomas Akin and O'Reilly's have done the hard work for you.

Great compilation for hardening Cisco Routers

Although the content of the book can be found in the Cisco web site, but why bother digging the web site for it?Thomas Akin did a great job by providing all the basics (and more) that we should do to hardened Cisco Routers before putting it in a production network specially those routers providing internet access to users.Danilo Castro DyMCP+I, MCSE, CCNP

A Goldmine

This book is nothing short of a goldmine. I have read many infosec books, including plenty of Cisco security books, and this one packs twice as much quality information with twice as many topics in a tenth of the space. This one is cut in dry. The layout is perfect. The topic is stated, followed by the vulnerability and then the fix. A network admin's dream, without all of the filler.

A TRUE Goldmine for Cisco admins

This book is a huge *must* for anyone who works with Cisco routers. I got it because as a network admin I needed a checklist on securing our routers. Showed it to our InfoSec director and he ordered all our routers nationwide to be secured according to the book's checklists!