Security+ Guide to Network Security Fundamentals, 3rd Edition, by Mark Ciampa Knowledge and skills required for Network Administrators and Information Technology professionals to be aware of security vulnerabilities, to implement security measures, to analyze an existing network environment in consideration of known security threats or risks, to defend against attacks or viruses, and to ensure data privacy and integrity. Terminology and procedures for implementation and configuration of security, including access control, authorization, encryption, packet filters, firewalls, and Virtual Private Networks (VPNs). CNIT 120: Network Security http://samsclass.info/120/120_S09.shtml#lecture Policy: http://samsclass.info/policy_use.htm Many thanks to Sam Bowne for allowing to publish these presentations.

1. Chapter 5 Network Defenses

7. Advantages of Subnetting

11. Accounting machines are on their own VLAN

14. Vulnerabilities in Converged Networks

16. DMZ with One Firewall

17. DMZ with Two Firewalls

20. Network Address Translation (NAT) Private IP Addresses Address Translation 192.168.1.101 -> 147.144.1.101 192.168.1.102 -> 147.144.1.102 192.168.1.103 -> 147.144.1.103 192.168.1.151 -> 147.144.1.104 Public IP Addresses

22. NAT with PAT Web browser: 192.168.1.101 Port 1100 Email: 192.168.1.101 Port 1102 Web browser: 192.168.1.103 Port 1100 Address Translation 192.168.1.101 Port 1100 -> 147.144.1.1 Port 2100 192.168.1.101 Port 1102 -> 147.144.1.1 Port 2101 192.168.1.103 Port 1100 -> 147.144.1.1 Port 2102

28. Firewall (continued)

30. Stateless Firewall Rules

33. Proxy Server I want to see yahoo.com I will get yahoo.com and save a copy Internet Here is my copy of yahoo.com

35. Reverse Proxy Connect to Web server 1

38. Network Intrusion Detection Systems (NIDS) (continued)

45. Internet Content Filters (continued)