Self-Defending Networks: The Next Generation of Network Security - Identify, prevent, and adpat to internal and external threats with proactive security solutions

• Evaluate the current threat environment and risks to IP networks
• Mitigate DDoS attack threats
• Unify firewall, IPS, and VPN management with the Cisco Adaptive Security Appliance
• Automatically update virus-related IPS signatures with Cisco Incident Control Service (ICS)
• Authenticate and quarantine rogue and non-compliant users with Cisco NAG Framework
• Identify, authenticate, and authorize users to VLANs and applications with IEEE 802.1x
• Enforce end-point security policies with the Cisco MAC Appliance
• Protect hosts and desktops from the latest security threats with Cisco Security Agent
• Configure and manage self-defending networks with the Cisco Security Manager
• Mitigate and automatically respond to security threats with Cisco Security MARS

In the self-defending network, security is folded into every part of the infrastructure. This network-based security strategy gives you the flexibility to use your existing investment to solve the most pressing security concerns and at the same time provides an architectural, real-time security platform that can evolve to manage threats in an automated, proactive manner.

Self-Defending Networks: The Next Generation of Network Security provides the information you need to understand and design a Cisco Self-Defending Network and to deploy one in a simple and cost-effective manner. The book provides a high-level overview of self-defending network concepts and focuses on how to take advantage of integrated devices and centralized management. Best-practices and deployment instructions help accelerate deployment of the Cisco Self-Defending Network. The book provides you with a blueprint for a complete end-to-end security solution through its coverage of such topics as distributed denial-of-service (DDoS) attack mitigation, deployment of Cisco Adaptive Security Appliance (ASA), automated intrusion prevention system (IPS) signature updates, user authentication and quarantine with Network Admission Control (NAC), 802.Ix, host intrusion prevention, centralized security management, and automatic threat response with the Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS).

Whether you are looking for an overview of the concepts and benefits of a self-defending network or want to deploy a security architecture to enable your network to automatically protect itself from attacks, this book helps you integrate and automate security in your network.