Cisco.Press.Cisco.Network.Admission.Control.Volume.II.Nov.2006.eBook-BBL, Networking

[ Pobierz całość w formacie PDF ]
Cisco Network Admission Control,
Volume II:
NAC Network Deployment
and Troubleshooting
Jazib Frahim, CCIE No. 5459, Omar Santos, David White, Jr.,
CCIE No. 12021
Cisco Press
Cisco Press
201 West 103rd Street
Indianapolis, IN 46290 USA
ii
Cisco Network Admission Control, Volume II
NAC Framework Deployment and Troubleshooting
Jazib Frahim, CCIE No. 5459, Omar Santos, David White, Jr., CCIE No. 12021
Copyright © 2007 Cisco
Published by:
Cisco Press
800 East 96th Street
Indianapolis, IN 46240 USA
All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic
or mechanical, including photocopying, recording, or by any information storage and retrieval system, without writ-
ten permission from the publisher, except for the inclusion of brief quotations in a review.
Library of Congress Catalog Card Number: 2004114756
Printed in the United States of America 1 2 3 4 5 6 7 8 9 0
First Printing November 2006
ISBN: 1-58705-225-3
Warning and Disclaimer
This book is designed to provide information about the Cisco NAC Framework. Every effort has been made to make
this book as complete and as accurate as possible, but no warranty or ﬁtness is implied.
The information is provided on an “as is” basis. The authors, Cisco Press, and Cisco shall have neither liability nor
responsibility to any person or entity with respect to any loss or damages arising from the information contained in
this book or from the use of the discs or programs that may accompany it.
The opinions expressed in this book belong to the author and are not necessarily those of Cisco.
Trademark Acknowledgments
All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capital-
ized. Cisco Press or Cisco cannot attest to the accuracy of this information. Use of a term in this book should not be
regarded as affecting the validity of any trademark or service mark.
Feedback Information
At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted
with care and precision, undergoing rigorous development that involves the unique expertise of members from the
professional technical community.
Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could
improve the quality of this book or otherwise alter it to better suit your needs, you can contact us through e-mail at
feedback@ciscopress.com. Please make sure to include the book title and ISBN in your message.
We greatly appreciate your assistance.
iii
Corporate and Government Sales
Cisco Press offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales.
For more information please contact: U.S. Corporate and Government Sales 1-800-382-3419
corpsales@pearsontechgroup.com
For sales otuside the U.S. please contact: International Sales international@pearsoned.com
Publisher
Paul Boger
Cisco Representative
Anthony Wolfenden
Cisco Press Program Manager
Jeff Brady
Executive Editor
Brett Bartow
Production Manager
Patrick Kanouse
Development Editor
Andrew Cupp
Project Editor
Tonya Simpson
Copy Editor
Krista Hansing Editorial Services, Inc.
Technical Editors
Darin Miller
John Stuppi
Publishing Coordinator
Vanessa Evans
Book Designer
Louisa Adair
Cover Designer
Louisa Adair
Composition
Carlisle Publishing Services
Proofreader
Chrissy White
Indexer
Julie Bess
iv
About the Authors
Jazib Frahim,
CCIE No. 5459, has been with Cisco Systems for more than seven years. With a Bache-
lor’s degree in computer engineering from Illinois Institute of Technology, he started out as a TAC engi-
neer with the LAN Switching team. He then moved to the TAC Security team, where he acted as a
technical leader for the security products. He led a team of 20 engineers as a team leader in resolving
complicated security and VPN technologies. Jazib is currently working as a Senior Network Security
Engineer in the Worldwide Security Services Practice of Cisco’s Advanced Services for Network Secu-
rity. He is responsible for guiding customers in the design and implementation of their networks, with a
focus in network security. He holds two CCIEs, one in Routing and Switching and the other in Security.
He also authored the Cisco Press book
Cisco ASA: All-in-one Firewall, IPS, and VPN Adaptive Security
Appliance
(ISBN: 1-58705-209-1). Additionally, Jazib has written numerous Cisco online technical
documents and has been an active member on Cisco’s online forum, NetPro. He has presented at Net-
workers on multiple occasions and has taught many onsite and online courses to Cisco customers, part-
ners, and employees.
Jazib is currently pursuing a Master of Business Administration (MBA) degree from North Carolina
State University.
Omar Santos
is a Senior Network Security Consulting Engineer in the Worldwide Security Services
Practice of Cisco’s Advanced Services for Network Security. He has more than 12 years of experience
in secure data communications. Omar has designed, implemented, and supported numerous secure net-
works for Fortune 500 companies and the U.S. government, including the United States Marine Corps
(USMC) and Department of Defense (DoD). He is also the author of the Cisco Press book
Cisco ASA:
All-in-one Firewall, IPS, and VPN Adaptive Security Appliance
(ISBN: 1-58705-209-1) and many Cisco
online technical documents and conﬁguration guidelines. Prior to his current role, he was a technical
leader of Cisco’s Technical Assistance Center (TAC), where he taught, led, and mentored many engi-
neers within the organization. He is an active member of the InfraGard organization, a cooperative
undertaking between the Federal Bureau of Investigation and an association of businesses, academic
institutions, state and local law-enforcement agencies, and other participants that are dedicated to
increasing the security of the critical infrastructures of the United States of America. Omar has also
delivered numerous technical presentations to Cisco customers, partners, and other organizations.
David White, Jr.
, CCIE No. 12021, has more than ten years of networking experience with a focus on
network security. He is currently an Escalation Engineer in the Cisco TAC, where he has been for more
than six years. In his role at Cisco, he is involved in new product design and implementation and is an
active participant in Cisco documentation, both online and in print. David holds a CCIE in Security and
is also NSA IAM certiﬁed. Before joining Cisco, David worked for the U.S. government, where he
helped secure its worldwide communications network. He was born and raised in St. Petersburg,
Florida, and received his Bachelor’s degree in computer engineering from the Georgia Institute of
Technology.
[ Pobierz całość w formacie PDF ]

Cisco.Press.Cisco.Network.Admission.Control.Volume.II.Nov.2006.eBook-BBL, Networking

Odnośniki