8/8/2019 cisco ip security
1/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->
Zchdi >
H`trldyjthl` tl HVZij QV@z
Vrizi`tid ox
Dr. Vitir K. Wicjbir# Jbiznvinei @itjrnatzmi`
Zchdi ?
Nolyt tbi Zvineir
Dr. Viti Wicjbir
Jhzjl JJHI *>77:# JJZH *846>4# JJHV
@itwlre dizhg` ! mn`ngimi`t jl`zycth`g
Ztlje ~yltnthl` ahrm# :666 rlytirz# TJV,HV
Zijl`d ztlje ~yltnthl` ahrm# ?666 rlytirz# YDVorlndjnztz
Bltic jbnh`# >666 rlytirz# Z@N
Glqir`mi`t ngi`jx# >966 rlytirz
Tinjb mn`x la tbi Jhzjl jlyrziz
I`tirvrhzi @itwlreh`g Mngn{h`i nrthjciz bttv;,,www`itjrnatzmi``it,wicjbir,vnvirz
8/8/2019 cisco ip security
2/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-?
Zchdi :
Ngi`dn
H`trldyjthl` n`d Mlthqnthl`
HVZij Onzhjz
I`tirvrhzi HVZij QV@
Mn`ngh`g QV@
Wrnv-yv
Zchdi 4
Wbx Dl Wi Jnri6
Tbi 4 Ztivz la HVZij ZN Iztnochzbmi t
> Blzt N zi`dz h`tirizth`g trnaahj alr Blzt O
? _lytir N n`d O `iglthnti n` HEI Vbnzi > zizzhl` n`d nytbi`thjnti
HEI ZNHEI ZN HEI Vbnzi >
: _lytir N n`d O iglthnti n` HEI Vbnzi ? zizzhl` n`d ijbn`gi eix
HEI Vbnzi ? HVZij ZNHVZij ZN
4 H`alrmnthl` hz ijbn`gid qhn HVZij ty``ic
HVZij Ty``ic
Blzt N Blzt O_lytir N _lytir O
8/8/2019 cisco ip security
6/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-1
Zchdi >>
Wbnt tl I`jrxvt
Tbi jrxvtl mnv xly jl`ahgyri riairi`jizn` njjizz chzt alr h`tirizth`g vnjeitz
Wbnt tl i`jrxvt "lytoly`d(
Wbnt tl dijrxvt "h`oly`d(
Ha tbi rlytir i`jrxvtz lr dijrxvtz tbiwrl`g vnjeit# ht gitz `l`zi`zi n`d n ondjbijezym dhzjnrdid vnjeit.
Zchdi >?
HVZij Trlyocizbllth`g Thvz
Tbi twl i`dz bnqi tl ngrii l` tbi qnrhlyzjblhjiz Blw tl dl HEI "HEI vlchjx(
Nytbi`thjnthl` mitbld# zbnrid zijrit lr JN# itj
NB qirzyz IZV
Ty``ic qirzyz trn`zvlrt
Mizzngi bnzbh`g zjbimi
Xly `iid rlyth`g tl oi noci tl dichqir vnjeitz
HVZij zlyrji nddrizz nt l`i i`d myzt mntjbdizth`nthl` nt tbi ltbir
Xly `iid jl`zhzti`t jrxvtl njjizz chztz... Tbi twl i`dvlh`t NJCz `iid tl mhrrlr injb ltbir
Yzi tbi 4 ztivz tl trlyocizbllt
8/8/2019 cisco ip security
7/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-7
Zchdi >:
Ngi`dn
H`trldyjthl` n`d Mlthqnthl`
HVZij Onzhjz
I`tirvrhzi HVZij QV@
Mn`ngh`g QV@
Wrnv-yv
Zchdi >4
Dizhg` Nzzymvthl`z
Bhgb nqnhcnohchtx n`d anhclqir whtb anztjl`qirgi`ji
Zyvvlrt alr dx`nmhj rlyth`g
Nohchtx tl jnrrx dhqirzi trnaahj# h`jcydh`g HVmycthjnzt# mycth-vrltljlc
Jl`zirqnthqi JVY ciqicz
_lytir-onzid "qirzyz QV@ jl`ji`trntlr(
8/8/2019 cisco ip security
8/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-2
Zchdi >9
Eix Dizhg` Jlmvl`i`tz
Jhzjl QV@ rlytirz nz bind-i`d QV@tirmh`nthl`
Jhzjl njjizz rlytirz nz orn`jbtirmh`nthl`
Yzi bnrdwnri HVZij njjicirnthl`
HVZij IZV Ty``ic mldi
G_I ty``icz# dync ztnr tl twl bind-i`drlytirzNt B^ lr twl bind-i`d zhtiz alr gilgrnvbhj
dhqirzhtx H`tir`it zirqhjiz arlm n` HZV
Zchdi >1
I`tirvrhzi HVZij QV@
HZV
G_I % HVZij ty``icz
_imltiLaahjiz
Ji`trncZhti"z(
8/8/2019 cisco ip security
9/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-8
Zchdi >7
Wbx G_I whtb HVZij2
Lqirbind
Jlzt "G_I % HVZij(; ?4 mlri oxtiz labindir "lqirbind(
Tltnc bindirz nddid; 71 oxtiz
HVZij Ty``ic
HV Bindir
?6 O
IZV Bindir
:? O# qnrhnoci
G_I HV
Bindir
?6 O
G_I
Bindir
4 O
HV
Bindir
?6 O
Vnxclnd
8/8/2019 cisco ip security
10/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->6
Zchdi >8
Nqlhdh`g Arngmi`tnthl`
Wi wn`t tl nqlhd arngmi`th`g tbi HVZijvnjeitz
Tbix bnqi tl oi ri-nzzimocid nt tbi tirmh`nthl`rlytir tl oi dijrxvtid
_i-nzzimocx hz vrljizz zwhtjbid
Zclw % JVY hmvnjt
Zl jrinti arngmi`tz OIAL_I HVZij i`jrxvtz.
_idyji G_I ty``ic MTY tl >466% Oxtiz
Jl`zhdir i`noch`g Vntb MTY Dhzjlqirx l` tbi
ty``icz
Zchdi ?6
Vntb MTY Dhzjlqirx
Vntb MTY Dhzjlqirx hz yzid ox jyrri`t n`driji`t Y@HR n`d Wh`dlwz zirqirz Tbix zi`d cnrgi vnjeitz whtb DA zit
H`tirqi`h`g rlytirz `iidh`g zmnccir MTY zi`d onje HJMVmizzngi whtb lvthl` h`dhjnth`g dizhrid arnmi zh{i
Vrlocim; zlmi wio , zirqir zhtiz oclje ncc HJMVvnjeitz _izyct; cnrgi wio hmngiz# ATV ahci trn`zairz mxztirhlyzcx
anhc# oyt l`cx tl zlmi zhtiz
Yzi rlytir dianyct# ty``icz `lt dlh`g V-MTY-D
Yzi rlytir dianyct; Jhzjl G_I n`d HVZij ty``icz rizit
DA=> tl DA=6 n`d arngmi`t Jhzjl Vri-Arngmi`tnthl` alr HVZij QV@ aintyri
Tbhz vcyz G_I MTY la >466 min`z `l V-MTY-D hzzyiziqi` whtb wio trnaahj qhn HVZij % G_I ty``icz
8/8/2019 cisco ip security
11/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->>
Zchdi ?>
Wbhjb _lytir?
Zchdi ?:
HVZij Zi~yi`ji @ymoirz
HVZij nczl yziz zi~yi`ji `ymoirz alrn`th-rivcnx vrltijthl`
Lyt-la-lrdir vnjeitz jn` cind tl drlvvid vnjeitz.
Jl`jcyzhl`; vrhlrhtx ~yiyh`g n`d clnd-oncn`jh`gjn` cind tl drlvz h` n` HVZij i`qhrl`mi`t.
Mnei l`i G_I ty``ic vrhmnrx whtb zh`gcivriairrid vntb alr injb rimlti zhti
Dx`nmhj rlyth`g anhclqir vrizirqid
Jn` yzi h`tiranji dicnx vnrnmitir tl vriair l`i
G_I ty``ic lqir tbi ltbir "ha oltb bind i`drlytirz nt znmi zhti(
Zchdi ?4
Zirqhji Vrlqhdir
HZV
_imltiLaahjiz
Ji`trncZhti"z(
@iid glldzirqhji biri.
8/8/2019 cisco ip security
13/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->:
Zchdi ?9
Zirqhji Vrlqhdir?
Mn`x lr iqi` mlzt HZVz dl `lt bl`lr tbi C: ^lZmnreh`gz Xlyr qlhji trnaahj mnx ivirhi`ji y`njjivtnoci dicnx lr khttir
Wbi`iqir vlzzhoci# xly `iid ZCNz Jlqirh`g lqirncc dicnx n`d khttir# rivnhr thmi# itj
Lr alr ^lZ-nwnri zirqhji gynrn`tiih`g jirtnh` dicnx n`d khttirciqicz alr qnrhlyz jcnzziz la trnaahj# onzid l` ngriid-yvl`mnreh`gz
Ltbirwhzi# xly jn` divclx n`d cntir dhzjlqir xlyr HVZij QV@ hz`twlreh`g qirx wicc; `l rijlyrzi.
Mycthvci HZVz hz bnrdir ZCNz gi`irnccx l`cx nvvcx whtbh` n zh`gci HZVz `itwlre
Oiwnri; zlmi blmi jnoci ! DZC zirqhjiz oclje HVZijy`cizz oyzh`izz grndi zirqhji hz vnhd alr
Zchdi ?1
ZCNz
JV@ Mycth-zirqhji QV@ ztn`dnrdz;
Khttircizz tbn` lr i~ync tl ?6 mzij
Dicnxcizz tbn` lr i~ync tl 16 mzij l`i wnx
Vnjeit Clzzcizz tbn` lr i~ync tl 69 virji`t
8/8/2019 cisco ip security
14/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->4
Zchdi ?7
Jl`ahgyrnthl` Ztivz
Ztiv >; Jl`ahgyri HEI vlchjx
Ztiv ?; Zvijhax HVZij trn`zalrm n`d
vrltljlc
Ztiv :; Jrinti njjizz chztz "NJCz( alri`jrxvthl`
Ztiv 4; Jl`ahgyri jrxvtl mnv
Ztiv 9; Nvvcx jrxvtl mnv
Zchdi ?2
I`tirvrhzi HVZij QV@
HZV
_imltiLaahji
Ji`trncZhti"z(
>8?>12>>
>8?>12??
>6669
>6661
>61616>
8/8/2019 cisco ip security
15/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->9
Zchdi ?8
Znmvci; HEI Vlchjx
h`tiranji AnztItbir`it>,6
hv nddrizz >8?>12>>
?99?99?996
.
jrxvtl hznemv vlchjx >
i jr :diz
nytbi`thjnthl` vri-zbnri
jrxvtl hznemv eix mxohgzijrit
nddrizz >8?>12??
h`tiranji z6,6
hv nddrizz >8?>12??
?99?99?996
.
jrxvtl hznemv vlchjx >
i`jr :diz
nytbi`thjnthl` vri-zbnri
jrxvtl hznemv eix mxohgzijrit
nddrizz >8?>12>>
Bind I`d _lytir Orn`jb _lytir
Zchdi :6
Znmvci; HVZij Trn`zalrm n`d Vrltljlc
jrxvtl hvzij trn`zalrm-zit
qv`-t-tizt izv-:diz
izv-zbn-bmnj
jrxvtl hvzij trn`zalrm-zit
qv`-t-tizt izv-:diz
izv-zbn-bmnj
Bind I`d _lytir Orn`jb _lytir
8/8/2019 cisco ip security
16/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->1
Zchdi :>
Znmvci; I`jrxvthl` NJCz
hv njjizz-chzt iti`did
qv`-ztnthj-> virmht gri
blzt >8?>12>> blzt
>8?>12??
hv njjizz-chzt iti`did
qv`-ztnthj-? virmht gri
blzt >8?>12?? blzt
>8?>12>>
Bind I`d _lytir Orn`jb _lytir
Zchdi :?
Znmvci; Jrxvtl Mnv
jrxvtl mnv ztnthj-mnv-vkw>
cljnc-nddrizz
AnztItbir`it>,6
jrxvtl mnv ztnthj-mnv-vkw> >
hvzij-hznemv
zit viir >8?>12??
zit trn`zalrm-zit qv`-t-tizt
mntjb nddrizz qv`-ztnthj->
jrxvtl mnv ztnthj-mnv-vkw?
cljnc-nddrizz Zirhnc6,6
jrxvtl mnv ztnthj-mnv-vkw? >
hvzij-hznemv
zit viir >8?>12>>
zit trn`zalrm-zit qv`-t-tizt
mntjb nddrizz qv`-ztnthj-?
Bind I`d _lytir Orn`jb _lytir
8/8/2019 cisco ip security
17/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->7
Zchdi ::
Znmvci; Nvvcx Jrxvtl Mnv
h`tiranji Ty``ic>
hv nddrizz >6669
?99?99?99?9?
ty``ic zlyrji >8?>12>>
ty``ic dizth`nthl`
>8?>12??
jrxvtl mnv ztnthj-mnv-vkw>
.
h`tiranji AnztItbir`it>,6
hv nddrizz >8?>12>>
?99?99?996jrxvtl mnv ztnthj-mnv-vkw>
h`tiranji Ty``ic>
hv nddrizz >6661
?99?99?99?9?
ty``ic zlyrji >8?>12??
ty``ic dizth`nthl` >8?>12>>
jrxvtl mnv ztnthj-mnv-vkw?
.
h`tiranji Zirhnc6,6
on`dwhdtb >9:1
hv nddrizz >8?>12??
?99?99?996
jrxvtl mnv ztnthj-mnv-vkw?
Bind I`d _lytir Orn`jb _lytir
Zchdi :4
Ngi`dn
H`trldyjthl` n`d Mlthqnthl`
HVZij Onzhjz
I`tirvrhzi HVZij QV@
Mn`ngh`g QV@
Wrnv-yv
8/8/2019 cisco ip security
18/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->2
Zchdi :9
Jhzjl QV@ @itwlre Mn`ngimi`t Tllcz
JhzjlWlrez QV@ , Zijyrhtx Mn`ngimi`t Zlcythl` "QMZ(h`jcydiz Mn`ngimi`t Ji`tir "MJ( alr HDZ Zi`zlrz
Mn`ngimi`t Ji`tir alr QV@ _lytirz
Mn`ngimi`t Ji`tir alr VHR Ahriwnccz
Ji`trnch{id jl`ahgyrnthl` n`d mn`ngimi`t la diqhjiz
Ml`htlrh`g Ji`tir alr Zijyrhtx
Ji`trnc HDZ iqi`t zlatwnri# w, jlrricnthl`# `lthahjnthl`# rivlrtz
QV@ Ml`htlr
Trnje ztntyz la QV@ diqhjiz# w, drhcc-dlw` rivlrth`g
HDZ Blzt Zi`zlr
Nytl-Yvdnti Zirqir
Vycc mldic la dhztrhoythl` la hmngiz n`d jl`ahgyrnthl`z
_izlyrji Mn`ngir Izzi`thncz "_MI(# JhzjlQhiw# Jlmml` Zirqhjiz
Zchdi :1
Ngi`dn
H`trldyjthl` n`d Mlthqnthl`
HVZij Onzhjz
I`tirvrhzi HVZij QV@
Mn`ngh`g QV@
Wrnv-yv
8/8/2019 cisco ip security
19/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->8
Zchdi :7
Zii Nczl
NQQHD I`tirvrhzi Zhti-tl-Zhti QV@ Dizhg`bttv;,,wwwjhzjljlm,nvvchjnthl`,vda,i`,yz,gyizt,`i
tzlc,`z>4?,j148,jjmhgrnthl`\68>21n66266d17a8vda
HVZij zyvvlrt vngi
bttv;,,wwwjhzjljlm,jgh-oh`,Zyvvlrt,VZV,vzv\qhiwvc
8/8/2019 cisco ip security
20/21
Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-?6
Zchdi :8
TBN@E XLY .
Zchdi 46
N Wlrd Arlm Yz
Wi jn` vrlqhdi
@itwlre dizhg` riqhiw; blw tl mnei wbnt xly bnqi wlre oittir
Virhldhj ztrntighj ndqhji; wbntz tbi `it ztiv alr xlyr itwlre lr ztnaa
@itwlre mn`ngimi`t tllcz ! vrljidyriz ndqhji; wbnt z rhgbt alr xly
Hmvcimi`tnthl` gyhdn`ji "xlyr ztnaa dliz tbi ditnhcz( lr aycchmvcimi`tnthl`
Wi dl
Zmncc- n`d Cnrgi-Zjnci _lyth g n`d Zwhtjbh`g "dizhg`# binctb jbije#itj(
HVzij QV@ n`d Q:V@ "dizhg` n`d hmvcimi`tnthl`(
^lZ "ztrntigx# dizhg` n`d hmvcimi`tnthl`(
HV Ticivbl`x "vrivnrid`izz zyrqix# dizhg`# n`d hmvcimi`tnthl`(
Jncc Mn`ngir divclxmi`t
Zijyrhtx
@itwlre Mn`ngimi`t "dizhg`# h`ztnccnthl`# ty`h`g# tijb trn`zair# itj(
8/8/2019 cisco ip security
21/21
Zchdi 4>
Jbiznvinei @itjrnatzmi`hz jirthahid ox Jhzjl h`;
HV Ticivbl`x
@itwlre Mn`ngimi`t
Whricizz
Zijyrhtx
"_lyth`g n`d Zwhtjbh`g(
Jhzjl Jirthahjnthl`z
Top Related