6.2. Explain general methods to mitigate common security threats to network devices, hosts, and applications

Cisco has a very cool product called the Adaptive Security Appliance, or ASA. But there's a catch or two—it's a pretty pricey little beauty that scales in cost depending on the modules you choose (for example, intrusion prevention). Plus, the ASA is actually above the objectives of this book. I just personally think is the best product on the market.

Cisco IOS software runs on upwards of 80 percent of the Internet backbone routers out there; it's probably the most critical part of network infrastructure. So, let's just keep it real and use the Cisco IOS's software-based security, known as the Cisco IOS Firewall feature set, for our end-to-end ...

Get CCNA®: Cisco® Certified Network Associate: Fast Pass, Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.