J. Michael Stewart - Network Security, Firewalls, and VPNs, 3rd Edition

World Headquarters

Jones & Bartlett Learning

5 Wall Street

Burlington MA 01803

978-443-5000

www.jblearning.com

Jones & Bartlett Learning books and products are available through most bookstores and online booksellers. To contact Jones & Bartlett Learning directly, call 800-832-0034, fax 978-443-8000, or visit our website, www.jblearning.com.

Substantial discounts on bulk quantities of Jones & Bartlett Learning publications are available to corporations, professional associations, and other qualified organizations. For details and specific discount information, contact the special sales department at Jones & Bartlett Learning via the above contact information or send an email to .

Copyright 2021 by Jones & Bartlett Learning, LLC, an Ascend Learning Company

All rights reserved. No part of the material protected by this copyright may be reproduced or utilized in any form, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the copyright owner.

The content, statements, views, and opinions herein are the sole expression of the respective authors and not that of Jones & Bartlett Learning, LLC. Reference herein to any specific commercial product, process, or service by trade name, trademark, manufacturer, or otherwise does not constitute or imply its endorsement or recommendation by Jones & Bartlett Learning, LLC and such reference shall not be used for advertising or product endorsement purposes. All trademarks displayed are the trademarks of the parties noted herein. Network Security, Firewalls, and VPNs, Third Edition is an independent publication and has not been authorized, sponsored, or otherwise approved by the owners of the trademarks or service marks referenced in this product.

There may be images in this book that feature models; these models do not necessarily endorse, represent, or participate in the activities represented in the images. Any screenshots in this product are for educational and instructive purposes only. Any individuals and scenarios featured in the case studies throughout this product may be real or fictitious, but are used for instructional purposes only.

18365-8

Production Credits

VP, Product Management: Amanda Martin

Director of Product Management: Laura Pagluica

Product Manager: Ned Hinman

Content Strategist: Melissa Duffy

Development Editor: Kim Lindros

Technical Editor: Jeff Parker

Content Coordinator: Paula-Yuan Gregory

Project Manager: Kristen Rogers

Project Specialist: John Fuller

Senior Digital Project Specialist: Angela Dooley

Marketing Manager: Michael Sullivan

Product Fulfillment Manager: Wendy Kilborn

Composition: Exela Technologies

Cover Design: Timothy Dziewit

Text Design: Kristin E. Parker

Media Development Editor: Faith Brosnan

Rights Specialist: James Fortney

Cover Image (Title Page, Part Opener, Chapter Opener): Digital_Art/Shutterstock

Printing and Binding: McNaughton & Gunn

Library of Congress Cataloging-in-Publication Data

Names: Stewart, James Michael, author. | Kinsey, Denise, author.

Title: Network security, firewalls, and VPNs / J. Michael Stewart, Denise Kinsey.

Description: Third edition. | Burlington, MA : Jones & Bartlett Learning, [2021] | Includes bibliographical references and index. | Summary: Network Security, Firewalls, and VPNs is written for a course on Network Security and Perimeter Defense, with special emphasis placed on Firewalls and VPNs - two key tools for securing networks. It is currently divided into three parts - Part 1 : Foundations of Network Security, Part 2 : Technical Overview of Network Security, Firewalls, and VPNs, and Part 3 : Implementation, Resources, and the FutureProvided by publisher.

Identifiers: LCCN 2020022142 | ISBN 9781284183658 (paperback)

Subjects: LCSH: Firewalls (Computer security) | Computer networksSecurity measures.

Classification: LCC TK5105.59 .S7585 2020 | DDC 005.8dc23

LC record available at https://lccn.loc.gov/2020022142

6048

Printed in the United States of America

24 23 22 21 20 10 9 8 7 6 5 4 3 2 1

This book is dedicated to all who desire to learn more about network security, firewalls, and VPNs. May you gain foundational knowledge with this resource.

Digital_Art/Shutterstock

Brief Contents

Digital_Art/Shutterstock

Contents

Digital_Art/Shutterstock

Preface

Purpose of This Text

This text is part of the Information Systems Security & Assurance Series from Jones & Bartlett Learning (www.jblearning.com). Designed for courses and curricula in IT Security, Cybersecurity, Information Assurance, and Information Systems Security, this series features a comprehensive, consistent treatment of the most current research and trends in this critical subject area. These titles deliver fundamental information security principles packed with real-world applications and examples. Authored by Certified Information Systems Security Professionals (CISSPs), they deliver comprehensive information on all aspects of information security. Reviewed word for word by leading technical experts in the field, these texts are not just current, but forward-thinkingputting you in the position to solve the cybersecurity challenges not just of today, but of tomorrow as well.

The first part of this text focuses on common network security topics and the business challenges and threats that you face as soon as you physically connect your organizations network to the public Internet. It presents key concepts and terms and reveals what hackers do when trying to access your network, thus providing you with the necessary foundation in network security for the discussions that follow.

Part 2 defines firewalls, providing you with an understanding of how to use these tools as security countermeasures to solve business challenges. It discusses how to select and deploy firewalls and the tools for managing and monitoring them. It focuses on the practical, giving concrete, step-by-step examples of how to implement a firewall.

Part 3 focuses on virtual private networks (VPNs) and reviews implementing a VPN, the technologies involved, and VPN-management best practices. It also discusses what challenges the future holds for information security professionals involved in network security. It covers the tools and resources available to the professional and scans the horizon of emerging technologies.

Learning Features

The writing style of this text is practical and conversational. Step-by-step examples of information security concepts and procedures are presented throughout. Each chapter begins with a statement of learning objectives. Illustrations are used both to clarify the material and to vary the presentation. The text is sprinkled with Notes, Tips, FYIs, Warnings, and sidebars to alert the reader to additional and helpful information related to the subject under discussion.