CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

Configure the router so that it reports to the syslog server.

Apply the Cisco IOS Firewall to the inside and outside interfaces using the name "FIREWALL" and only allow inspection for TCP, UDP, FTP, and SMTP services. Enable the logging of session information.

Allow only legitimate traffic from the inside network and, at the same time, prevent IP address spoofing.

Deny all outbound traffic from the inside network. (Remember that the inspection list allows openings in the ACL.)

Allow only legitimate traffic from the DMZ segment and, at the same time, prevent IP address spoofing.

Prevent all traffic on to the DMZ apart from those services that are available from the public server.

Apply RFC 1918 filtering to the outside interface.