Ccsp Self-Study: Cisco Secure Intrusion Detection System (Csids)

The Cisco Press "CCSP Self-Study: Cisco Secure Intrusion Detection System" is the Cisco Authorized self study book for the CSIDS Exam 642-531 (ISBN: 1587051443). The book is an excellent resource for any individual pursuing the CCSP track. In fact, I used this as my primary training material to pass the CSIDS Exam 642-531 to compliment my CSIDS web-based training. The book format follows the CSIDS training course. However, the book provides far greater detail than the tradition Cisco courseware. The book follows the standard format similar to the majority of the Cisco Press Authorized self study books. Part I reviews the basics of Network Security; if you already passed some of the other CCSP exams, such as the PIX or SECUR exam, you can probably breeze through this section. Part II begins the deep dive into the CIDS environment, reviewing IDS concepts, Cisco's IDS architecture, and the various Cisco IDS platforms. The third section of the book delves into IDS configuration. Not only does the book provide detailed information on configuring the IDS sensor and modules, but also the various switch configuration requirements and the differences between IOS and Catalyst OS. The remaining sections cover CIDS maintenance and management. Cisco Press provides numerous screenshots and configuration examples throughout the book. For those CCSP candidates who can not afford to invest in a 4200 IDS Sensor, a Layer 2/3 Switch, and CiscoWorks VMS, the diagrams, tables, configuration examples, and screen shots are very helpful in grasping the concepts and configuration requirements. Where the book truly excels is in its coverage of both the IDS signatures as well as using the IDS Management Console (a component of CiscoWorks VMS). Fifty pages are dedicated to the IDS signatures. Admittedly, my eyes got a bit heavy reading this chapter. However, understanding the IDS signature architecture is paramount for any Network Admin. The coverage of the IDS MC was also fantastic. After completing the book, I felt confident in my abilities to utilize not only the IDS MC, and also the Security Monitor component of VMS. The only instance where the book seemed lacking was coverage of the IDS Network Module for the Cisco Routers. However, in defense of Cisco Press, it is nearly impossible for a Cisco book to remain 100% up-to-date on Cisco latest hardware and software releases. The book does provide some content on the Cisco Secure Agent (CSA). Any CCSP candidate should always check www.cisco.com for the latest exam requirements and augment study material with the latest hardware and software releases from Cisco's website. All in all, I strongly recommend the Cisco Press "CCSP Self-Study: Cisco Secure Intrusion Detection System" for Cisco CSIDS 642-531 exam preparation.

I read this book over 4-6 weeks and must say its one of the best technical reads I have come across, the level of accuracy if 100 % and there are few errors even worth mentioning, it has loads of quality examples and the flow is brilliant, I don't keep many of my books but I will keep this one, highly recommended for all security engineers. Thanks Ciscopress for publishing a really high standard security manual AWESOME.