TAILIEUCHUNG - Lecture CCNA security partner - Chapter 12: Fundamentals of Cryptography and VPN Technologies

This chapter introduces the concepts of cryptography and covers encryption, hashing, and digital signatures and how these techniques provide confidentiality, integrity, authenticity, and nonrepudiation. You will learn about algorithms, symmetric and asymmetric encryption, digital signatures, and Public Key Infrastructure (PKI). | Fundamentals of Cryptography and VPN Technologies 1 This chapter introduces the concepts of cryptography and VPN technologies. It covers the following topics: • Need for VPN and VPN deployment models • Encryption, hashing, and digital signatures and how they provide confidentiality, integrity, and nonrepudiation • Methods, algorithms, and purposes of symmetric encryption • Use and purpose of hashes and digital signatures in providing integrity and nonrepudiation • Use and purpose of asymmetric encryption and Public Key Infrastructure (PKI) Contents Historically, a VPN was an IP tunnel. Therefore, a generic routing encapsulation (GRE) tunnel is technically a VPN, even though GRE does not encrypt. Today, the use of a VPN implies the use of encryption. With a VPN, the information from a private network is transported over a public network, such as the Internet, to form a virtual network instead of using a dedicated Layer 2 connection VPN Overview Where VPNs Are Found 4 • Cost savings •

• An ninh - Bảo mật
• CCNA Security Partner
• Network Security
• Fundamentals of cryptography
• VPN technologies
• Public Key Infrastructure
• Purpose of security
• Basic security requirements
• Managing the risk
• Risk analysis
• Security strategy
• Cisco borderless Network
• Cisco borderless Network architecture
• Borderless Networks
• Threat control strategy
• Network security threats
• Threat control design
• Security intelligence analysis
• Network Foundation Protection
• Cisco Configuration Professional
• Cisco NFP Framework
• Secure management
• Securing the management plane
• Cisco IOS devices
• Network Time Protocol
• Simple Network Management Protocol
• Native VLANs
• Configuring VLANs
• Configuring Inter VLAN routing
• Spanning Tree
• IPv6 environments
• IPv6 headers
• IPv6 address types
• Configure IPv6 addressing
• Access Control Lists
• Threat mitigation
• Operational framework
• VLSM environments
• Firewall Fundamentals
• Network Address Translation
• Firewall technologies
• Application layer firewalls
• Cisco IOS Zone Based Firewall
• Cisco IOS Zone Based Policy Firewall
• Intrusion Prevention Systems
• IPS fundamentals
• IPS attack responses
• IPS Anti Evasion techniques
• IPsec fundamentals
• IPsec protocol
• IPsec’s main components
• Site to Site IPsec VPNs
• Cisco IOS Routers
• VPN configuration
• Cisco SSL VPNs
• Protocol framework
• Cisco VPN clientless mode
• Cisco full tunnel mode