ALLINONE CCSP: CiscoCertified Security Professional Certification EXAMGUIDE Robert E. Larson Lance Cockcroft McGraw-Hill/Osborne New York · Chicago · San Francisco · Lisbon London · Madrid · Mexico City · Milan · New Delhi San Juan · Seoul · Singapore · Sydney · Toronto McGraw-Hill/Osborne 2100 Powell Street, 10th Floor Emeryville, California 94608 U.S.A. To arrange bulk purchase discounts for sales promotions, premiums, or fund-raisers, please contact McGraw-Hill/Osborne at the above address. For information on translations or book distributors outside the U.S.A., please see the International Contact Information page immediately following the index of this book. CCSP: Cisco Certified Security Professional Certification All-in-One Exam Guide (Exams642-501SECUR,642-521CSPFA 642-511 CSVPN, 642-531 CSIDS, and 642-541 CSI) Copyright @ 2003 by The McGraw-Hill Companies. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. 1234567890DOCDOC 019876543 Book p/n 0-07-222692-7 and CD p/n 0-07-222693-5 parts of ISBN 0-07-222691-9 Publisher Proofreaders Brandon A. Nordin Brian Galloway Vice President & Associate Publisher Linda Medoff Scott Rogers Indexer Acquisitions Editor Rebecca Plunkett Nancy Maragioglio Compositors Project Editor Apollo Publishing Services Lisa Wolters-Broder George Toma Charbak Acquisitions Coordinator Ilustrators Lyssa Wald Jessica Wilson Melinda Moore Lytle Technical Editors Michael Mueller Joe Phago OleDrews Jensen Series Design Peter F. Hancik Copy Editor Marcia Baker This book was composed with Corel VENTURA" Publisher. Informationhas been obtained byMcGraw-Hill/Osbornefrom sources believedtobereliable.However,becauseof the possibility of human or mechanical error by our sources, McGraw-Hill/Osborne, or others, McGraw-Hill/Osborne omissions ortheresults obtained fromtheuse of such information. This book is dedicated to my parents, Lou and Elmer Larson, who provided resources and direction when I was young, plus freedom, inspiration, and support as I got older. -Bob About the Authors Robert E. Larson lives in the Seattle, Washington area with his wife Jerri and four adult children. Bob has worked full-time as a computer trainer and course developer since 1985, including network training since 1995. Bob got involved with the Cisco Net- working Academy program in 1998. He is currently the Cisco Regional Academy contact atBatesTechnicalCollegeinTacoma,plusteacheseveningandweekendCCNP,Security, and CCIE prep classes at Green River Community College. Bob is currently a member of theCiscoNetworkingAcademyAdvisoryCouncil.This isBob'sthirdCiscocertification book, having also written a CCNA and CCNP book. Bob taught the first Academy CCNA series in Africa in 1999 in Cape Town, South Africa. He has also taught CCNP-level courses in Birmingham, England; Dillingen, Germany; and Vienna, Austria. Lance Cockcroft, Net+, CCA, MCSE, MCT, CCNP, CCDP, has been a Senior Engineer for many ISP and telecommunications companies, including Bellsouth, Atlanta Broadband, and Southeastern Networks. Lance is currently the Cisco Product Manager for Self Test Soff- ware, Cisco's only authorized test prep vendor. Lance writes and oversees the production of all Cisco practice tests for Self Test Software. Lance attended and continues to teach for Kennesaw State University and Southern Polytechnic University located in his hometown of Marietta, Georgia. About the e Technical Reviewers Ole Drews Jensen began working with computers 21 years ago, and five years later made it his profession. He started out as a programmer in a wide variety of languages, but