Building DMZs for Enterprise Networks
This guide will help you understand how to design, plan, implement, maintain, secure, and test a DMZ segment using a variety of technologies.
TABLE OF CONTENTS Building DMZs for Enterprise Networks
List of Tables
Chapter 1: DMZ Concepts, Layout, and Conceptual Design
- Table 1.1: DMZ Definitions
- Table 1.2: Pros and Cons of Basic DMZ Designs
- Table 1.3: Protocols With Known Weaknesses
- Table 1.4: Private IP Address Ranges
- Table 1.5: Common Ports to Block
Chapter 2: Windows 2000 DMZ Design
- Table 2.1: Well-Known Port Numbers
Chapter 3: Sun Solaris DMZ Design
- Table 3.1: A Model of a System Design Listing Only the Requirements of the Host
Chapter 5: Firewall Design Cisco PIX
- Table 5.1: Port Address Translation
- Table 5.2: Outbound NAT
Chapter 7: Firewall and DMZ Design: Nokia Firewall
- Table 7.1: Differences Between the IP350 and IP380 Platforms
Chapter 9: DMZ Router and Switch Security
- Table 9.1: Routing Table
Chapter 12: Sun Solaris Bastion Hosts
- Table 12.1: Default Services Started by the inet Daemon
- Table 12.2: Options for the ipsecconf Command
- Table 12.3: Pattern Configuration Options
- Table 12.4: Encryption and Authentication Configuration Options
- Table 12.5: Options for the auditreduce Command
- Table 12.6: Generic Solaris Domain Macro File Explanations
Chapter 13: Windows 2000 Bastion Hosts
- Table 13.1: Required Server Hotfixes (Post SP 3)
- Table 13.2: Changed Elements in IISLOCKD.ini
- Table 13.3: Changed Elements in URLSCAN_HARDENED_DYNAMIC.ini
Chapter 14: Hacking the DMZ
- Table 14.1: Default User IDs and Passwords for Common SQL Servers
Copyright Syngress Publishing, Inc. 2003 under license agreement with Books24x7
