cisco certification blueprint

cisco certification blueprint.An extended ACL and an EtherType ACLO can be bound in each direction of an interface at the same timeThe same ACL can be applied to multiple interfaces. However, this is not a good security practice because it may result in applying overlapping and redundant security policies to the network.ACLs can be used to control traffic traversing the security device as well as traffic destined for the security device itself. ACLs that control traffic destined for the security appliance itself are applied differently than ACLs that filter traffic traversing the firewall, and are applied through access groups. ACLs that control traffic destined for the security device itself are called control plane ACLOs When TCP or UDP traffic passes through the security device, the corresponding backhaul traffic is automatically released because the security device treats the TCP or UDP connection as an established two-way connection.The security device treats other protocol traffic (for example, ICMP traffic) as a unidirectional connection, and to allow suchExtended ACLs. IPv6 ACLOs.EtherType ACLs.Webtype ACLO2.2 Network Security Systems 113 However, Intrusion Prevention System (IPS) devices not only detect all of the above security threats, but also inlinedropping malicious packets. When an IPS device first goes live within a network, it is first deployed in promiscuous mode (monitored mode). The purpose of this is to first assess the impact of introducing an IPS device on the network infrastructure and operations. Then, deploy the IPS in inline mode to block any malicious traffic within the network without impacting the service.