This is Cisco's authorized, self-paced, foundation learning tool for the latest version of the Cisco IOS Network Security (IINS 640-554) exam, required for CCNA Security certification. Using IOS security features and technologies as examples, it brings together all the core knowledge professionals need to design, implement, and monitor comprehensive security policies. The book shows how to utilize the security controls of IOS devices, and offers a functional introduction to Cisco's ASA Adaptive Security Appliances. Readers learn to secure small branch office networks using Cisco IOS security features available through web-based GUIs (Cisco Configuration Professional) and the command-line interface on Cisco routers and switches. In the context of policy implementation, the book covers all these security countermeasures: device protection for routers and switches; identity-aware access control; firewall services; IPS; Layer 2 attack mitigation; and VPNs. This edition's new coverage includes: * Security strategies for borderless networks * Network foundation protection * Spanning Tree, VLANs, and trunking security * IPv6 data plane security * ACL and ASA Firewall updates * IKEv2 and more As an Authorized Self-Study Guide, this book fully reflects the content of the newest version of the Cisco IINS course. Real-world scenarios illustrate key concepts; chapter learning objectives and summaries help focus study; and review questions help readers assess their knowledge