This is Cisco's authorized, self-paced, foundation learning tool for the latest version of the Cisco IOS Network Security (IINS 640-554) exam, required for CCNA Security certification. Using IOS security features and technologies as examples, it brings together all the core knowledge professionals need to design, implement, and monitor comprehensive security policies. The book shows how to utilize the security controls of IOS devices, and offers a functional introduction to Cisco's ASA Adaptive Security Appliances. Readers learn to secure small branch office networks using Cisco IOS security features available through web-based GUIs (Cisco Configuration Professional) and the command-line interface on Cisco routers and switches. In the context of policy implementation, the book covers all these security countermeasures: device protection for routers and switches identity-aware access control firewall services IPS Layer 2 attack mitigation and VPNs.