This appendix lists resources that you may find useful when securing your routers, systems, and networks. It also provides links to sites where you can find more detailed information on topics that are out of the scope of this book—including IPSec, RADIUS/TACACS+, and intrusion detection. | Page 161 Friday February 15 2002 2 52 PM APPENDIX E Resources This appendix lists resources that you may find useful when securing your routers systems and networks. It also provides links to sites where you can find more detailed information on topics that are out of the scope of this book including IPSec RADIUS TACACS and intrusion detection. Web Sites http This site provides the most current information on Cisco routers and products. Cisco s online technical documentation is excellent and should usually be the first stop for questions involving Cisco routers. http go psirt A direct link to Cisco s Product Security Incident Response Team PSIRT and a list of all Cisco IOS vulnerabilities. http cgi-bin Support FeatureNav Cisco s feature navigator. It helps determine what IOS vessions and hardware support features such as IPSec and SSH. http cisco NSA-recommended guides for securing Cisco routers. http Additional NSA-recommended security guides. http A security site with excellent news articles tools and vulnerability listings. SecurityFocus is also home to the Bugtraq vulnerability forum. http The original Computer Emergency Response Team CERT based out of Carnegie Mellon. CERT is an excellent resource on vulnerabilities fixes and incident response. 161 Page 162 Friday February 15 2002 2 52 PM http The System Administrator and Network Security web site. It is an excellent source for research and education in the area of information security. http The Computer Security Institute web site. he source of the annual FBI CSI computer crime and security survey. http kerberos www The MIT Kerberos web site. http tacacs-faq The TACACS frequently asked questions web site with a focus on Cisco . http OLD The IETF RADIUS .