Network Security Assessment (NSA2) is basically the same book. The material in NSA2 is a foundation for higher level assessments. The author should have focused on layers 1-4 and left 5-7 for other books. NSA2 would be a good book for a PCI auditor who sticks to his/her script and ensures the basics are covered. At this point people wanting to read this sort of material should probably turn to the Hacking Exposed series. I recommend reading my May 2004 review of the first edition, because most of that review still applies.”]
Source: https://taosecurity.blogspot.com/2008/01/unposted-review-network-security.html