You are here
SEC0376 - Firepower 7.0 Security Intelligence (Part 3)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video showcases the effective of Security Intelligence (SI) feature on Cisco Firepower 7.0. We will cover all three available types of SI; IP, URL, DNS, and demonstrate how SI helps block connections to malicious destinations using static and dynamic feeds. We will show a use of DNS sinkhole that can help uncover a client that make malicious DNS request.
Part 3 of this video covers Security Intelligence using DNS
Topic:
- Security Intelligence Object
-
IP
- Global Block List and Donot Block List
- Custom Static IP List
- System Feed and Categories
- Custom Feed
-
URL
- Global Block List and Donot Block List
- System Feed and Categories
- Custom Feed
-
DNS
- Global Block List and Donot Block List
- Custom Static Domain List
- Custom Feed
- Sinkhole
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.