correlation

The video walks you through an integration of Cisco SecureX and Cisco Firepower 7.0. We will explore SecureX capability to collect and display events from FMC which can later be used on threat investigation and response.

The video demonstrates capabilities to correlate system events and generate appropriate remediation responses on Cisco Firepower 7.0. We will go through three sample scenarios; first with a basic event matching and responding, second with connection tracking, and third using Malware event. The responses that will be configured are NMAP scan, ISE ANC and SGT assignment

The video demonstrates capabilities to correlate system events and generate appropriate remediation responses on Cisco Firepower 7.0. We will go through three sample scenarios; first with a basic event matching and responding, second with connection tracking, and third using Malware event. The responses that will be configured are NMAP scan, ISE ANC and SGT assignment

The video demonstrates capabilities to correlate system events and generate appropriate remediation responses on Cisco Firepower 7.0. We will go through three sample scenarios; first with a basic event matching and responding, second with connection tracking, and third using Malware event. The responses that will be configured are NMAP scan, ISE ANC and SGT assignment

The video demonstrates capability of Cisco ASA FirePower to detect anomalous traffic pattern. We will be configuring the FireSight System to monitor HTTP traffic to our servers, create traffic profile, and have it generate alert upon significant traffic pattern deviation. A HTTP packet generation tool will be used to generate HTTP requests at different rate to test our traffic profile.

The video demonstrates Cisco ASA FirePower capability to correlate system events and generate appropriate remediation responses. We will go through two example scenarios; one with a basic event matching and responding, and the other continues to track the connection and apply a more complex conditions before issuing response. Specifically, we will configure NMAP scan and IP shun remediations. 

The video demonstrates Cisco ASA FirePower capability to correlate system events and generate appropriate remediation responses. We will go through two example scenarios; one with a basic event matching and responding, and the other continues to track the connection and apply a more complex conditions before issuing response. Specifically, we will configure NMAP scan and IP shun remediations. 

The video demonstrates the use of Whitelist feature on Cisco ASA FirePower to enforce application compliancy on end-host. We will look at two ways of creating a host profile; manual and from host discovery, and apply them to a network to have the FireSight System monitor and generate alert when any unapproved network protocols or application services are detected.