Security

The video introduces you to the concept of URL and DNS Security Intelligence on ASA Firepower 6.0. Unlike their predecessor, Network-based SI that monitor traffic at the IP address level, URL and DNS SI allow or deny traffic based on URL and DNS requests. We will go through some lab exercise of configuring both static and dynamic feed. We will also demonstrate an ability to have Firepower intercept and redirect DNS request to a sinkhole target.

The video introduces you to the concept of URL and DNS Security Intelligence on ASA Firepower 6.0. Unlike their predecessor, Network-based SI that monitor traffic at the IP address level, URL and DNS SI allow or deny traffic based on URL and DNS requests. We will go through some lab exercise of configuring both static and dynamic feed. We will also demonstrate an ability to have Firepower intercept and redirect DNS request to a sinkhole target.

The video looks at Multi-Domain Management feature on Cisco ASA Firepower 6.0. We will be building domain hierarchy to demonstrate partitioning of configuration, devices, and policies. We will assign users to different domain level to try to understand the level of visibility while under management of the domain

The video looks at Multi-Domain Management feature on Cisco ASA Firepower 6.0. We will be building domain hierarchy to demonstrate partitioning of configuration, devices, and policies. We will assign users to different domain level to try to understand the level of visibility while under management of the domain

The video walks you through new features introduced in Cisco ASA Firepower 6.0. We will compare menu options to the previous 5.x version and  point out relevant changes to the web interface. Some basic familiarity to Firepower is recommended before watching this video.

The video walks you through new features introduced in Cisco ASA Firepower 6.0. We will compare menu options to the previous 5.x version and  point out relevant changes to the web interface. Some basic familiarity to Firepower is recommended before watching this video.

The video looks at Adaptive Network Control (ANC) feature on Cisco ISE 2.0 and how it can be used to quarantine endpoint devices similarly to its legacy feature called Endpoint Protection Service (EPS). This lab exercise includes creating and testing ANC policies with various type of actions. At the end, we will demonstrate the use of SGT with ANC to leverage SGACL to limit quarantined device network access.

The video looks at Adaptive Network Control (ANC) feature on Cisco ISE 2.0 and how it can be used to quarantine endpoint devices similarly to its legacy feature called Endpoint Protection Service (EPS). This lab exercise includes creating and testing ANC policies with various type of actions. At the end, we will demonstrate the use of SGT with ANC to leverage SGACL to limit quarantined device network access.

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag. 

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag.