Security

The video demonstrates wired device onboarding with Cisco ISE 1.3 Internal CA. With the internal CA configured in the previous video, we continues to complete the remaining configuration to provide wired BYOD solution including; login web portal, required authentication, authorization, and client provisioning policies, blacklist and MyDevices portals. We will step through the entire onboarding process and test device management via MyDevices portal on a non-domain Windows computer. We will also touch on the concept of device purging towards the end of the video.

The video discusses and demonstrates different deployment models of Cisco ISE 1.3 Internal Certificate Authority. We will be setting up ISE internal CA, both as a standalone and intermediate CA, and creating certificate template to issue client certificate for our next BYOD labs. We will also touch on the significance of, and demonstrate certificate keypair export and import to other ISE nodes in the deployment.

The video discusses and demonstrates different deployment models of Cisco ISE 1.3 Internal Certificate Authority. We will be setting up ISE internal CA, both as a standalone and intermediate CA, and creating certificate template to issue client certificate for our next BYOD labs. We will also touch on the significance of, and demonstrate certificate keypair export and import to other ISE nodes in the deployment.

The video walks you through configuration of wireless 802.1X using EAP-TLS and PEAP on Cisco ISE 1.3. By leveraging AD integration from the previous video, we will configure authentication and authorization policies to support both user and machine authentications and enforce Machine Access Restriction (MAR). Here we assume user and machine certificate are already installed. We will perform testing on both domain computer, and iPad, and observe authentication results.

The video walks you through configuration of wireless 802.1X using EAP-TLS and PEAP on Cisco ISE 1.3. By leveraging AD integration from the previous video, we will configure authentication and authorization policies to support both user and machine authentications and enforce Machine Access Restriction (MAR). Here we assume user and machine certificate are already installed. We will perform testing on both domain computer, and iPad, and observe authentication results.

The video demonstrates the use of Whitelist feature on Cisco ASA FirePower to enforce application compliancy on end-host. We will look at two ways of creating a host profile; manual and from host discovery, and apply them to a network to have the FireSight System monitor and generate alert when any unapproved network protocols or application services are detected.

The video shows you how to create a custom intrusion rule on Cisco ASA FirePower. We will generate a special HTTP request to simulate malicious traffic and build an intrusion rule to match the content of the request and drop it. You will learn available parameters that you can use on FireSight web interface Rule Editor to define attack signature.

The video takes you deeper into Intrusion Policy configuration on Cisco ASA FirePower as we use Policy Layer and FireSight Recommendation. Policy Layer provides configuration flexibility, while FireSight Recommendation assist you in determining appropriate intrusion rules to enable or disable. We will also test our configuration by simulating attacks using Metasploit vulnerability testing tool. The video will close by showing you how to setup intrusion event alert and manage intrusion incidents.

The video takes you deeper into Intrusion Policy configuration on Cisco ASA FirePower as we use Policy Layer and FireSight Recommendation. Policy Layer provides configuration flexibility, while FireSight Recommendation assist you in determining appropriate intrusion rules to enable or disable. We will also test our configuration by simulating attacks using Metasploit vulnerability testing tool. The video will close by showing you how to setup intrusion event alert and manage intrusion incidents.

The video walks you through basic configuration of Intrusion Policy on Cisco ASA FirePower. We begin by explaining significance of the use of Variable Set, the concept of Base Policy, and various settings in an Intrusion Rule. We will adjust some of an Intrusion Rule settings including, Threshold, Suppression, and Dynamic State, and observe how they effect the rule behavior using ICMP Reply Undefined Code rule as our example.