View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0177 - ASA FirePower Event Correlation and Remediation (Part 1)

Rating: 
5
Average: 5 (4 votes)
Difficulty Level: 
0
Lab Document: 
<Please login to see the content>
Video Download: 
Title: SEC0177 - Video Download $11.00
Purchase SEC0177 - Video Download $11.00
The video demonstrates Cisco ASA FirePower capability to correlate system events and generate appropriate remediation responses. We will go through two example scenarios; one with a basic event matching and responding, and the other continues to track the connection and apply a more complex conditions before issuing response. Specifically, we will configure NMAP scan and IP shun remediations. 
 
Part 1 of this video goes through the first scenario to perform NMAP scan on a newly discovered host
 
Topic:
  • Correlation Policy and Rules
  • Correlation Rule Event Conditions
  • Connection Tracking
  • Remediation Response and Response Group
  • Remediation with NMAP Scan and Firewall Shun

About Author

Metha Cheiwanichakorn, CCIE#23585 (RS, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new Cisco technologies.

2 comments

I love www.labminutes.com now i am learning Cisco ASA.

Thanks for the feedback. Enjoy!