wireshark

The video walks you through basic configuration of Intrusion Policy on Cisco ASA FirePower. We begin by explaining significance of the use of Variable Set, the concept of Base Policy, and various settings in an Intrusion Rule. We will adjust some of an Intrusion Rule settings including, Threshold, Suppression, and Dynamic State, and observe how they effect the rule behavior using ICMP Reply Undefined Code rule as our example.

The video walks you through basic configuration of Intrusion Policy on Cisco ASA FirePower. We begin by explaining significance of the use of Variable Set, the concept of Base Policy, and various settings in an Intrusion Rule. We will adjust some of an Intrusion Rule settings including, Threshold, Suppression, and Dynamic State, and observe how they effect the rule behavior using ICMP Reply Undefined Code rule as our example.

The video shows you how to create an custom application detector on Cisco ASA FirePower. We will be simulating a custom business application using a TCP/IP Server/Client tool, perform a WireShark packet capture, and attempt to construct an application detector to match it. If you have an application that is not supported by the FireSight System and would like to build an access-control around it, this is a video to watch.

The video shows you how to create an custom application detector on Cisco ASA FirePower. We will be simulating a custom business application using a TCP/IP Server/Client tool, perform a WireShark packet capture, and attempt to construct an application detector to match it. If you have an application that is not supported by the FireSight System and would like to build an access-control around it, this is a video to watch.

The video provide a method to enhance reliability of Cisco ASA CX Passive Authentication by integrating Cisco ISE with CDA. You will see how the caveats inherent to CDA can be solved by using realtime user and IP information provided by 802.1x identity-based authentication network. We will analyze RADIUS packets being communicated between Cisco ISE and CDA to try to understand the underlying mechanism. Testing will be performed on both domain and non-domain devices, that have been onboarded through ISE, and this includes both wired and wireless.

The video provide a method to enhance reliability of Cisco ASA CX Passive Authentication by integrating Cisco ISE with CDA. You will see how the caveats inherent to CDA can be solved by using realtime user and IP information provided by 802.1x identity-based authentication network. We will analyze RADIUS packets being communicated between Cisco ISE and CDA to try to understand the underlying mechanism. Testing will be performed on both domain and non-domain devices, that have been onboarded through ISE, and this includes both wired and wireless.

The video demonstrates another method of routing L2VPN traffic using Cisco MPLS Traffic Engineering (TE) tunnel. Instead of relying on targeted LDP, we will be leveraging MPLS TE for label exchange and traffic path control. We will also look at a way to provide redundancy using a backup pseudowire. We will perform Wireshark packet capture and review control and data packets. 

The video walks you through configuration of Cisco Any Transport over MPLS (AToM) interworking. In our first two scenarios, we will be configuring EoMPLS to provide Layer2 connectivity between sites with disparate circuit type, specifically non-tag and 802.1q circuit, using Ethernet and VLAN mode. Our last scenario involves interworking of non-Ethernet circuit to an Ethernet circuit, which will call for an IP mode. Wireshark packet capture will be performed and we will notes the differences in packet structure with interworking.

The video walks you through configuration of Cisco Any Transport over MPLS (AToM) interworking. In our first two scenarios, we will be configuring EoMPLS to provide Layer2 connectivity between sites with disparate circuit type, specifically non-tag and 802.1q circuit, using Ethernet and VLAN mode. Our last scenario involves interworking of non-Ethernet circuit to an Ethernet circuit, which will call for an IP mode. Wireshark packet capture will be performed and we will notes the differences in packet structure with interworking.

The video walks you through configuration of Cisco Any Transport over MPLS (AToM). Since Ethernet circuit has become much more common nowadays, we will only focus on providing Layer 2 VPN connectivity using point-to-point Ethernet (EoMPLS) which is considered a type of Virtual Private Wire Service (VPWS). We will compare various mode of operation including Port mode, VLAN mode, and VLAN translation. To get better insight of the underlying protocol and frame structure, we will perform Wireshark packet capture and review control and data packets.