- 14
- 25 051
The Power of Firepower - Cisco Security
เข้าร่วมเมื่อ 22 พ.ค. 2018
Firepower Hour - Bite Size Edition - External Authentication and Authorization
Welcome to this edition Firepower Hour Bite Size Edition session where we cover both, how to configure and leverage external authentication and authorization.
มุมมอง: 272
วีดีโอ
Firepower Hour - Bite Size Edition - RBAC
มุมมอง 3133 ปีที่แล้ว
Welcome to the first Firepower Hour Bite Size Edition session where we cover 1 topic in between 5-15 minutes. This session is focusing around Role Based Access Control on Firepower Management Center.
Friday Firepower Hour - Secure Endpoint Integration Benefits
มุมมอง 3543 ปีที่แล้ว
In this video, we see several Firepower benefits when integrating Cisco Secure Endpoints, formerly known as AMP for Endpoints. We cover importing endpoint vulnerabilities and OS version which helps with tuning on Intrusion rules. We also integrate the sharing of events from endpoints with the FMC. The second part of the demo is covered in greater details in Friday Firepower Hour Session 2 - It ...
Friday's Firepower Hour What's New in Firepower 6 6
มุมมอง 2.6K4 ปีที่แล้ว
Join us to review what's new in Firepower 6.6 as we cover the new features such as Light Theme, VRF, new Security Intelligence categories, Time-Based Rules, New Policy Deployment options, Usability Enhancements for Security Policies, Object Group Search and more...
Friday Firepower Hour CTR Integration
มุมมอง 6504 ปีที่แล้ว
Hello, in this Friday Firepower Hour, we cover what is Cisco Threat Response, how Firepower is integrated and walking through an Investigation. Please subscribe to this channel and get notified whenever new content is posted. Thank you!
Friday Firepower Hour - SSL Policy
มุมมอง 2K5 ปีที่แล้ว
In this Friday Firepower Hour session, we cover how to configure an SSL Policy. We walk through on how to configure the Firepower Management Center as a Subordinate CA to your MS CA and then add this setting to a SSL Policy. We then test using 2 computers of which, 1 is domain joined and the other as a standalone to see the end user experience.
Friday Firepower Hour Intrusion and Network Analysis Policies
มุมมอง 7K5 ปีที่แล้ว
Spend 1 hour and learn about the differences between the base layers in Intrusion Policies, where and how Intrusion Policies are deployed along with Variable Sets. Also, we cover Network Analysis Policies and Packet flow order of operation with an Access Control Policy. And lastly, we cover an anatomy of a SNORT rule.
Cisco Friday Firepower Hour Series webinar
มุมมอง 1.1K5 ปีที่แล้ว
The session covers configuring Network Discovery, Intrusion and Correlation Policies. We also demonstrate how to configure a NMAP remediation instance, how to configure variable sets and lastly, how to tune an Intrusion rule.
Friday's Firepower Hour Session 6
มุมมอง 1.2K5 ปีที่แล้ว
Watch as we cover Firepower Best Practices, Optimization and Recommendations. We cover Network Discovery, Network Analysis Policies, Variable-Sets, Security Intelligence, Adaptive Profiles, Scheduling Tasks, Advanced Access Control Policy Settings, Network Whitelisting, NMAP responses and Correlation Policies.
Friday's Firepower Hour - Session 5
มุมมอง 9116 ปีที่แล้ว
In this video, we cover the new Cisco ASA to FTD Migration tool. Watch as we migrate an ASA 5506X config to a Firepower 2110 and learn the differences between ASA and Firepower Threat Defense (FTD).
Friday's Firepower Hour - Session 4
มุมมอง 1K6 ปีที่แล้ว
This session covers several topics. First is configuring an AD Realm and integrating the Cisco User Agent to retrieve AD username to IP address mappings and build Firepower Identity Policy. We then cover building a Access Control Policy rule that utilizes AD users and demonstrate Interactive Block page rule action. We look at configuring scheduling tasks and configuring customized dashboards. L...
Friday's Firepower Hour - Session 3
มุมมอง 1.2K6 ปีที่แล้ว
We cover Firepower Intrusion Policy settings and configuration.
Friday's Firepower Hour - Session 2
มุมมอง 1.4K6 ปีที่แล้ว
This session covers the Firepower security intelligence as well as custom feed and how to use these in an Access Control Policy. We also cover AMP for networks and AMP for endpoints integration, simple custom detection leveraged into a Windows and Network AMP4E policies. All the above are demo'd and we show AMP retrospective detection and quarantine.
Friday's Firepower Hour - Session 1
มุมมอง 4.7K6 ปีที่แล้ว
Watch and learn how to configure Network Discovery, Intrusion Policy and IPS Tuning, Variable Set, NMAP Remediation and Correlation Policy on Cisco Firepower.
great video.. looking for ISE/FMC integration detail demo video and passive authentication configuration and testing on FTD along with SGT based AC policy and SGT detail configuration example in next vlog series if possible for your
Great presentation. What do we do in instances where you are hosting an external-facing website using a publicly signed SSL certificate (Entrust, Verisign, etc) on the load balancer or server? Can we decrypt that traffic? Or do SSL policies only work for internal PKI certs where the FMC can be a subordinate CA for? Thanks!
Everyone, the next Friday Firepower Hour session is May 21st. Covered topics include: • Review Cisco’s Secure Endpoint Integration Benefits with Firepower o Firepower Network Discovery Enhancement o Importing Endpoint Vulnerabilities into Firepower o Improving Intrusion Policies Efficacy o Sharing Endpoint Malware Events with Firepower o Enables Configure Once, Block Everywhere Capability Go to cisco.webex.com/cisco/k2/j.php?MTID=tf4a480d2491b83d292433f297f30be07 and register.
Very very useful
Thank you Rohit!
@@paulazzi1855 Thanks for replying. Your videos are very informative. Just wanted to know when you are uploading nest video series. Could I expect the videos on AMP?
@@rohitjawase9253 Hi Rohit. Next session will be on 5/14 and topic will be around the benefits of Cisco Secure Endpoints with Firepower. That said, Friday Firepower Hour session 2 covers some of that also.
@@thepoweroffirepower-ciscos3129 thanks
@@rohitjawase9253 Go to cisco.webex.com/cisco/k2/j.php?MTID=tf4a480d2491b83d292433f297f30be07 and register.
어렵다 어려워..
Very informative, is the certificate generation and installation process different for public SSL certs? I see some guides using OpenSSL and not the FMC etc. or is the process the same so for instance when deploying SSL certs to be used in RA VPN? thank you
Hi Bismark, thank you for comment. You would not/could not use a public SSL cert for this. Your Firewall is acting as an intermediate CA. Not a single Public CA, like Entrust, Versign, etc. would allow you to be an intermediate CA for them, thus using your own CA. Hopefully this makes sense. Paul
Thank you a lot for the useful info about the new release. I suggest to have such sessions in at least quarterly basis. Exploring new features, common practices, and use cases of firewpower capabilities.
Thank you Ayedh, appreciate your feedback and suggestion.
Great channel!
Thank you Matias, appreciate that you enjoy the videos!
All, Below is the invite to the next Friday Firepower Hour WebEx session scheduled for May 15th. We will be covering the following topics: • Understanding the changes with Firepower 6.6 • Review and demonstrate the new features Go to cisco.webex.com/cisco/k2/j.php?MTID=t6a063cb192ff9edccf737d621ac71383 and register and join us for a 1 hour on what's new in Firepower 6.6. Thanks Paul
Thanks for this Video. Its really helpful. I do have few queries about this session. Can i send you a mail with all my query ? Please confirm
Hi Chenthil, of course.
If you are going to allow a specific piece of a Web Application or category (, such as allowing google drive, but not gmail, or allowing facebook logins, but not all of facebook ) would you inspect the specific traffic (category or application) and resign it in the SSL policy and then allow it via your ACL? Thanks, loved the video!
David, thank you for your comment. In your SSL Policy, there is a default action. If that is set to Do not decrypt, then you would have to create a rule in your SSL Policy that identifies the apps you wish to block. In the Applications column/selection, apps requiring decryption to be identified are displayed with a gold lock so they are easily identified. Hopefully this helps and stay tuned for this Friday the 20th where we have the next Friday Firepower Hour covering how to integrate Firepower with Cisco Threat Response. Paul
Happy to announce the next Friday Firepower Hour session is scheduled for Friday March 20th at 3pm CST. We will be covering the following topics: • Integrate Firepower into CTR dashboard • Review the Firepower Events sent to CTR • Investigate an event using CTR You need to register to attend and here is the link: cisco.webex.com/cisco/k2/j.php?MTID=t411bc09bc9654148415f4417c2fc61cd See you on March 20th!
very nice walk-through by Cisco experts. very relevant content with the large percentage of malware encrypting their traffic to avoid detection
Thank you David!
Hello, the next Friday Firepower Hour will be covering the topic on SSL Policies. Register and join as we will be covering the following topics: Configure FMC as a subordinate CA, Configure SSL Policy, Review the SSL Policy components, Test and Review Events. Here is the link. Registration to join is required. cisco.webex.com/cisco/k2/j.php?MTID=t556e18897499a9ba67b006e160988e15 Thanks Paul
Simply the best, better than all the rest
i cant believe we live in a country where we can hear this beautiful knowledge
I cant believe this much firepower knowledge can come out of one man's brain
i cant believe i missed this live - it must have been an amazing day!
This is an amazing session
Thanks .. very helpful
great thanks for your session..
Thanks Vijay!
Hello, Thanks for this video. Pleass How to backup an FTD configurations prior to 6.3 version?
Hi Yannick, this functionality was added in 6.3. Prior to this was a manual re-configuration of Interfaces, etc.
Thanks so much! for a new out of the box Firepower deployment, setting the "network discovery" default action in the ACP would allow all Interzone traffic? meaning traffic from the outside (internet) can access something in the inside? or does Firepower has a default Deny for interzone traffic? thanks again!
Hi, with a Network Discovery or Intrusion Policy, all traffic is allowed unless IPS rule blocks, very much like an IDS/IPS. With the default action set to Block, then it's more like a firewall. By default, permit inter and intra interface traffic is enabled, unlike the ASA. You would require to configure ACP rules to deny/permit traffic bases on Zone/Vlan/Network/etc. Here is some configuration example. www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower-threat-defense-int.html
@@thepoweroffirepower-ciscos3129 then we need to make sure default action is always set to block from the initial deployment. Thank you
@@RogueDire Yes, if your firepower deployment is a the Internet edge. In a datacenter, it would depend on what ACP rules are configured. If you only wanted to allow certain traffic, then create rules to only allows that traffic and then Block everything else. If you want to allow all traffic but inspect via IPS policy, then you could leverage Intrusion as your default action. There is no right/wrong answer or deployment. It just depends on what you require from a security policy.
How do I register for the live sessions (partner)
Hi, there are live sessions but only in select cities. Reach out to your local Cisco CSE asking if there are events in your area. Thanks.
Great content!
Thanks David!
Thanks David.
Can't wait for the next episode, i'm on the edge of my seat.
Hard to believe this is free! So good...
Thanks Bryan!
Wow, Amazing content in this one. Paul can sure deliver a presentation.
Thanks Bryan!
This is great! Very informative.
You mentioned you are using a virtual FMC in you lab. We found out after Cisco recommended to us to purchase that you can't run redundancy or HA between two virtual FMCs. You have to have two hardware FMCs to have FMC HA.
Hi David, this is accurate. Only the FMC appliances natively support HA, with the exception of the 750 which is EOS. www.cisco.com/c/en/us/products/collateral/security/firesight-management-center/datasheet-c78-736775.html There are other reasons why you would want to go with appliances over virtual FMC. The datasheet info in the above link provides some insight into EPS and Database size. Thanks
Backup FMC regularly and snapshot the FMC
@@RogueDire Absolutely, backup regularly and schedule that!