Yeah, I know. We are focused in right now. It seems like on all the security
products
they're going to detect when we have malware on the network and there's weird
traffic flows
happening and where all of a sudden trying to attack different things
internally on the
network without ever having come through the Internet. And yet, we do still at
some point
have to prevent those threat actors from getting in from the Internet and that
is still going
to require a firewall or potentially a next generation firewall or an NGFW. Now WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to require a firewall or potentially a next generation firewall or an NGFW. Now
, despite
next generation being there in the name, we might think, Oh, this is a brand
new concept.
These have been around for a while. And so we just have to recognize that they
're referred
to as NGFWs. What are we talking about here? What is a next generation firewall
? Well, a
firewall is focused primarily on one thing, access control. Who is allowed on
the network?
And we put a firewall at the network edge because we want to prevent these WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we put a firewall at the network edge because we want to prevent these
threat actors
from getting in. In fact, we don't really want anybody just to come in to the
network
here through the firewall unless usually a couple of things. First of all, we
might want
to allow web traffic is want people to get to our website. And so we'll build a
DMZ
off of it and allow them to access it that way. Or we might have VPNs, you know
, users
who are remote and they're logging in via VPN. But even VPNs, they're kind of a WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
who are remote and they're logging in via VPN. But even VPNs, they're kind of a
form
of access control, but they do fall within the category of a traditional
firewall. Well,
a next generation firewall is going to add functionality to the firewall,
including intrusion
prevention systems or IPS, potentially malware protection, trying to analyze
packets as it
comes through the firewall. And maybe we can figure out that there's malware in
a packet
as it traverses coming back into the network. But we might take a look at web WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
as it traverses coming back into the network. But we might take a look at web
security options.
Can we filter out bad websites, for example? We can look at traffic encryption
and all kinds
of other options that are available that don't belong necessarily on
traditional firewall
platforms. Now, Cisco's had a lot of firewall platforms over the course of time
. Their traditional
firewalls started with the picks. And most recently, even though it's been a
while at
this point, the adaptive security appliance or the ASA, the ASA already sort of WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this point, the adaptive security appliance or the ASA, the ASA already sort of
attempted
to do this. I mean, it brought in VPNs, it brought in a little bit of IPS. But
now Cisco
has for quite a while had a true next generation firewall in the form of
firepower. And specifically,
Cisco refers to this as fire power threat defense or FTD. So when we're talking
about
firepower and firepower threat defense, we're pretty much just talking about a WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
firepower and firepower threat defense, we're pretty much just talking about a
firewall,
which not to trivialize it, we definitely need a firewall in our network. But
as we might
imagine, most of the sophistication of security architectures these days seems
to happen here,
trying to prevent a lot of the internal nuances that can happen when malware
gets downloaded
and threat actors gain access to our networks in other ways. But we definitely
want to have
a next generation firewall in our network. And we probably want to consider in
a couple
of places, we probably want to consider deploying this at the internet edge, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
of places, we probably want to consider deploying this at the internet edge,
which is not going
to come as any surprise. It's the example we keep using there. We want to keep
our threat
actors from accessing our network through the internet. But we might also
consider deploying
this into other network locations, especially at the data center. Corporate
networks can
be large enough that it makes sense to deploy a very large firewall between our
data center
and the rest of the network. And here's why. If we think about this, well, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and the rest of the network. And here's why. If we think about this, well,
actually, let's
just use this diagram over here, let's say that malware got on this machine
here. The
threat actor has bypassed this firewall check, we're good, we're on the inside
of the firewall.
And keep in mind, they're trying to access data stores. Well, where do these
data stores
live? These data stores and these servers tend to live in the data center. And
the data
center also tends to be layer three segmented from the rest of the network,
which is no
problem. We go through the network core. And so this threat actor who's taking WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
problem. We go through the network core. And so this threat actor who's taking
control
of this machine is going to go through the core, which doesn't deploy security
mechanisms
itself. And then it allows it to communicate with the data center. Well, this
is exactly
where we might want to deploy a firewall. Because if we can deploy a firewall
here, now
we have to get through a firewall after all. Remember, the threat actor thought
they were
on the other side of the firewall and yet now whoops, wrong one. Now they're WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
on the other side of the firewall and yet now whoops, wrong one. Now they're
facing a
firewall that is protecting that protecting really what they're after. I mean,
this is
the treasure trove over here, draw a little bad treasure chest. But the idea
here is they
want to get into the data center, they want the data, they want the file stores
, they
want all of these different aspects of the data that the company's trying to
protect.
And so putting a firewall here does indeed make a lot of sense. So the firewall WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And so putting a firewall here does indeed make a lot of sense. So the firewall
threat
defense, that is Cisco's next generation firewall. It's a product that we
should absolutely
consider deploying not only at the internet edge, but also potentially to
protect our
data centers and other network locations, depending on the network needs.