Have you ever had a time in life when you were given advice,
and then you didn't take it?
And you look back later and think, oh, I
wish I'd taken that advice?
Well, in the world of security intelligence,
there are organizations, including Cisco and Talos that
are collecting loads and loads of information regarding
bad actors, malicious attacks, and nefarious activities
on the network and the internet.
Wouldn't it be smart to leverage that information?
And that's the key behind security intelligence
that I'd like to talk with you about in this video.
So our goal is to protect the user. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So our goal is to protect the user.
So here's Bob and also Bob's computer and the network
that Bob is on.
And with security intelligence, we
have organizations, like, Cisco.
Cisco has a group called Talos.
And Talos, the security intelligence organization
from Cisco, is gathering literally
billions of data points every day
regarding stuff that's going on on the internet,
whether it's email or malware.
And it's collecting all that information.
And one of the benefits of Talos or any organization like that
that's collecting all that security intelligence WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
that's collecting all that security intelligence
is that if they see an attack--
say this is the world here--
if they see an attack over in this part of the world,
they can go ahead and communicate it down
to this part of the world.
So if the attack is happening here and they see it,
it can communicate that information
to other networks and other devices.
So they can help protect against those same types of attacks.
So a security intelligence involves
collecting or gathering the data regarding
attacks and malicious activities that are happening.
And then with all that data managed and organized,
they could then create the information
about the attacks, categorized and all WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
about the attacks, categorized and all
set up for the benefit of those devices that
can then use that information.
And that would involve sharing the information.
So sharing would be Talos providing that information.
And then the actual consumption or use of that information
would be also important to protect our networks.
So we can call that use or consumption.
So let's talk about Cisco's Talos,
which is Cisco's security intelligence function.
And let's identify some of the devices that
can both provide information up to Talos
and also leverage the data from Talos to enhance security.
They've got something called ESA, the email security WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
They've got something called ESA, the email security
appliance.
They also have a cloud version of that as well
that analyzes email.
And in its process of analyzing email,
it can help identify new malicious activity,
new threats.
And that information is going up to Talos.
And at the same time, other devices and enterprises
that are using the email security appliance
can benefit from that because the email security appliance
ties into Talos to get information
about threats and about attacks and about malware.
Another product that ties into Talos
would be the web security appliance.
And these can both be either on prem or in the cloud. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And these can both be either on prem or in the cloud.
But the key here is they both work
with the security intelligence provided by Cisco's Talos.
So here in my topology, I just drew a little web security
appliance right here.
I'll go ahead and draw an email security appliance as well.
Another option that we can use in conjunction with Talos
would be Cisco's firewall services.
I'll put an NGFW, which, we'll put it here, firepower.
And based on our policy in the firewall, if Talos is now
aware of a new attack coming from a certain block
of addresses or a certain part of the world,
our firewall can put up additional defenses WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
our firewall can put up additional defenses
against those source IP addresses,
all because of the integration between the firewall services
and Cisco's Talos, the security intelligence in the cloud.
Another element that can benefit from Cisco's security
intelligence would be AMP, the advanced malware protection,
which runs, like, everywhere.
There's AMP for the PCs.
There's AMP that can run as part of our firewall services.
And also for firewall services, I'm also going to put IPS,
so next generation firewall services and IPS services,
all of these products from Cisco can WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
all of these products from Cisco can
leverage Cisco's Talos, their security intelligence
services in the cloud.
There's also Cisco's Threat Grid,
which also is going to interact and leverage
the data, the security intelligence data,
from Cisco's Talos as well.
So one of the challenges has been and will continue to be,
how do we secure all of our devices
with security intelligence?
The answer from Cisco, if you have Cisco products that tie in
to Cisco's Talos, their security intelligence, that is
absolutely one way of doing it.
The only barrier to getting there
is cost because we have to license
those products and the service to make WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
those products and the service to make
that functionality work.
But it's better than the alternative, which is just
to hope for the best and hope no bad traffic
or no bad emails or no bad sites are visited by our users.
So we have discussed some benefits of integrating
with security intelligence.
And in the next video, I'd like to give you
an overview of Talos itself.
I'll see you there in just a moment.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing.