One of the main purposes behind this skill is making sure that we can
understand how to secure
our better secure our platform as a service model inside of a Cisco environment
. And that's
what brings us to where we're at right now. Because we had to kind of build up
to be able to get to
this point and show you that here inside of our Cisco ice that we teased in the
last portion of
this skill, we can actually go through and take a look at vulnerability and WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this skill, we can actually go through and take a look at vulnerability and
threat assessment
inside of our platform as a service model. Now why is it easier to do here?
Well, that's because
we have control over the actual application and can scan more deeply inside of
what's actually
going on within the organization and its network and systems. So if we go over
to the vulnerability
tab and click over, now keep in mind, this is a sandbox environment where
limits are based on the
actual usability and over the counter licensing we have with Cisco on this WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
actual usability and over the counter licensing we have with Cisco on this
example. We can see that
we have different areas of importance for our vulnerability assessment. And we
have total
vulnerable endpoints, which is based on CVSS scoring. And if you don't know
what CVSS scoring is,
I can actually put a link below that goes more in depth over the importance of
CVSS score,
and how that score is actually calculated, look below. And it gives us WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and how that score is actually calculated, look below. And it gives us
basically a low medium at high
on all three of those are all all of our devices and in a numerical score
between 0.0 and 10.
So you can get like a 6.1 somewhere in there. So based on that, we can actually
go over and see
our vulnerable endpoints over time top vulnerabilities that make up that CVSS
score and vulnerability watchlist.
Like what vulnerability is actually coming to end that we need to be on the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Like what vulnerability is actually coming to end that we need to be on the
lookout for because
I'm on to you. And then that leads us into threat because we actually have to
know what threat
actually is in order for us to be able to understand what the CVSS score is
reporting to us as a
top vulnerability. See, when we break down the actual threat cycle of what's
actually going on,
we look at our vulnerabilities as being an entry point into the system by an
actual threat on the
outside of our organization or could be inside who knows, but the vulnerability WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
outside of our organization or could be inside who knows, but the vulnerability
invites the threat.
And the threat is there to actually take an exploit that vulnerability to be
able to monitor
everything inside of I says we have here allows us to be able to go and
identify on the fly with real-time
accuracy based on definitions that we can actually go through and understand
how we can better
prepare our network for top level security. Having application access inside of WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
prepare our network for top level security. Having application access inside of
our platform as
a service model allows us the freedom to go through as network technicians and
work with our
cybersecurity specialist inside of our organization to properly identify those
vulnerabilities,
look at the threats that could potentially exploit those vulnerabilities and
develop policies
that we can use inside of our Ketalus Center here that we time down and have to
re-log back into
and develop policies that we can implement to push after those network devices WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and develop policies that we can implement to push after those network devices
within the organization
and actually go through and better patch all of our systems up. And I'm trying
to log in to hear
right now to show you the actual policy dashboard and configuration profile
that we can use in an
order to complete that task. But just know that again that it's very critical
for us to be able to go
through and have that application access to be able to identify those threats WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
through and have that application access to be able to identify those threats
and maintain the CIA
triad of confidentiality integrity and availability. So the availability side.
Once we're actually inside of our dashboard we go and click on the top left and
go into provision
and inside of our inventory to see all of our devices. Remember we only have
the four available
inside of our sandbox environment here and we can click on just one of the
switches I picked SW1.
We can actually go into run command and it opens up a prompt here and based on WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We can actually go into run command and it opens up a prompt here and based on
the actual restrictions
of our policy that's implemented we can even do a show run now show runs
available and other
commands like going into enable and config or not. But that's all based on
policy and this is a
way for us to be able to go check policy enforcement and also the configuration
. So as we scroll up and
look at the configuration we would be able to go through here and ensure that
the automation WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the automation
services that were incorporated inside of our Cisco environment for the
application level
is actually being implemented correctly for auditing purposes.