Once a user has authenticated, and they're on the network,
do we just let them go, have a good time?
The answer is no.
We had to do some more at their local computer.
[MUSIC PLAYING]
And a big part of that is going to be some type of rights
limitation so that we don't have full access
rights for Bob or Sally or Lois or whoever
it is at that computer.
They want to have the minimum amount of rights
that they need so they can still do their job,
but also, if they get compromised,
they can't just have the rights of King Kong
and destroy their local workstation. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and destroy their local workstation.
In addition, for decades, we've known
that we need to have some type of
anti-malware, anti-virus software
of some type on our systems.
And Cisco is taking a holistic approach to this.
So from a design perspective, to keep the endpoints safe,
we are going to want to use AMP.
Now, AMP stands for the Advanced Malware Protection.
And it's not just software that runs on the PC.
It's also a system that allows you to track malware.
So if there is a compromise, not only is the intent for AMP
to identify that and quarantine it, sandbox it, and stop that WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to identify that and quarantine it, sandbox it, and stop that
from propagating, but if there is an outbreak,
or if there's something negative that happens,
AMP also has the ability to work with other devices
on the network and track where that virus is spreading,
or that malware is spreading, where has it gone,
what's its trajectory, so it can be identified and stopped.
Also, it's going to use security intelligence from the cloud.
So there's going to be intelligence-- in fact,
Cisco has a large database of a lot of attacks
and a lot of malware that is happening,
and they can use that information in the cloud
to keep our local systems up to date
and more educated as far as advanced threats WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and more educated as far as advanced threats
that might be coming our way.
So that's a great [INAUDIBLE].
The Cisco-intended solution for doing protection
against viruses and malware at the desktops
is going to be using AMP.
Now, AMP goes further than just being on a local computer
like an anti-malware software, it's also integrated
that technology, along with the intelligence
from the cloud with TELUS and getting updates,
it's also integrated with web security firewalls.
It's also integrated with email security firewalls
and other products that Cisco has,
as a holistic solution to both identifying, preventing, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
as a holistic solution to both identifying, preventing,
and then if there is an outbreak, stopping
that outbreak from doing significant damage
to an infrastructure with AMP.
The next thing I'd like to chat with you about
is, once we have an authenticated user
and their system is protected, how do we control their traffic
through the network, and how do we prevent them
from going to, perhaps, sites that
may be dangerous or hazardous or not in their best interest?
We're going to take a look at those aspects regarding
secure network design in the next video.
So I'll see you there in just a moment.
Meanwhile, I hope this has been informative for you,
and I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and I'd like to thank you for viewing.