Hello and welcome. My name is Keith Barker.
And in a previous skill, we looked at the basic concept of a DFW,
a distributed firewall, which is absolutely awesome to control traffic flows
inside of NSX.
And up to this point, we primarily used group membership for criteria,
for matching on those rules, as well as layer four protocols like TCP and well-
known ports
for applications like SSH with a well-known port of TCP port 22.
However, there comes a time in everyone's life when we may want to take a WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
However, there comes a time in everyone's life when we may want to take a
closer look
at what's really going on higher than layer four in the protocol stack.
Specifically, looking at the application layer to see is it really SSH or is it
really HTTPS and so forth.
And so in this skill, we're going to kick it up a notch with our distributed
firewall
by introducing the concept of a context profile.
And whenever we hear the term context profile, I'd like you to think,
looking at the details of the application layer, because that's exactly what we
're talking about.
And if we're using context profiles and we're looking at the application layer, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And if we're using context profiles and we're looking at the application layer,
we can now include rules that are based on what's really happening at the
application layer.
So if we want to permit SSH, for example, we can create a rule that at layer
four is looking for
TCP with a well-known port of 22. And at the application layer, we can take a
closer look
and make sure it's really SSH. Once again, using at the application layer, the
context profile
to identify exactly what attributes we're looking for in the application layer.
So in this skill, you and I get to continue working with the distributed
firewall,
but adding on top of our configuration as part of the rules, we'll add on our WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
but adding on top of our configuration as part of the rules, we'll add on our
context profiles
to take a look at the details of what's happening at the application layer.
So if you're ready, I'm ready, and I'll see you in the very next video.