WEBVTT

1
00:00.000 --> 00:01.240 align:middle line:84%


2
00:01.240 --> 00:03.940 align:middle line:90%
Have you ever had a time in
life when you were given advice,

3
00:03.940 --> 00:05.320 align:middle line:84%
and then you didn't take it?

4
00:05.320 --> 00:07.480 align:middle line:90%
And you look back
later and think, oh, I

5
00:07.480 --> 00:09.220 align:middle line:84%
wish I'd taken that advice?

6
00:09.220 --> 00:11.140 align:middle line:90%
Well, in the world of
security intelligence,

7
00:11.140 --> 00:14.080 align:middle line:90%
there are organizations,
including Cisco and Talos that

8
00:14.080 --> 00:17.230 align:middle line:90%
are collecting loads and
loads of information regarding

9
00:17.230 --> 00:20.530 align:middle line:90%
bad actors, malicious attacks,
and nefarious activities

10
00:20.530 --> 00:22.000 align:middle line:84%
on the network and the internet.

11
00:22.000 --> 00:24.787 align:middle line:90%
Wouldn't it be smart to
leverage that information?

12
00:24.787 --> 00:26.745 align:middle line:90%
And that's the key behind
security intelligence

13
00:26.745 --> 00:29.270 align:middle line:90%
that I'd like to talk with
you about in this video.

14
00:29.270 --> 00:31.510 align:middle line:90%
So our goal is to
protect the user.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

14
00:29.270 --> 00:31.510 align:middle line:90%
So our goal is to
protect the user.

15
00:31.510 --> 00:34.720 align:middle line:90%
So here's Bob and also Bob's
computer and the network

16
00:34.720 --> 00:35.733 align:middle line:84%
that Bob is on.

17
00:35.733 --> 00:37.150 align:middle line:90%
And with security
intelligence, we

18
00:37.150 --> 00:38.560 align:middle line:84%
have organizations, like, Cisco.

19
00:38.560 --> 00:41.440 align:middle line:84%
Cisco has a group called Talos.

20
00:41.440 --> 00:43.930 align:middle line:90%
And Talos, the security
intelligence organization

21
00:43.930 --> 00:46.690 align:middle line:90%
from Cisco, is
gathering literally

22
00:46.690 --> 00:49.260 align:middle line:90%
billions of data
points every day

23
00:49.260 --> 00:51.380 align:middle line:90%
regarding stuff that's
going on on the internet,

24
00:51.380 --> 00:53.800 align:middle line:84%
whether it's email or malware.

25
00:53.800 --> 00:55.700 align:middle line:90%
And it's collecting
all that information.

26
00:55.700 --> 00:58.380 align:middle line:90%
And one of the benefits of Talos
or any organization like that

27
00:58.380 --> 01:00.380 align:middle line:90%
that's collecting all
that security intelligence
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
00:58.380 --> 01:00.380 align:middle line:90%
that's collecting all
that security intelligence

28
01:00.380 --> 01:01.960 align:middle line:84%
is that if they see an attack--

29
01:01.960 --> 01:03.232 align:middle line:84%
say this is the world here--

30
01:03.232 --> 01:05.440 align:middle line:90%
if they see an attack over
in this part of the world,

31
01:05.440 --> 01:07.990 align:middle line:90%
they can go ahead and
communicate it down

32
01:07.990 --> 01:09.170 align:middle line:84%
to this part of the world.

33
01:09.170 --> 01:10.870 align:middle line:90%
So if the attack is happening
here and they see it,

34
01:10.870 --> 01:12.328 align:middle line:90%
it can communicate
that information

35
01:12.328 --> 01:14.030 align:middle line:90%
to other networks
and other devices.

36
01:14.030 --> 01:17.122 align:middle line:90%
So they can help protect against
those same types of attacks.

37
01:17.122 --> 01:18.580 align:middle line:90%
So a security
intelligence involves

38
01:18.580 --> 01:21.280 align:middle line:90%
collecting or gathering
the data regarding

39
01:21.280 --> 01:24.280 align:middle line:90%
attacks and malicious
activities that are happening.

40
01:24.280 --> 01:26.500 align:middle line:90%
And then with all that
data managed and organized,

41
01:26.500 --> 01:28.780 align:middle line:90%
they could then
create the information

42
01:28.780 --> 01:31.120 align:middle line:90%
about the attacks,
categorized and all
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:28.780 --> 01:31.120 align:middle line:90%
about the attacks,
categorized and all

43
01:31.120 --> 01:33.880 align:middle line:90%
set up for the benefit
of those devices that

44
01:33.880 --> 01:35.620 align:middle line:84%
can then use that information.

45
01:35.620 --> 01:38.000 align:middle line:90%
And that would involve
sharing the information.

46
01:38.000 --> 01:40.760 align:middle line:90%
So sharing would be Talos
providing that information.

47
01:40.760 --> 01:43.190 align:middle line:90%
And then the actual consumption
or use of that information

48
01:43.190 --> 01:45.190 align:middle line:90%
would be also important
to protect our networks.

49
01:45.190 --> 01:47.840 align:middle line:90%
So we can call that
use or consumption.

50
01:47.840 --> 01:49.270 align:middle line:90%
So let's talk about
Cisco's Talos,

51
01:49.270 --> 01:51.408 align:middle line:90%
which is Cisco's security
intelligence function.

52
01:51.408 --> 01:53.200 align:middle line:90%
And let's identify some
of the devices that

53
01:53.200 --> 01:55.030 align:middle line:90%
can both provide
information up to Talos

54
01:55.030 --> 01:58.840 align:middle line:90%
and also leverage the data
from Talos to enhance security.

55
01:58.840 --> 02:02.180 align:middle line:90%
They've got something called
ESA, the email security
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

55
01:58.840 --> 02:02.180 align:middle line:90%
They've got something called
ESA, the email security

56
02:02.180 --> 02:02.680 align:middle line:84%
appliance.

57
02:02.680 --> 02:04.597 align:middle line:90%
They also have a cloud
version of that as well

58
02:04.597 --> 02:05.920 align:middle line:84%
that analyzes email.

59
02:05.920 --> 02:08.020 align:middle line:90%
And in its process
of analyzing email,

60
02:08.020 --> 02:10.240 align:middle line:90%
it can help identify
new malicious activity,

61
02:10.240 --> 02:11.110 align:middle line:84%
new threats.

62
02:11.110 --> 02:13.170 align:middle line:90%
And that information
is going up to Talos.

63
02:13.170 --> 02:14.920 align:middle line:90%
And at the same time, other
devices and enterprises

64
02:14.920 --> 02:16.712 align:middle line:90%
that are using the
email security appliance

65
02:16.712 --> 02:19.600 align:middle line:90%
can benefit from that because
the email security appliance

66
02:19.600 --> 02:21.610 align:middle line:90%
ties into Talos
to get information

67
02:21.610 --> 02:24.760 align:middle line:90%
about threats and about
attacks and about malware.

68
02:24.760 --> 02:26.740 align:middle line:90%
Another product
that ties into Talos

69
02:26.740 --> 02:29.170 align:middle line:90%
would be the web
security appliance.

70
02:29.170 --> 02:31.983 align:middle line:90%
And these can both be either
on prem or in the cloud.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

70
02:29.170 --> 02:31.983 align:middle line:90%
And these can both be either
on prem or in the cloud.

71
02:31.983 --> 02:33.400 align:middle line:90%
But the key here
is they both work

72
02:33.400 --> 02:36.640 align:middle line:90%
with the security intelligence
provided by Cisco's Talos.

73
02:36.640 --> 02:39.490 align:middle line:90%
So here in my topology, I just
drew a little web security

74
02:39.490 --> 02:40.420 align:middle line:84%
appliance right here.

75
02:40.420 --> 02:43.070 align:middle line:90%
I'll go ahead and draw an email
security appliance as well.

76
02:43.070 --> 02:45.670 align:middle line:90%
Another option that we can
use in conjunction with Talos

77
02:45.670 --> 02:47.515 align:middle line:90%
would be Cisco's
firewall services.

78
02:47.515 --> 02:52.150 align:middle line:90%
I'll put an NGFW, which,
we'll put it here, firepower.

79
02:52.150 --> 02:54.970 align:middle line:90%
And based on our policy in
the firewall, if Talos is now

80
02:54.970 --> 02:57.640 align:middle line:90%
aware of a new attack
coming from a certain block

81
02:57.640 --> 02:59.720 align:middle line:90%
of addresses or a certain
part of the world,

82
02:59.720 --> 03:01.660 align:middle line:90%
our firewall can put
up additional defenses
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

82
02:59.720 --> 03:01.660 align:middle line:90%
our firewall can put
up additional defenses

83
03:01.660 --> 03:03.670 align:middle line:90%
against those
source IP addresses,

84
03:03.670 --> 03:06.640 align:middle line:90%
all because of the integration
between the firewall services

85
03:06.640 --> 03:09.610 align:middle line:90%
and Cisco's Talos, the security
intelligence in the cloud.

86
03:09.610 --> 03:11.860 align:middle line:90%
Another element that can
benefit from Cisco's security

87
03:11.860 --> 03:15.370 align:middle line:90%
intelligence would be AMP, the
advanced malware protection,

88
03:15.370 --> 03:17.650 align:middle line:84%
which runs, like, everywhere.

89
03:17.650 --> 03:19.270 align:middle line:84%
There's AMP for the PCs.

90
03:19.270 --> 03:22.030 align:middle line:90%
There's AMP that can run as
part of our firewall services.

91
03:22.030 --> 03:26.050 align:middle line:90%
And also for firewall services,
I'm also going to put IPS,

92
03:26.050 --> 03:29.350 align:middle line:90%
so next generation firewall
services and IPS services,

93
03:29.350 --> 03:31.260 align:middle line:90%
all of these products
from Cisco can
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

93
03:29.350 --> 03:31.260 align:middle line:90%
all of these products
from Cisco can

94
03:31.260 --> 03:33.430 align:middle line:90%
leverage Cisco's Talos,
their security intelligence

95
03:33.430 --> 03:34.880 align:middle line:84%
services in the cloud.

96
03:34.880 --> 03:36.460 align:middle line:90%
There's also
Cisco's Threat Grid,

97
03:36.460 --> 03:38.500 align:middle line:90%
which also is going to
interact and leverage

98
03:38.500 --> 03:40.540 align:middle line:90%
the data, the security
intelligence data,

99
03:40.540 --> 03:42.143 align:middle line:84%
from Cisco's Talos as well.

100
03:42.143 --> 03:44.560 align:middle line:90%
So one of the challenges has
been and will continue to be,

101
03:44.560 --> 03:46.480 align:middle line:90%
how do we secure
all of our devices

102
03:46.480 --> 03:47.740 align:middle line:84%
with security intelligence?

103
03:47.740 --> 03:51.280 align:middle line:90%
The answer from Cisco, if you
have Cisco products that tie in

104
03:51.280 --> 03:53.980 align:middle line:90%
to Cisco's Talos, their
security intelligence, that is

105
03:53.980 --> 03:55.480 align:middle line:84%
absolutely one way of doing it.

106
03:55.480 --> 03:57.580 align:middle line:90%
The only barrier
to getting there

107
03:57.580 --> 03:59.200 align:middle line:90%
is cost because
we have to license

108
03:59.200 --> 04:00.870 align:middle line:90%
those products and
the service to make
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

108
03:59.200 --> 04:00.870 align:middle line:90%
those products and
the service to make

109
04:00.870 --> 04:01.870 align:middle line:84%
that functionality work.

110
04:01.870 --> 04:04.640 align:middle line:90%
But it's better than the
alternative, which is just

111
04:04.640 --> 04:06.940 align:middle line:90%
to hope for the best
and hope no bad traffic

112
04:06.940 --> 04:10.748 align:middle line:90%
or no bad emails or no bad
sites are visited by our users.

113
04:10.748 --> 04:12.790 align:middle line:90%
So we have discussed some
benefits of integrating

114
04:12.790 --> 04:13.915 align:middle line:84%
with security intelligence.

115
04:13.915 --> 04:15.760 align:middle line:90%
And in the next video,
I'd like to give you

116
04:15.760 --> 04:18.070 align:middle line:84%
an overview of Talos itself.

117
04:18.070 --> 04:19.760 align:middle line:90%
I'll see you there
in just a moment.

118
04:19.760 --> 04:22.180 align:middle line:90%
Meanwhile, I hope this has
been informative for you.

119
04:22.180 --> 04:25.380 align:middle line:90%
And I'd like to thank
you for viewing.