WEBVTT

1
00:00.000 --> 00:00.090 align:middle line:84%


2
00:00.090 --> 00:02.160 align:middle line:90%
Now that we understand
what DNA Center really

3
00:02.160 --> 00:04.320 align:middle line:90%
does, how it operates,
it's time to dig

4
00:04.320 --> 00:07.560 align:middle line:90%
in to that SD-Access fabric
section a little bit more.

5
00:07.560 --> 00:09.130 align:middle line:90%
What we now need
to talk about is,

6
00:09.130 --> 00:12.690 align:middle line:90%
what does it bring to the
table in terms of security?

7
00:12.690 --> 00:14.370 align:middle line:90%
What we're really
talking about is

8
00:14.370 --> 00:17.370 align:middle line:90%
something called micro
segmentation and macro

9
00:17.370 --> 00:18.240 align:middle line:84%
segmentation.

10
00:18.240 --> 00:21.060 align:middle line:90%
And how we interact with
it, deploying policies

11
00:21.060 --> 00:23.100 align:middle line:90%
into the network, that's
really, really cool

12
00:23.100 --> 00:24.720 align:middle line:90%
and one of the
most useful things

13
00:24.720 --> 00:26.460 align:middle line:84%
that we can do with DNA Center.

14
00:26.460 --> 00:29.250 align:middle line:90%
So let's talk about how
micro and macro segmentation

15
00:29.250 --> 00:32.580 align:middle line:90%
works and, really, the magic
under the hood, Cisco TrustSec.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.250 --> 00:32.580 align:middle line:90%
works and, really, the magic
under the hood, Cisco TrustSec.

16
00:32.580 --> 00:33.593 align:middle line:84%
Let's get going.

17
00:33.593 --> 00:35.760 align:middle line:90%
Now, look, fair warning,
what I'm about to show you,

18
00:35.760 --> 00:37.140 align:middle line:90%
what I'm about to
describe to you

19
00:37.140 --> 00:39.570 align:middle line:90%
is going to sound like
voodoo witchcraft magic.

20
00:39.570 --> 00:41.558 align:middle line:90%
You're not going to
believe that this is real,

21
00:41.558 --> 00:42.850 align:middle line:84%
that this is what really works.

22
00:42.850 --> 00:45.930 align:middle line:90%
But this is what is being
deployed in production

23
00:45.930 --> 00:47.640 align:middle line:84%
environments right now.

24
00:47.640 --> 00:50.550 align:middle line:90%
You see, in the previous
Nugget, we set up this idea

25
00:50.550 --> 00:53.910 align:middle line:90%
that we could deploy our
intent, and that intent

26
00:53.910 --> 00:56.830 align:middle line:90%
was based on some
user information.

27
00:56.830 --> 01:00.150 align:middle line:90%
So we said something
like users in group A
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
00:56.830 --> 01:00.150 align:middle line:90%
So we said something
like users in group A

28
01:00.150 --> 01:04.080 align:middle line:90%
could or could not
access users in group B.

29
01:04.080 --> 01:06.200 align:middle line:84%
So let's say they could not.

30
01:06.200 --> 01:07.770 align:middle line:90%
We'll prevent that
from happening.

31
01:07.770 --> 01:10.980 align:middle line:90%
Users in group A could not
access users in group B.

32
01:10.980 --> 01:12.210 align:middle line:84%
But let's add a layer to it.

33
01:12.210 --> 01:17.040 align:middle line:90%
Let's say users in group B were
permitted to access servers

34
01:17.040 --> 01:19.680 align:middle line:90%
that we've identified
in group C.

35
01:19.680 --> 01:22.350 align:middle line:90%
So this sets up our
first business intent,

36
01:22.350 --> 01:24.710 align:middle line:84%
and it's all based on users.

37
01:24.710 --> 01:28.830 align:middle line:90%
And Cisco DNA Center is able
to implement this intent

38
01:28.830 --> 01:30.960 align:middle line:84%
across the entire network.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
01:28.830 --> 01:30.960 align:middle line:84%
across the entire network.

39
01:30.960 --> 01:33.900 align:middle line:90%
But it gets way,
way cooler than that

40
01:33.900 --> 01:38.980 align:middle line:90%
when we start talking about the
software-defined access fabric.

41
01:38.980 --> 01:42.070 align:middle line:90%
So now picture for a moment
that we are on a college campus,

42
01:42.070 --> 01:43.500 align:middle line:84%
and we have a few buildings.

43
01:43.500 --> 01:46.680 align:middle line:90%
We'll call this one building
A, this one building

44
01:46.680 --> 01:50.010 align:middle line:90%
B, and this one building
C. And let's say

45
01:50.010 --> 01:51.690 align:middle line:90%
on each of these
buildings there's

46
01:51.690 --> 01:54.695 align:middle line:90%
two floors, a first
floor and a second floor.

47
01:54.695 --> 01:56.070 align:middle line:90%
Now, pretend for
a moment that we

48
01:56.070 --> 02:00.240 align:middle line:90%
have user A. User A, based
on this pink color here,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
01:56.070 --> 02:00.240 align:middle line:90%
have user A. User A, based
on this pink color here,

49
02:00.240 --> 02:02.220 align:middle line:90%
is in group A. And
on the second floor,

50
02:02.220 --> 02:05.550 align:middle line:90%
we'll say we have user B.
User B, based on this color,

51
02:05.550 --> 02:08.722 align:middle line:90%
is in group B. When user
A plugs their computer

52
02:08.722 --> 02:10.139 align:middle line:90%
into the network,
or maybe they're

53
02:10.139 --> 02:11.520 align:middle line:90%
using a wireless
device, whatever

54
02:11.520 --> 02:13.290 align:middle line:90%
the case is, they
plug into the network,

55
02:13.290 --> 02:15.120 align:middle line:90%
the first thing they
have to do is type

56
02:15.120 --> 02:17.020 align:middle line:84%
in a username and password.

57
02:17.020 --> 02:19.500 align:middle line:90%
This is going to be using
something called 802.1X,

58
02:19.500 --> 02:21.750 align:middle line:90%
which you're going to learn
about later in the course.

59
02:21.750 --> 02:23.400 align:middle line:90%
Just trust me on
this, this is how

60
02:23.400 --> 02:25.770 align:middle line:90%
they can access the network,
by typing in their username

61
02:25.770 --> 02:28.050 align:middle line:90%
and password the moment
they attempt to connect.

62
02:28.050 --> 02:30.570 align:middle line:90%
Cisco ISE handles
that authentication.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

62
02:28.050 --> 02:30.570 align:middle line:90%
Cisco ISE handles
that authentication.

63
02:30.570 --> 02:32.370 align:middle line:90%
It tells them, yes,
you're a valid user,

64
02:32.370 --> 02:34.200 align:middle line:90%
you're allowed to
access the network.

65
02:34.200 --> 02:38.070 align:middle line:90%
And it communicates this
information back to DNA Center.

66
02:38.070 --> 02:41.100 align:middle line:90%
And this is where stuff starts
to get really crazy but really

67
02:41.100 --> 02:41.670 align:middle line:84%
cool.

68
02:41.670 --> 02:46.110 align:middle line:90%
DNA Center can identify
which group they belong in.

69
02:46.110 --> 02:48.660 align:middle line:90%
And when it identifies what
group that they belong in,

70
02:48.660 --> 02:52.170 align:middle line:90%
it places them in
a virtual network.

71
02:52.170 --> 02:55.890 align:middle line:90%
A virtual network is a
fully functional network,

72
02:55.890 --> 02:58.410 align:middle line:90%
but it's completely
isolated from

73
02:58.410 --> 03:00.580 align:middle line:84%
all other virtual networks.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

73
02:58.410 --> 03:00.580 align:middle line:84%
all other virtual networks.

74
03:00.580 --> 03:03.000 align:middle line:90%
So when user B goes
to access the network,

75
03:03.000 --> 03:05.220 align:middle line:90%
too, maybe they plug in
to their computer here,

76
03:05.220 --> 03:07.080 align:middle line:84%
they get authenticated to ISE.

77
03:07.080 --> 03:09.960 align:middle line:90%
ISE communicates that
information back to DNA Center.

78
03:09.960 --> 03:12.390 align:middle line:90%
DNA Center says, great,
I'm going to place you

79
03:12.390 --> 03:15.150 align:middle line:84%
in a different virtual network.

80
03:15.150 --> 03:18.450 align:middle line:90%
Because these are completely
isolated networks,

81
03:18.450 --> 03:22.110 align:middle line:90%
these two users will not be
able to access each other.

82
03:22.110 --> 03:24.390 align:middle line:90%
Under the hood, this
is using technologies

83
03:24.390 --> 03:26.970 align:middle line:84%
that are really called VRFs.

84
03:26.970 --> 03:31.200 align:middle line:90%
And a VRF works kind of like a
VLAN, but it works at layer 3.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

84
03:26.970 --> 03:31.200 align:middle line:90%
And a VRF works kind of like a
VLAN, but it works at layer 3.

85
03:31.200 --> 03:34.800 align:middle line:90%
When you create a new VLAN, only
participants within that VLAN

86
03:34.800 --> 03:37.680 align:middle line:90%
can communicate to each
other, unless they get routed

87
03:37.680 --> 03:38.820 align:middle line:84%
from one VLAN to the next.

88
03:38.820 --> 03:41.710 align:middle line:90%
VRFs are exactly like
that, but it's for routing.

89
03:41.710 --> 03:44.340 align:middle line:90%
So only devices that
are within the same VRF

90
03:44.340 --> 03:45.870 align:middle line:84%
can communicate to each other.

91
03:45.870 --> 03:47.640 align:middle line:84%
But wait, there's more.

92
03:47.640 --> 03:50.430 align:middle line:90%
Outside of the fact that
from a security standpoint,

93
03:50.430 --> 03:53.160 align:middle line:90%
these devices are now
isolated, these users

94
03:53.160 --> 03:54.970 align:middle line:90%
are now isolated
from each other.

95
03:54.970 --> 03:57.960 align:middle line:90%
One of the cooler
things about SD-Access

96
03:57.960 --> 04:01.710 align:middle line:90%
is that it implements
other technologies
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

96
03:57.960 --> 04:01.710 align:middle line:90%
is that it implements
other technologies

97
04:01.710 --> 04:04.200 align:middle line:84%
to help this user's experience.

98
04:04.200 --> 04:08.490 align:middle line:90%
User A here can
now migrate or roam

99
04:08.490 --> 04:11.250 align:middle line:84%
through any part of the campus.

100
04:11.250 --> 04:15.090 align:middle line:90%
And it will maintain the
exact same IP address

101
04:15.090 --> 04:18.690 align:middle line:90%
and participate in the
exact same virtual network.

102
04:18.690 --> 04:21.450 align:middle line:90%
Under the hood, this is using
a combination of technologies

103
04:21.450 --> 04:23.970 align:middle line:84%
called LISP and VXLAN.

104
04:23.970 --> 04:26.310 align:middle line:90%
You don't need to dig too
much into those technologies.

105
04:26.310 --> 04:29.070 align:middle line:90%
You just have to trust that
this is what it's doing,

106
04:29.070 --> 04:32.090 align:middle line:90%
that user A can now migrate
anywhere throughout the campus
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

106
04:29.070 --> 04:32.090 align:middle line:90%
that user A can now migrate
anywhere throughout the campus

107
04:32.090 --> 04:34.890 align:middle line:90%
and maintain connectivity
and permissions

108
04:34.890 --> 04:36.840 align:middle line:84%
within the same virtual network.

109
04:36.840 --> 04:40.050 align:middle line:90%
And the same goes for user B.
User B can migrate anywhere

110
04:40.050 --> 04:42.990 align:middle line:90%
throughout the campus and
maintain the exact same IP

111
04:42.990 --> 04:44.880 align:middle line:90%
address, the exact
same connectivity

112
04:44.880 --> 04:46.180 align:middle line:84%
through the virtual network.

113
04:46.180 --> 04:47.940 align:middle line:90%
So coming from a
security standpoint,

114
04:47.940 --> 04:49.590 align:middle line:90%
understanding these
virtual networks

115
04:49.590 --> 04:52.240 align:middle line:90%
is actually a very big
and important thing to do.

116
04:52.240 --> 04:55.710 align:middle line:90%
So if this gigantic circle
represents our entire campus,

117
04:55.710 --> 04:58.530 align:middle line:90%
we've now set up that may
be divided down the middle,

118
04:58.530 --> 05:01.100 align:middle line:90%
we have a virtual
network here, and we also
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

118
04:58.530 --> 05:01.100 align:middle line:90%
we have a virtual
network here, and we also

119
05:01.100 --> 05:02.930 align:middle line:84%
have a virtual network here.

120
05:02.930 --> 05:06.110 align:middle line:90%
Segmenting our users,
separating our users

121
05:06.110 --> 05:08.660 align:middle line:90%
based on virtual
networks is something

122
05:08.660 --> 05:11.850 align:middle line:84%
called macro segmentation.

123
05:11.850 --> 05:16.040 align:middle line:90%
So really, under the hood,
when user A goes to log in,

124
05:16.040 --> 05:21.170 align:middle line:90%
ISE can identify, oh, that user
is part of the HR users group.

125
05:21.170 --> 05:26.210 align:middle line:90%
So HR users should be placed
in the HR virtual network.

126
05:26.210 --> 05:30.230 align:middle line:90%
Similarly, user B, over here,
may be an IT staff member.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

126
05:26.210 --> 05:30.230 align:middle line:90%
Similarly, user B, over here,
may be an IT staff member.

127
05:30.230 --> 05:33.680 align:middle line:90%
And IT staff members might not
need access to HR resources,

128
05:33.680 --> 05:35.030 align:middle line:84%
like other people's pay.

129
05:35.030 --> 05:37.790 align:middle line:90%
So when user B goes to
authenticate via ISE,

130
05:37.790 --> 05:39.620 align:middle line:90%
ISE will be able to
say, oh, this user

131
05:39.620 --> 05:42.140 align:middle line:90%
is in the IT users
group, so they

132
05:42.140 --> 05:44.930 align:middle line:90%
should be placed in
the IT virtual network.

133
05:44.930 --> 05:48.410 align:middle line:90%
This is the first way that we
implement macro segmentation.

134
05:48.410 --> 05:51.620 align:middle line:90%
And before I even get
into micro segmentation,

135
05:51.620 --> 05:54.800 align:middle line:90%
I want to show you what this
looks like within DNA Center

136
05:54.800 --> 05:57.480 align:middle line:90%
and how easy this is
to actually deploy.

137
05:57.480 --> 05:59.420 align:middle line:90%
So let me bring DNA
Center up real quick,

138
05:59.420 --> 06:01.082 align:middle line:84%
and I'll go into Policies.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

138
05:59.420 --> 06:01.082 align:middle line:84%
and I'll go into Policies.

139
06:01.082 --> 06:02.540 align:middle line:90%
And right here on
the very end, I'm

140
06:02.540 --> 06:03.990 align:middle line:84%
going to click Virtual Network.

141
06:03.990 --> 06:06.020 align:middle line:90%
So if I click on the HR
virtual network here,

142
06:06.020 --> 06:08.300 align:middle line:90%
do you see how easy
this can actually be?

143
06:08.300 --> 06:12.050 align:middle line:90%
Within ISE we create
users and groups.

144
06:12.050 --> 06:16.610 align:middle line:90%
DNA Center is able to sync our
group names directly from ISE.

145
06:16.610 --> 06:20.000 align:middle line:90%
And all we have to do is
create a new virtual network,

146
06:20.000 --> 06:23.670 align:middle line:90%
and drag and drop those users
over into the virtual network.

147
06:23.670 --> 06:24.260 align:middle line:84%
That's it.

148
06:24.260 --> 06:27.800 align:middle line:90%
The next time an HR manager goes
to authenticate to the network,

149
06:27.800 --> 06:31.670 align:middle line:90%
ISE will tell DNA Center this
user, who is an HR manager,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

149
06:27.800 --> 06:31.670 align:middle line:90%
ISE will tell DNA Center this
user, who is an HR manager,

150
06:31.670 --> 06:33.280 align:middle line:84%
has successfully authenticated.

151
06:33.280 --> 06:35.600 align:middle line:90%
And right here, they'll
just be dropped right

152
06:35.600 --> 06:37.260 align:middle line:84%
in the HR virtual network.

153
06:37.260 --> 06:39.410 align:middle line:90%
Same thing goes for
IT virtual network,

154
06:39.410 --> 06:42.050 align:middle line:90%
we have domain administrators
and help desk here.

155
06:42.050 --> 06:45.080 align:middle line:90%
These groups were synced
directly from Cisco ISE.

156
06:45.080 --> 06:47.240 align:middle line:90%
But it gets more
granular than that,

157
06:47.240 --> 06:50.930 align:middle line:90%
because within virtual networks,
we can have multiple groups,

158
06:50.930 --> 06:51.760 align:middle line:84%
like you just saw.

159
06:51.760 --> 06:55.670 align:middle line:90%
We saw we had domain admins,
and we saw we had help desk.

160
06:55.670 --> 06:57.590 align:middle line:90%
Here's a scenario
for you-- could you

161
06:57.590 --> 07:01.490 align:middle line:90%
see a situation where help
desk would ever need access
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

161
06:57.590 --> 07:01.490 align:middle line:90%
see a situation where help
desk would ever need access

162
07:01.490 --> 07:03.770 align:middle line:84%
to the payroll servers?

163
07:03.770 --> 07:04.700 align:middle line:84%
Probably not.

164
07:04.700 --> 07:06.290 align:middle line:90%
But I could see
a situation where

165
07:06.290 --> 07:09.530 align:middle line:90%
the domain admins would need
access to the payroll servers.

166
07:09.530 --> 07:12.560 align:middle line:90%
So now what we can do
within the virtual network,

167
07:12.560 --> 07:15.350 align:middle line:90%
we could create even
more granular policies.

168
07:15.350 --> 07:19.720 align:middle line:90%
Like the domain admins can
access the payroll servers

169
07:19.720 --> 07:21.710 align:middle line:84%
but help desk cannot.

170
07:21.710 --> 07:25.070 align:middle line:90%
This type of policy that exists
within the virtual network

171
07:25.070 --> 07:27.720 align:middle line:84%
is called micro segmentation.

172
07:27.720 --> 07:29.390 align:middle line:90%
So if I hide the
text one more time,

173
07:29.390 --> 07:31.280 align:middle line:84%
I can bring DNA Center back up.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

173
07:29.390 --> 07:31.280 align:middle line:84%
I can bring DNA Center back up.

174
07:31.280 --> 07:34.460 align:middle line:90%
And we can show you under the
group-based access control,

175
07:34.460 --> 07:37.940 align:middle line:90%
we can look at policies, and
deploying a micro segmentation

176
07:37.940 --> 07:40.940 align:middle line:90%
policy is as simple as
looking at the source

177
07:40.940 --> 07:43.550 align:middle line:90%
right here and the
destination here

178
07:43.550 --> 07:45.170 align:middle line:84%
and seeing how they match up.

179
07:45.170 --> 07:46.710 align:middle line:90%
You can see if I
hover over this,

180
07:46.710 --> 07:48.650 align:middle line:90%
this is how we can
implement a policy.

181
07:48.650 --> 07:52.250 align:middle line:90%
So should the domain
admins need access to, say,

182
07:52.250 --> 07:56.030 align:middle line:90%
the employees' resources or
people in the employees user

183
07:56.030 --> 07:58.460 align:middle line:90%
group, all I have to
do is click on the box

184
07:58.460 --> 08:01.760 align:middle line:90%
and set my policy here
by changing the contract.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

184
07:58.460 --> 08:01.760 align:middle line:90%
and set my policy here
by changing the contract.

185
08:01.760 --> 08:05.325 align:middle line:90%
We can see I can deny it, I
can deny and log it, permit it,

186
08:05.325 --> 08:06.200 align:middle line:84%
permit it and log it.

187
08:06.200 --> 08:07.700 align:middle line:90%
And I can do some
other things, too,

188
08:07.700 --> 08:11.460 align:middle line:90%
like changing DHCP or allowing
it via web access and so on.

189
08:11.460 --> 08:13.520 align:middle line:90%
So we can implement
macro segmentation

190
08:13.520 --> 08:15.980 align:middle line:90%
by defining which virtual
network should exist

191
08:15.980 --> 08:17.720 align:middle line:90%
and who should be
authenticated to that.

192
08:17.720 --> 08:20.300 align:middle line:90%
But then we can implement
micro segmentation

193
08:20.300 --> 08:22.790 align:middle line:90%
by choosing which
groups should be allowed

194
08:22.790 --> 08:26.060 align:middle line:90%
to access which groups
within a virtual network

195
08:26.060 --> 08:26.855 align:middle line:84%
in the first place.

196
08:26.855 --> 08:28.730 align:middle line:90%
So now, think about this
journey for a second

197
08:28.730 --> 08:31.490 align:middle line:90%
about what SD-Access and
what DNA Center can really
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

197
08:28.730 --> 08:31.490 align:middle line:90%
about what SD-Access and
what DNA Center can really

198
08:31.490 --> 08:32.970 align:middle line:84%
bring to the enterprise.

199
08:32.970 --> 08:35.120 align:middle line:90%
Now we have simplified
what it takes

200
08:35.120 --> 08:38.840 align:middle line:90%
to implement hundreds or
thousands of network devices

201
08:38.840 --> 08:42.650 align:middle line:90%
because all we really have to
do is define what our business

202
08:42.650 --> 08:43.850 align:middle line:84%
intent is.

203
08:43.850 --> 08:46.760 align:middle line:90%
We specify our users and who
they should have access to

204
08:46.760 --> 08:48.320 align:middle line:90%
and what they should
have access to.

205
08:48.320 --> 08:50.660 align:middle line:90%
And for the most
part, DNA Center

206
08:50.660 --> 08:53.630 align:middle line:90%
can go out and
automatically provision

207
08:53.630 --> 08:57.580 align:middle line:90%
all of the devices in the
network to behave in this way.

208
08:57.580 --> 08:59.990 align:middle line:90%
Our in-node devices,
our edge-node devices

209
08:59.990 --> 09:03.560 align:middle line:90%
that people plug into now
will communicate to Cisco ISE
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

209
08:59.990 --> 09:03.560 align:middle line:90%
that people plug into now
will communicate to Cisco ISE

210
09:03.560 --> 09:07.670 align:middle line:90%
and learn what virtual
networks and what VLANs should

211
09:07.670 --> 09:09.530 align:middle line:84%
this specific user be in.

212
09:09.530 --> 09:11.300 align:middle line:90%
And beyond that,
using technologies

213
09:11.300 --> 09:13.910 align:middle line:90%
like LISP and VXLAN,
our users can now

214
09:13.910 --> 09:16.010 align:middle line:90%
roam throughout
the entire campus

215
09:16.010 --> 09:18.560 align:middle line:90%
and maintain the
same connectivity

216
09:18.560 --> 09:20.870 align:middle line:90%
and the same
segmentation policies

217
09:20.870 --> 09:22.070 align:middle line:84%
that we've implemented.

218
09:22.070 --> 09:24.135 align:middle line:90%
So that is what
SD-Access does for us.

219
09:24.135 --> 09:25.760 align:middle line:90%
In the next Nugget,
we're going to talk

220
09:25.760 --> 09:29.332 align:middle line:90%
about how DNA Center really
deploys all of this magic.

221
09:29.332 --> 09:31.040 align:middle line:90%
I hope this has been
informative for you,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

221
09:29.332 --> 09:31.040 align:middle line:90%
I hope this has been
informative for you,

222
09:31.040 --> 09:33.700 align:middle line:90%
and I'd like to thank
you for viewing.