WEBVTT

1
00:00.000 --> 00:00.760 align:middle line:84%


2
00:00.760 --> 00:02.620 align:middle line:90%
In the previous
video, we took a look

3
00:02.620 --> 00:05.260 align:middle line:90%
at the concept of three
planes, the management

4
00:05.260 --> 00:07.510 align:middle line:90%
plane, the control plane,
and the data plane.

5
00:07.510 --> 00:09.890 align:middle line:90%
We looked at some
examples of each of those.

6
00:09.890 --> 00:12.730 align:middle line:90%
And now as we focus on hardening
our network infrastructure

7
00:12.730 --> 00:14.410 align:middle line:90%
devices, wouldn't
it be great if there

8
00:14.410 --> 00:17.140 align:middle line:90%
is some like big huge
guide that we could

9
00:17.140 --> 00:19.715 align:middle line:90%
use that could say, OK,
for each of these planes,

10
00:19.715 --> 00:21.340 align:middle line:90%
here are some of the
techniques that we

11
00:21.340 --> 00:22.780 align:middle line:84%
can use to harden our devices.

12
00:22.780 --> 00:24.160 align:middle line:84%
That would be awesome.

13
00:24.160 --> 00:27.760 align:middle line:90%
And the great news is Cisco has
provided us such a document.

14
00:27.760 --> 00:29.950 align:middle line:90%
I'd like to introduce
it to you right now.

15
00:29.950 --> 00:31.150 align:middle line:84%
And here is this document.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.950 --> 00:31.150 align:middle line:84%
And here is this document.

16
00:31.150 --> 00:35.080 align:middle line:84%
It is Document ID 13608.

17
00:35.080 --> 00:38.590 align:middle line:90%
As of this recording, it was
updated in September of 2020,

18
00:38.590 --> 00:39.680 align:middle line:84%
which is fantastic.

19
00:39.680 --> 00:43.780 align:middle line:90%
And it's called the Cisco Guide
to Harden Cisco iOS Devices.

20
00:43.780 --> 00:47.170 align:middle line:90%
Now in this document, there are
dozens and dozens and dozens

21
00:47.170 --> 00:49.000 align:middle line:90%
for each of the
planes of techniques

22
00:49.000 --> 00:51.410 align:middle line:90%
that we can use to harden
our Cisco iOS devices.

23
00:51.410 --> 00:53.560 align:middle line:90%
Now that's good
news and bad news.

24
00:53.560 --> 00:55.910 align:middle line:90%
It's good news because it can
make us aware of, oh yeah,

25
00:55.910 --> 00:58.160 align:middle line:90%
I might want to use this,
oh I might want to use that.

26
00:58.160 --> 01:00.535 align:middle line:90%
And it's bad news because if
we just throw everything in,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
00:58.160 --> 01:00.535 align:middle line:90%
And it's bad news because if
we just throw everything in,

27
01:00.535 --> 01:02.827 align:middle line:90%
it's very likely we're going
to lose some functionality

28
01:02.827 --> 01:03.860 align:middle line:84%
that we needed.

29
01:03.860 --> 01:06.350 align:middle line:90%
So it's a risk/reward
kind of behavior there.

30
01:06.350 --> 01:08.290 align:middle line:90%
So what I'd like to
do in this video is

31
01:08.290 --> 01:09.880 align:middle line:90%
talk with you about
this document,

32
01:09.880 --> 01:11.530 align:middle line:90%
talk with you about
how it's broken out

33
01:11.530 --> 01:13.180 align:middle line:84%
with each of the three planes.

34
01:13.180 --> 01:15.130 align:middle line:90%
And then as we
proceed through, we'll

35
01:15.130 --> 01:18.040 align:middle line:90%
take a closer look at the data
plane and the management plane

36
01:18.040 --> 01:20.198 align:middle line:90%
and the control plane
regarding this document,

37
01:20.198 --> 01:22.240 align:middle line:90%
with some highlights of
some of those features we

38
01:22.240 --> 01:25.030 align:middle line:90%
could use to harden
our Cisco iOS devices.

39
01:25.030 --> 01:26.530 align:middle line:90%
So I recommend, at
some point, doing

40
01:26.530 --> 01:28.360 align:middle line:90%
a search for that
document, downloading it,

41
01:28.360 --> 01:29.652 align:middle line:84%
and having it available to you.

42
01:29.652 --> 01:32.420 align:middle line:90%
Let me give you a high level
overview of its content.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:29.652 --> 01:32.420 align:middle line:90%
Let me give you a high level
overview of its content.

43
01:32.420 --> 01:34.390 align:middle line:90%
So it walks through
the management plane.

44
01:34.390 --> 01:36.010 align:middle line:90%
And just here is
dozens and dozens

45
01:36.010 --> 01:38.740 align:middle line:90%
of options for securing
and hardening devices

46
01:38.740 --> 01:40.590 align:middle line:84%
regarding the management plane.

47
01:40.590 --> 01:43.130 align:middle line:90%
And as we scroll down further,
it has the control plane

48
01:43.130 --> 01:45.022 align:middle line:84%
and it has the data plane.

49
01:45.022 --> 01:46.480 align:middle line:90%
So a couple of
highlights before we

50
01:46.480 --> 01:48.970 align:middle line:90%
dive into this document
taking a look at techniques.

51
01:48.970 --> 01:50.410 align:middle line:90%
Number one, not
every solution is

52
01:50.410 --> 01:52.000 align:middle line:90%
going to be perfect
for every network.

53
01:52.000 --> 01:55.900 align:middle line:90%
Two, we want to test out any
options we plan on deploying.

54
01:55.900 --> 01:57.820 align:middle line:90%
And if we are going to
implement a solution,

55
01:57.820 --> 02:00.490 align:middle line:90%
make sure we use change
control, where we've tested it,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

55
01:57.820 --> 02:00.490 align:middle line:90%
make sure we use change
control, where we've tested it,

56
02:00.490 --> 02:02.652 align:middle line:90%
got signed off on it,
we've implemented it,

57
02:02.652 --> 02:04.360 align:middle line:90%
and then it becomes
part of our standard.

58
02:04.360 --> 02:06.402 align:middle line:90%
And then as you implement
these security features

59
02:06.402 --> 02:08.919 align:middle line:90%
for hardening our network
devices in the future, as we

60
02:08.919 --> 02:10.360 align:middle line:90%
roll out new
switches and routers,

61
02:10.360 --> 02:12.568 align:middle line:90%
we can incorporate those
features because they've all

62
02:12.568 --> 02:15.910 align:middle line:90%
been tested and start off with
a much better security posture

63
02:15.910 --> 02:17.118 align:middle line:84%
than we would have otherwise.

64
02:17.118 --> 02:18.702 align:middle line:90%
All right, so in the
next video, we'll

65
02:18.702 --> 02:20.230 align:middle line:90%
start off regarding
this document

66
02:20.230 --> 02:22.570 align:middle line:90%
with some of the concepts
regarding hardening Cisco iOS

67
02:22.570 --> 02:25.330 align:middle line:90%
devices focused on
the management plane.

68
02:25.330 --> 02:27.380 align:middle line:90%
I'll see you there
in just a moment.

69
02:27.380 --> 02:29.650 align:middle line:90%
Meanwhile, I hope this has
been informative for you

70
02:29.650 --> 02:32.790 align:middle line:90%
and I'd like to thank
you for viewing.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

70
02:29.650 --> 02:32.790 align:middle line:90%
and I'd like to thank
you for viewing.