WEBVTT 1 00:00.000 --> 00:08.880 So let's wrap up here with an overview of the firewall policies on Cisco's 2 00:08.880 --> 00:10.240 umbrella. 3 00:10.240 --> 00:14.910 Now just from seeing the interface so far, clearly there's a whole lot of other 4 00:14.910 --> 00:15.440 things 5 00:15.440 --> 00:19.120 in umbrella that we didn't take the opportunity to look at. 6 00:19.120 --> 00:23.330 And that's because we don't have to be experts on umbrella just to take a look 7 00:23.330 --> 00:24.000 at its different 8 00:24.000 --> 00:25.000 features. 9 00:25.000 --> 00:29.360 But we should at least be fairly familiar with it and have a good idea how to 10 00:29.360 --> 00:30.040 navigate WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 10 00:29.360 --> 00:30.040 navigate 11 00:30.040 --> 00:31.600 around the interface. 12 00:31.600 --> 00:35.910 So now that you've seen how to get into umbrella, you can take the opportunity 13 00:35.910 --> 00:36.560 to take a look 14 00:36.560 --> 00:41.020 around the rest of the GUI and learn where various settings and things are that 15 00:41.020 --> 00:41.320 you can 16 00:41.320 --> 00:42.520 configure. 17 00:42.520 --> 00:48.550 But for now, let's just go ahead and jump in and take a look at those firewall 18 00:48.550 --> 00:49.680 policies. 19 00:49.680 --> 00:53.940 So one more time here, we'll start off on the overview page and we'll go right 20 00:53.940 --> 00:54.480 over here 21 00:54.480 --> 00:56.080 to policies. 22 00:56.080 --> 01:00.360 But this time of course, we're going to go to firewall policy. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 22 00:56.080 --> 01:00.360 But this time of course, we're going to go to firewall policy. 23 01:00.360 --> 01:04.480 Now this really isn't going to be all that different from most other 24 01:04.480 --> 01:06.800 traditional firewalls. 25 01:06.800 --> 01:11.520 So the first thing to take a look at is up here at the top, we have a button 26 01:11.520 --> 01:12.520 for filters. 27 01:12.520 --> 01:16.480 And if we click on this, we can put in certain filters here. 28 01:16.480 --> 01:20.840 You can see like blocked and allowed, whether logging is enabled or disabled, 29 01:20.840 --> 01:21.680 what protocol 30 01:21.680 --> 01:27.220 it is, whether the rule itself is enabled or disabled, and we can filter our 31 01:27.220 --> 01:28.040 rule list 32 01:28.040 --> 01:30.080 based on these criteria. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 32 01:28.040 --> 01:30.080 based on these criteria. 33 01:30.080 --> 01:33.560 Now there's not that many rules here in this particular demonstration. 34 01:33.560 --> 01:37.400 So we don't really need to filter them, but that is an option. 35 01:37.400 --> 01:40.840 Then of course, we have the rules themselves. 36 01:40.840 --> 01:45.830 And one thing you can do, notice the very first column is we can use these 37 01:45.830 --> 01:46.680 checkboxes 38 01:46.680 --> 01:52.300 to select certain rules, or we can use this checkbox at the top to select all 39 01:52.300 --> 01:53.400 the rules. 40 01:53.400 --> 01:58.220 When we do that, we get some rules up here, sort of towards the top right, 41 01:58.220 --> 01:58.720 where we can 42 01:58.720 --> 02:03.920 now export these rules, enable all of them, disable all of them. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 42 01:58.720 --> 02:03.920 now export these rules, enable all of them, disable all of them. 43 02:03.920 --> 02:07.290 And if we click on the action menu, there's a few more choices here, where we 44 02:07.290 --> 02:07.920 can either 45 02:07.920 --> 02:13.620 enable or disable logging, allow or block for all of them, or we can delete 46 02:13.620 --> 02:14.360 them. 47 02:14.360 --> 02:17.760 I don't think we should probably delete all the rules here, but it would be fun 48 02:17.760 --> 02:19.320 to try. 49 02:19.320 --> 02:21.840 So let's go ahead and delete all their rules. 50 02:21.840 --> 02:27.720 It says that you sure you want to, we'll say yes, and we'll hit delete. 51 02:27.720 --> 02:30.440 Notice we have a message cannot delete rules. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 51 02:27.720 --> 02:30.440 Notice we have a message cannot delete rules. 52 02:30.440 --> 02:31.440 Try again. 53 02:31.440 --> 02:34.720 Obviously, trying again isn't going to make any difference. 54 02:34.720 --> 02:36.120 We still can't do it. 55 02:36.120 --> 02:38.520 So we'll just dismiss that message. 56 02:38.520 --> 02:42.860 But the main thing I wanted to show you is it does give you a warning before it 57 02:42.860 --> 02:43.160 just 58 02:43.160 --> 02:46.840 lets you delete all your firewall rules. 59 02:46.840 --> 02:50.960 Now as far as the rules themselves, a couple of things we can do. 60 02:50.960 --> 02:56.390 First, if we just look across the line here, we can see that each rule has a 61 02:56.390 --> 02:57.520 priority. 62 02:57.520 --> 03:00.120 We can see that each rule has a name. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 62 02:57.520 --> 03:00.120 We can see that each rule has a name. 63 03:00.120 --> 03:03.240 And if we wanted to, there's actually a little option here. 64 03:03.240 --> 03:07.320 We can click to edit the name right here on the line. 65 03:07.320 --> 03:11.640 Of course, we can't do it, but that's an option for renaming it. 66 03:11.640 --> 03:14.800 The rest of these you'll notice you can't change right here. 67 03:14.800 --> 03:16.880 This is just for information. 68 03:16.880 --> 03:21.370 But we can see if this rule is enabled, if it's going to block or allow, what 69 03:21.370 --> 03:22.240 protocol, 70 03:22.240 --> 03:27.300 what ports, if any, are set, the destination criteria, the hit count for this 71 03:27.300 --> 03:28.160 particular 72 03:28.160 --> 03:32.840 rule, and the last time the rule was actually hit. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 72 03:28.160 --> 03:32.840 rule, and the last time the rule was actually hit. 73 03:32.840 --> 03:36.160 So this is basically just informational. 74 03:36.160 --> 03:39.990 If we want to actually do anything, we have to click on the actions menu over 75 03:39.990 --> 03:40.520 here. 76 03:40.520 --> 03:46.250 This is where we could edit, duplicate, or there's actually shortcuts here to 77 03:46.250 --> 03:46.680 enable 78 03:46.680 --> 03:52.550 or disable the rule, turn on or off logging, or change it from blocking to 79 03:52.550 --> 03:53.640 allowing. 80 03:53.640 --> 03:56.320 Of course, there's also a delete option. 81 03:56.320 --> 04:02.080 Now the reason I called these shortcuts is if we go into edit, you'll see that WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 81 03:56.320 --> 04:02.080 Now the reason I called these shortcuts is if we go into edit, you'll see that 82 04:02.080 --> 04:02.480 a lot 83 04:02.480 --> 04:04.520 of those things are right in here. 84 04:04.520 --> 04:08.090 So for one thing, we can of course change the rule name here, which we already 85 04:08.090 --> 04:08.560 saw we 86 04:08.560 --> 04:11.480 could do back on the actual list. 87 04:11.480 --> 04:13.680 Here you can change the priority order. 88 04:13.680 --> 04:18.320 If you didn't notice, this one does not have a drag and drop option like we did 89 04:18.320 --> 04:18.720 in our 90 04:18.720 --> 04:20.400 web policy. 91 04:20.400 --> 04:22.120 There's of course a description. 92 04:22.120 --> 04:27.900 And here under the rule action, we could change this from block to allow. 93 04:27.900 --> 04:29.900 We could change the protocols. 94 04:29.900 --> 04:35.280 We can change the sources, the CIDR IP addresses, the port numbers, same thing WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 94 04:29.900 --> 04:35.280 We can change the sources, the CIDR IP addresses, the port numbers, same thing 95 04:35.280 --> 04:37.400 with the destinations, 96 04:37.400 --> 04:42.240 applications, we can put a schedule on here just like we could before. 97 04:42.240 --> 04:46.760 We can change the time interval for the hit counter and we can enable or 98 04:46.760 --> 04:48.200 disable logging. 99 04:48.200 --> 04:52.280 So as you can see the things we had on that shortcut menu, we can also do if we 100 04:52.280 --> 04:52.920 actually 101 04:52.920 --> 04:54.440 edit the rule. 102 04:54.440 --> 04:59.850 But again, as you can see, this is fairly standard for almost every firewall 103 04:59.850 --> 05:00.480 out there WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 103 04:59.850 --> 05:00.480 out there 104 05:00.480 --> 05:02.640 and how the rules look. 105 05:02.640 --> 05:06.000 So let's go ahead and cancel this since we can't save it. 106 05:06.000 --> 05:12.270 So now we're just back to the list of rules active on this system for the 107 05:12.270 --> 05:12.760 firewall. 108 05:12.760 --> 05:19.120 So in this video, we took a look at the firewall policies here in umbrella. 109 05:19.120 --> 05:24.160 And as we saw, they're fairly standard for most firewalls out there on the 110 05:24.160 --> 05:25.000 market. 111 05:25.000 --> 05:28.960 It's a list of things that are permitted to denied at certain times. 112 05:28.960 --> 05:34.310 We can of course enable logging, set up sources, destinations, port numbers, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 112 05:28.960 --> 05:34.310 We can of course enable logging, set up sources, destinations, port numbers, 113 05:34.310 --> 05:35.760 protocol types, 114 05:35.760 --> 05:37.160 and so on. 115 05:37.160 --> 05:42.100 Now as I said during the introduction, there's clearly a lot of things here in 116 05:42.100 --> 05:42.800 umbrella 117 05:42.800 --> 05:44.600 that we didn't look at. 118 05:44.600 --> 05:48.610 This was just meant to be an overview of the umbrella product and getting a 119 05:48.610 --> 05:49.280 little bit 120 05:49.280 --> 05:52.000 used to the graphical interface. 121 05:52.000 --> 05:55.040 That's what we're going to do in the challenge as well. 122 05:55.040 --> 05:57.940 We're going to put some questions in there that you're going to have to 123 05:57.940 --> 05:58.560 navigate this 124 05:58.560 --> 06:01.520 interface to find the answers to. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 124 05:58.560 --> 06:01.520 interface to find the answers to. 125 06:01.520 --> 06:06.090 So go ahead and give that a try and I'll see you in the solution on the other 126 06:06.090 --> 06:06.720 side.