WEBVTT

1
00:00.000 --> 00:01.800
Hello and welcome.

2
00:01.800 --> 00:03.760
My name is Keith Barker.

3
00:03.760 --> 00:06.240
In previous skills, we've taken a look at using

4
00:06.240 --> 00:07.920
both the distributed firewall with

5
00:07.920 --> 00:10.000
its policies and rules as well as

6
00:10.000 --> 00:11.440
the gateway firewall with

7
00:11.440 --> 00:13.360
its policies and rules to control

8
00:13.360 --> 00:15.640
the flow of traffic through NSX.

9
00:15.640 --> 00:18.240
In this skill, we're going to take that same concept of

10
00:18.240 --> 00:19.840
having security policy rules or

11
00:19.840 --> 00:22.680
going to kick it up a notch by being able to include as

12
00:22.680 --> 00:25.560
the source in one of our rules to specify that if

13
00:25.560 --> 00:27.280
this user is a member of

14
00:27.280 --> 00:29.720
effectively an active directory group,

15
00:29.720 --> 00:31.600
then go ahead and permit or
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.720 --> 00:31.600
then go ahead and permit or

16
00:31.600 --> 00:34.080
deny the traffic based on what we set up in the rule.

17
00:34.080 --> 00:36.520
This ability to include information from

18
00:36.520 --> 00:40.280
active directory is known as identity-based firewall,

19
00:40.280 --> 00:43.040
or as its friends call it IDFW.

20
00:43.040 --> 00:45.240
So that ability to use in AD,

21
00:45.240 --> 00:47.240
the group membership information as part of

22
00:47.240 --> 00:49.920
our security rules is a fantastic feature.

23
00:49.920 --> 00:53.000
So join me in this skill as we take a look at the logic,

24
00:53.000 --> 00:54.520
planning out, configuration,

25
00:54.520 --> 00:57.920
and verification of using identity-based firewalls,

26
00:57.920 --> 01:00.000
and active directory group membership as
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
01:00.000 --> 01:02.040
a condition for those rules.

28
01:02.040 --> 01:05.240
Also you in the next video is we take a big picture look at

29
01:05.240 --> 01:07.560
putting this all together.