WEBVTT 1 00:00.000 --> 00:03.660 Another thing we really ought to do before we start adding on additional anti- 2 00:03.660 --> 00:07.500 malware policies is we should make sure we have basic connectivity in place. 3 00:07.500 --> 00:11.780 So let me go back to the vSphere client and let's go ahead and grab a virtual 4 00:11.780 --> 00:12.300 machine. 5 00:12.300 --> 00:17.560 So here I have a little Mint VM on the 1055 segment. Let's go ahead and launch 6 00:17.560 --> 00:18.300 a remote console. 7 00:18.300 --> 00:23.100 So here is that remote console for that little VM which is on the 1055 network. 8 00:23.100 --> 00:25.500 Let's bring up a command prompt just to verify that real quick. 9 00:25.500 --> 00:31.000 So we'll do an IF config and sure enough 1055 0151. Let's open up a browser. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 9 00:25.500 --> 00:31.000 So we'll do an IF config and sure enough 1055 0151. Let's open up a browser. 10 00:31.000 --> 00:32.600 Make sure we can get up to the internet. 11 00:32.600 --> 00:36.620 So let's just do a quick speed test or hopefully what turns out to be a quick 12 00:36.620 --> 00:37.300 speed test. 13 00:37.300 --> 00:38.700 All right. That looks good. 14 00:38.700 --> 00:43.840 And let's open up another tab and I also have this little metasplodable VM over 15 00:43.840 --> 00:45.500 on network 66. 16 00:45.500 --> 00:49.900 So I put a little shortcut here for it that should take us over to 1066 0.9. 17 00:49.900 --> 00:53.500 So we'll click on that and that looks good as well. 18 00:53.500 --> 00:55.300 All right. So we verified our connectivity. 19 00:55.300 --> 00:59.590 Let's go back to the NSX manager and go to the system tab and let's click on 20 00:59.590 --> 01:01.900 the NSX application platform WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 20 00:59.590 --> 01:01.900 the NSX application platform 21 01:01.900 --> 01:04.000 and check on our progress. 22 01:04.000 --> 01:08.390 So in the previous video, we went down under features and we clicked on the NSX 23 01:08.390 --> 01:09.500 malware prevention 24 01:09.500 --> 01:12.000 and that is still going also. 25 01:12.000 --> 01:15.600 It's telling us here that oftentimes customers will not only use the NSX 26 01:15.600 --> 01:16.700 malware prevention, 27 01:16.700 --> 01:21.280 but they'll also use additional features such as NSX intelligence as well as NS 28 01:21.280 --> 01:22.500 X network detection 29 01:22.500 --> 01:25.900 and response in conjunction with the NSX malware prevention. 30 01:25.900 --> 01:27.700 Oh, and it just finished. That's lucky. 31 01:27.700 --> 01:30.500 All right. So now this part is ready to go. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 31 01:27.700 --> 01:30.500 All right. So now this part is ready to go. 32 01:30.500 --> 01:35.000 Let's also take a look at the other areas inside the NSX manager where we need 33 01:35.000 --> 01:37.100 to enable the devices to support it. 34 01:37.100 --> 01:39.000 So right here is his partially up. 35 01:39.000 --> 01:41.700 So I'm going to give it a few more moments to complete. 36 01:41.700 --> 01:44.000 And while we do, we can go ahead and check the other parts. 37 01:44.000 --> 01:48.640 So for setting up and enabling a gateway to be able to use the malware 38 01:48.640 --> 01:49.600 prevention, 39 01:49.600 --> 01:51.700 we're going to go to the security tab right here. 40 01:51.700 --> 01:55.900 And then on the left, we're going to go down under policy management down to ID 41 01:55.900 --> 01:59.300 S slash IPS and malware prevention right there. 42 01:59.300 --> 02:02.400 So we'll click on IDS slash IPS and malware prevention. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 42 01:59.300 --> 02:02.400 So we'll click on IDS slash IPS and malware prevention. 43 02:02.400 --> 02:07.300 Now in a previous skill, we took a look at using the IDS slash IPS. 44 02:07.300 --> 02:08.800 And so we're not going to repeat that here. 45 02:08.800 --> 02:10.800 We're going to focus on the malware side of it. 46 02:10.800 --> 02:15.510 Now that we have the NSX application platform in place and we've enabled the 47 02:15.510 --> 02:16.700 malware prevention. 48 02:16.700 --> 02:19.880 So the first thing we're going to do right here within the IDS slash IPS and 49 02:19.880 --> 02:22.200 malware prevention is click on settings. 50 02:22.200 --> 02:26.370 And we're going to go down and we're going to specifically enable the malware 51 02:26.370 --> 02:29.600 prevention on those devices where we want to use it. 52 02:29.600 --> 02:35.140 So in the current version of NSX, the malware prevention can be implemented on WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 52 02:29.600 --> 02:35.140 So in the current version of NSX, the malware prevention can be implemented on 53 02:35.140 --> 02:36.600 tier one gateways. 54 02:36.600 --> 02:41.730 So if we scroll down, so this is for IDS slash IPS for standalone host, IDS 55 02:41.730 --> 02:45.900 slash IPS for various clusters where we have ESXI transport nodes. 56 02:45.900 --> 02:49.530 And if we scroll down, we should have the ability to see any tier one gateways 57 02:49.530 --> 02:50.300 right here. 58 02:50.300 --> 02:53.960 So here we're says activate gateways for north, south traffic here for tier one 59 02:53.960 --> 02:54.600 gateway. 60 02:54.600 --> 02:57.700 We're going to go ahead and enable the malware prevention. 61 02:57.700 --> 03:00.200 So we'll click on that little slider, click on yes. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 61 02:57.700 --> 03:00.200 So we'll click on that little slider, click on yes. 62 03:00.200 --> 03:03.790 And then also while we're at it right here, if we also wanted to use IDS slash 63 03:03.790 --> 03:06.100 IPS, we could activate it right here as well. 64 03:06.100 --> 03:09.790 Now the good news is that when I redeploy the edges for the benefit of this 65 03:09.790 --> 03:15.000 demonstration, I did deploy them as the extra large form factor. 66 03:15.000 --> 03:20.370 So they could support IDS slash IPS as well as malware prevention on the same 67 03:20.370 --> 03:21.300 gateway. 68 03:21.300 --> 03:25.610 So just to confirm, if we slid over to the vSphere client here for a moment and 69 03:25.610 --> 03:29.000 took a look at our edges, here's lab one edge one. 70 03:29.000 --> 03:35.820 And here on the summary page under the hardware, it has 16 CPUs and 64 gigs of WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 70 03:29.000 --> 03:35.820 And here on the summary page under the hardware, it has 16 CPUs and 64 gigs of 71 03:35.820 --> 03:39.600 RAM and lab one edge to is similarly configured. 72 03:39.600 --> 03:42.400 That's the extra large flavor for the deployment. 73 03:42.400 --> 03:46.000 And regarding how busy those devices are for go to monitor for each of the 74 03:46.000 --> 03:50.400 edges and go down to overview, we can see that the CPU utilization just went up 75 03:50.400 --> 03:51.000 a whole bunch. 76 03:51.000 --> 03:54.310 And that's very likely because we just enabled the feature for the malware 77 03:54.310 --> 03:55.100 prevention. 78 03:55.100 --> 03:59.670 So if we go over to lab one edge to again, a similar spike just a few moments 79 03:59.670 --> 04:02.500 ago, because we just enabled the malware prevention. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 79 03:59.670 --> 04:02.500 ago, because we just enabled the malware prevention. 80 04:02.500 --> 04:06.430 So back here in the end is a manager under the security tab and on the left 81 04:06.430 --> 04:09.200 selecting IDS slash IPS and malware prevention, 82 04:09.200 --> 04:13.490 clicking on settings, we've enabled our gateway, our tier one gateway to be 83 04:13.490 --> 04:15.300 able to use malware prevention. 84 04:15.300 --> 04:17.800 Now that does not mean that it is using it. 85 04:17.800 --> 04:20.200 It simply means that it's willing to use it. 86 04:20.200 --> 04:24.220 So our next logical step then would be to create a profile for malware 87 04:24.220 --> 04:28.600 prevention and then apply that profile as part of a firewall rule. 88 04:28.600 --> 04:32.800 And that my friend is exactly what you and I get to do in the very next video. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 88 04:28.600 --> 04:32.800 And that my friend is exactly what you and I get to do in the very next video. 89 04:32.800 --> 04:34.800 So I'll see you there in just a moment.