Cisco IQ | Resilient Infrastructure Services Series - Playbook Walkthrough

In this video, we look at the resilient infrastructure playbook in more detail. We will walk through the 1st two steps of our workflow and show you a remediation feature available with a standard and signature support tiers.00:07From the Cisco IQ homepage, click on the resilient infrastructure Playbook button. Here you see the playbook's readiness plan. In step one, we want to see the existing attack surface of our network. The 1st chart on the left shows us that of the 5100 assets that are in this account.00:20How many of those devices have telemetry enabled and how many devices do not? This is important because exposure analysis is only as good as the accuracy of the data we have about the active software version running on these assets. On the right hand side.00:38We can see the distribution of assets and the support contracts that cover them. We can easily see which devices have standard and signature support, which unlocks the more advanced capabilities for resilient infrastructure management. Step two is where we really focus on understanding our exposure to critical security advisories and then present a remote.00:53Mediation strategy to remove the risk from those devices.01:13Let's drill down into this step. As you can see here, we have a histogram showing the count of security advisories and their exposure to our devices. And for some devices, under certain conditions, we now have the capability to help automate and orchestrate the software upgrade process.01:17Let's look at this in more detail in the insights section below. You can see here in the 3rd bullet that if you have iOS XE devices, we have the ability to upgrade those devices via Cisco IQ. As long as the device has standard or signature support.01:35And the device is not being managed by a controller. If it is managed by a controller such as Catalyst Center, then you would go to Catalyst Center to do the software management. But if you have standalone iOS XE devices and they are on standard and signature support.01:50Cisco IQ can help with the software upgrade process. Note that the devices need to be on Cisco IQ link, a secure bridge from Cisco IQ to your on premises environment to have the software upgrade capability. If we click on view upgradable assets, it opens up a drawer on the right hand side where you.02:06Are presented with a list of iOS XE devices that are on standard and signature support that have exposure to security vulnerabilities that can be upgraded with this process.02:26You can see the list of the devices here, and if you click the review button for a device, it will open a full screen with the workflow to upgrade the software. This is broken down into four steps. Plan, prepare, execute, and verify.02:36This is a combination of a guided workflow and automation to help you through this process. In the plan and prepare stages, we will provide guided steps and best practices to provide the safest upgrade path to ensure success through this process.02:52Then in step three, the execute step, we can leverage automation to deploy software to the device, reboot the device, and have the device take the upgrade. You also have the option to make these upgrades manually. Finally, in the verify step.03:07We will ensure that our changes were made successfully or flag any issues that would require a rollback to our previous state. In other videos in this series, we will go into further detail about each of the four steps of the upgrade workflow. Thanks for watching.03:23