Hello, welcome to Cisco Secure Firewall integrations. My name is and I am a customer success specialist at Cisco. In this video, we will begin with a brief introduction to Cisco secure Firewall.00:06And its role within Cisco security ecosystem. We will understand the complexity of modern networks and how security needs are evolving. We will then cover integrations with other Cisco security products followed by 3rd party integrations. Lastly, we will conclude with a demonstration on how to integrate Cisco security.00:20Your firewall with Splunk. Do you have a firewall fit for today's challenges? Let's start by acknowledging the growing complexity of today's network environments. Traditional firewalls while essential are NO longer enough to protect against modern and sophisticated threats.00:38Today's networks are dynamic, distributed, and obtained hybrid, spanning on premises data centers, cloud environments, and remote users. As businesses adopt new technologies like IoT, cloud native applications, and zero trust architectures.00:56The attack surface grows exponentially. This requires a firewall that not only handles traditional perimeter security, but can also integrate deeply with other security technologies to address these complexities. Cisco secure Firewall is designed to tackle the challenges posed by today's complex networks.01:11Traditional firewall capabilities offering advanced threat protection, deep packet inspection, and a strong policy control. It provides full visibility into network traffic enabling real time monitoring and dynamic threat detection. It is equipped to handle today's dynamic networks, whether it is for internet edge.01:32Branch offices, remote access VPNs, data centers, cloud or virtual environments or even next gen IPS. Each of these use cases represents a critical part of network security where Cisco secure firewall.01:51Can be deployed to secure and monitor your traffic, prevent threats, and enforce policies. It is a key component of Cisco security architecture and integrates seamlessly with other security solutions in order to offer a more comprehensive protection strategy.02:06Let's remember that one of the basic components of Cisco secure Firewall deployment is its management. The FTD needs to be managed through local or centralized management platforms such as the FMC. This management solution provide a unified interface to configure, monitor, and analyze it.02:23Security policies and box.02:42When integrating FTD with other Cisco security products, the integration must be done through the manager. In this example, the FMC access the central project control. One of the key strengths of Cisco secure Firewall is its ability to integrate with other Cisco security.02:45Security products. Let's take a look at some of these integrations. For instance, it integrates with ICE for identity based policy enforcement. Umbrella, for DNS layer protection and visibility, Talos to leverage threat intelligence and provide early detection of new vulnerabilities and.03:02Techniques, Cisco threat rate for advanced malware analysis, secure workload for protecting workloads in the cloud and off premises, and to provide endpoint protection and respond to threats across the network. XDR for enhanced threat detection and automated response.03:23A secured network analytics to monitor network traffic for science of initial behavior or potential threats. These integrations work together enabling organizations to create a cohesive security system that shares information, automation responses, and straightens of overflow.03:42Beyond Cisco's own security products, Cisco secure Firewall also supports a variety of 3rd party integrations with further enhance your security operations. It integrates with 3rd party threat intelligence feeds to bring in external threat data for better detection and response with.04:02CM solutions to provide centralized log management and advanced analytics. Custom applications via API for organizations within performance or custom built security applications and active Directory and LDAP to facilitate integration with enterprise identity and access management system.04:20These 3rd party integrations help Cisco secure firewall complement and australian existing security architectures. This will ensure that you will have a flexible, adaptable, and robust security solution. The point of all of this is that the Cisco FMC is more than just a policy creator and event viewer.04:40The FMC can actively participate in the defense of your environment through automated actions and it can also integrate into other Cisco and 3rd party technologies increasing your overall effectiveness and bringing you maximum value on your security investment. Let's move to a practical demonstration.04:59We'll go over how to integrate Cisco secure Firewall with Splunk, which is a widely used CM platform. Let's us start on the FMC side.05:17Log into your FMC, go to integration, select all their integrations, go to the ES tumor tab at the top, and the 1st thing we need to do is to select the type of events that we want to share with Splunk.05:34Select all the checkboxes that apply and save your configuration. Now create a new client and for the host name, use the IP address of your Splunk server. You will need to define a password for the integration between secure Firewall and Splunk.05:48Save your configuration, and once that it's done, download the certificate. Perfect. Now let's go to Splunk. On the splunk side, we need to install the Cisco Security Cloud app.06:04It offers seamless integration for connecting your Cisco devices with Splunk, not only for secure firewall, but for duo, multi cloud defense and more. Once that you have it installed, open the app for the application set up. Look for secure firewall and click configure application.06:23Select the EA streamer tab and complete the information requested. Provide a unique name, and for the FMC host, use the IP address of your FMC. Keep the board that comes by default.06:42And add the certificate that we downloaded from the FMC. Use the same password that we define on the FMC as well and select the time range of the event data that you want to import.06:59Select the event types and save your configuration. Once that is done.07:15You can see your FMC listed at the top. Check for the status and see that it's connected. Now you can go to app analytics, look for secure firewall dashboard, and here you will see your intrusion events.07:33Malware events and connection events. By integrating Cisco secure Firewall with Splunk, you can take advantage of real time analysis, threat protection, and alerting capabilities. This concludes the presentation.07:49
