Users in Cisco Identity Intelligence

Hello, and thank you for watching this dual success capsule. Today we will cover the user's information and Cisco identity intelligence.00:05My name is Sheila Vida and I am a security customer success specialist. In this capsule, we will define what Cisco identity intelligence is, but focus on the user's related information captured in CII.00:16We will then do a demo of the different interfaces involved and then leave you with some tidbits as a summary. Cisco Identity Intelligence is a security platform which ingests identity information and then some from the different.00:33Data sources in your environment. It could be identity providers, your HR systems, and other applications that you have. You could also get information from threat feeds or other static sources like text files.00:51All these information are then analyzed and sent into our series of checks, which will highlight for you different posture or posture discrepancies or threats that might be existing in your environment. Based from this information, you could link to your.01:07Either Cisco security solutions or your notification systems for someone to take action on those insights.01:27At the heart of CII is what's called an identity graph, which is what brings order to the chaos. With all the information that it has gathered on your users and your devices and your applications and services, it will find the connection and relationships between them and then surface opportunity.01:37Opportunities for improving your posture or highlighting threats that might be existing in your environment for you to clean them up.01:57There is a separate success capsule around the introduction to CIA and all the different components that it has, and you recommend that you check this out. In this particular capsule, we will be focusing on the user's information and the page that we're looking at here that we'll see more of in the demo.02:08It's the user's information page which has the data on the different elements.02:29And all the connections for the users in your CIA setup. Now let's go to that demo. When you 1st log in to CIAI, you will be presented with the dashboard for the user posture in your environment, and we will.02:34Recommend checking the human identity posture score that you see here because it gives you actionable steps to.02:54Instantly make your posture better. The user trust level is also another page that we recommend checking, and we will talk about that in a little bit. You'll have more widgets here around the different user information around your status, and you can configure the widgets.03:01So that.03:21Which ones is useful for you? You could also add a widget based on a save filter that you might have in the user's page. Now let's go to the user's information page, and this is what that page looks like. These are the filters that we have.03:22Described earlier for you to be able to customize.03:42User information that you want displayed. And then these filters could be saved and as we've discussed earlier, could be used as a separate widget, so you don't need so you can get back to it later. So let's take a look at this particular user.03:46And this is what's called a user three 60 page, which gives you a three 60 view of everything associated with that particular user from what identity sources they're part of, what attributes were imported from that.04:05IDP source and information around the trust level which I mentioned earlier and the computer trust level and what attributed to it having that particular value.04:21Everything here is hyperlinked. So from this page, you could click any of the insights shared and you could do a deep dive on what that actually means. So, e.g., let's take this activity page.04:37Which shows you the different steps that this user has done throughout this defined time frame. We'll also show you the information on the networks that they have accessed and are associated with, the devices that are linked to them and the applications that they have accessed on the.04:54Timeframe.05:14Could also see the groups that you're part of and the roles that they hold on those groups and show you the checks which are failing and deep dive on those. So e.g., this one shows you that this user was tagged to have used a week MFA to log in.05:16And from there see what the events associated with that check are.05:36Then from here, you could either have someone check further on what that particular event did or from the interface itself log out the user. This will bring us back to the dashboard page.05:40Which is the 1st page that we recommend you check out just to give a holistic view to get the holistic view of the user posture in your environment and start analyzing.06:00To sum this capsule up, we will leave you with three tidbits. 1st one is, as we have seen, utilize the user's three 60 view for centralized insights on a particular user entity. And from there, as we saw, you can see the networks, the devices and the applications that they are associated.06:15With and if a particular check highlights something that.06:35Requires you to take a deeper look at, you can do that from within user three 60 as well. The next one is to utilize the filters for you to customize your analysis. That way if you've defined a particular group of users and doing analysis on them and you save it, you could get back to it.06:39At a later time or you could also create a dedicated widget for it in the user's dashboard.06:59Lastly, let the trust levels guide you. The user trust levels calculated by CII is a combination of all the insights that it gathered from all your different identity sources. And this gives you an opportunity to prioritize how to manage.07:06And make healthier the identity security posture for your environment. Thank you for joining us for this duo.07:25