Cisco IQ Fundamentals: Turning Insights into Action

Hi all, thank you for being here today for our last session of our October series for the Cisco IQ Fundamentals.00:10Today we will be talking about Cisco IQ in action. I, my name is Jackie. I will be your presenter today. Not working alone. I'm joined by three amazing customer success specialists. Mike, Palani and Peter will be here to help out answer your questions in the Q and A.00:18Speaking of which Q and A today will be conducted via Slido, so please use the QR code here or via the passcode. I'll keep that up for a second while I go over something quick. We do not do Q and A at the end, so if you have questions, please make sure to post them in the Q and A throughout this.00:37Session so our panelists have time to answer them before the end of session. If your question does not get answered today or you have any additional questions, at the end of the presentation, we'll go over where you can post those on our community page.00:57Some quick housekeeping like always. All microphones are muted and like I mentioned before, we are using Slido for our Q and A If you have any technical issues you're facing, please use the chat feature to speak to our panelists, but please again guide your questions to that Q and A so we can have those documented. Closed captioning is available if that is.01:13Something you need. In addition, we do have microphones off, hands aren't gonna be able to be raised, but if you have any strong feelings about things we're showing today, you have the ability to give some reactions.01:33Not sure if you saw when you joined, but Mike has started the recording for this session. Speaking of which we have our previously recorded sessions available for you on cisco's community site. After this presentation is over, you will be redirected to that site. But again, I think Mike's also going to post the link to our previous sessions in the chat.01:46Most importantly, again, this is the last session in this series, whether you've been with us since the beginning or this is your 1st session, either way, we want to be able to respond.02:06We want you to be able to provide feedback, and I see that we still need the Slido password, so I'll just have a panelist post that in the chat for us. But on that topic, please give us feedback. That's how we better these sessions. What do you wanna see?02:18How do you want in terms of presenters? What do you want in terms of Q and A? Let's make sure we get your feedback heard. These sessions are for you. Speaking of previous sessions, we do, this is the last session in our October series. We started 6 October with Cisco IQ with features in.02:34Capabilities, then moved into contracts and connectors and deploying Cisco IQ link. Just to reiterate, today's session is focusing on turning Cisco IQ insights into action. So based off of everything we've learned so far, how do we actually take the insights in Cisco IQ and turn them into actionable insights that can.02:54Can actually help us with our day to day to really.03:14Help simplify the processes in our jobs. We also do have a November series coming up. We'll go over that at the end of the presentation. But again, if you're interested in rewatching any of these previous sessions, please go to the link Mike just posted in the chat. We do have these recorded. They are excellent sessions that cover everything from the basics.03:17VIQ, to how to get data ingested, even to how to get telemetry connected.03:37With that, we mentioned today's session is gonna focus on how do we actually take what's in Cisco IQ now that we have the general overview, it's populated, how do we take that information and apply it to our organization?03:45So, 1st and foremost, we'll go over a brief overview. Some of you have been with us since the beginning of the series. Some of you might be joining us for the 1st time. We want to make sure everyone's come up to speed on Cisco IQ. So whether it's your 3rd time hearing this overview or just your 1st.03:59Bear with us and then we'll get right to the next agenda item, which is a little scenario we call the IT managers box. We're gonna look at some crafted emails we've created. Can everyone still panelists, can you hear me ok still?04:15We got you Jackie. Okay perfect. The IT manager's inbox, we're gonna look at some potential use cases that you might face on a day to day. Finally, we'll wrap up with those resources I've mentioned earlier. So 1st thing we're gonna go over is a quick Cisco IQ overview just to make sure.04:32We're all cut up to speed.04:52You will hear me, Mike, anyone giving this presentation say how much we love this slide. So, on the left hand side, we all know the pain of siloed data and how that affects your day to day jobs. Whether you're an IT manager, a CISO, VP of IT, you are dealing with a lot of documentation.04:56A lot of insights.05:15All across the board and they're all located in different areas across your company, whether that's compliance checks, spreadsheets, certification expiration tracking, security advisories, field notices. In the past, these have all been either dealt with in silos within your organization. They've been across multiple data sources, whether that's on premise.05:17Our Cisco's website, making it hard for you to actually get the insights you need to.05:37And get the insights you need to actually do your jobs effectively. So what Cisco IQ does, it really consolidates this noise and puts it in one place for you, and that's gonna be in Cisco IQ. So Cisco IQ is going to be the way you interact with Cisco from a support services perspective. With that, what we're looking at is think about finding.05:43In all of Cisco's 40 years of experience and expertise in one place. With your own data and your own instances and your own estate, now with it, now being applied and in the same place as that 40 years of expertise. What that leads to is allowing you to have a complete landscape clarity, but at the same time, again.06:03How we have that Cisco information there allows for proactive resiliency, rapid resolution, being able to have access to TAC with that.06:23Overview of your insights right there. Contextualized professional services to help digest the information further. And the best part about all of this, it's included with your support contracts. So whether you have a basic standard or signature contract, you have access to Cisco IQ.06:32If you have not already, Cisco IQ is available for you today. You just go to IQ.cisco.com, log in with your cco ID, and you can create your account. If your organization already has an account, work with your organization to get added either as a viewer or an administrator.06:49So I talked about how we've taken all the siloed data, all of these insights that matter to you, put them all in one interface for you to access easily and derive those actionable insights. But what does this actually do? What's the actual benefit to you? So I mentioned earlier, complete landscape clarity. You see everything in your environment without.07:11Gaps. I'll talk more about, you know, the AI threats we're facing in a minute, but, what something you've heard us say a lot throughout the series is you can't protect what you can't see. I'm pretty sure it's one of our favorite taglines here. So you can't protect what you can't see. How can we make sure we can see everything within your install base that's both covered?07:31And uncovered to make sure that there are NO gaps, there's NO LDOS that's left open. There's NO security advisories that are critical that need to be patched immediately.07:51That also leads into the next idea, proactive resilience. Cratch, crash problems before the business feels it. In an era where AI threats are, you know, causing or being able to be exploited at a faster pace than ever, how do we make sure that you can keep up with the speed of bad actors?08:00Finally rapid resolution. So collapse resolution time from hours to minutes. Within Cisco IQ, again, we have the ability to open TAC cases, manage rmas, look at security advisories, and best practices. With that, we now have the context of your devices there. Being able to use that context within our.08:19Cases within our tech agents. So again, now we have that complete landscape clarity.08:39We're Applying Cisco's best practices and visibility for proactive resilience, and where that all leads to rapid resolution, helping you create more uptime for you when it matters the most. I mentioned earlier that we have, you know, three tiers of support. Cisco IQ is.08:44It's available for you today. Again, IQ.cisco.com is where you'll be able to log in and create your account. The features within Cisco IQ and what you have access to are dictated by your support entitlement. Now, you don't have to just have one of these tiers. You can have a mixed bag, some assets on basics, some on standard, some on signature.09:04But what we're looking at here is the IQ features will really reflect what's at the core of these support options. E.g., basic will have more reactive support break fix. Likewise in IQ, the features there will be more reactive. You'll get insights into LDOS, your security advisories, be able to have that visibility as well as managing.09:24Cases. Meanwhile with standard, we move from reactive to proactive. How do we actually pro give you prioritized AI insights, fast solution support for successful modern operations? An IQ this looks like access to our best practice assessments, which will be used at some of our examples.09:44A signature we move from reactive to proactive to how do we give you expert led support. And this includes remediation options, recommendations, and the deepest insights we have available. So, with that, we're gonna move into the manager's IT box, but I will say as we go.10:05To the demo, I will make it very clear.10:24Which features require what level of support to have in order to get access to? So you have full transparency on what you have available based on your entitlement. Okay, now my favorite part about this, it's actually one of my favorite parts of this series, the manage IT managers inbox.10:27So again, we're gonna look at at some scenarios Mike made up here and gonna see how even you on a day to day basis can take your tasks or take, you know, tasks assigned to you and really use Cisco IQ to help you do them quicker.10:47So our 1st person here is Jordan. Jordan is a CISO, and what we can see is they just saw a piece of advisory coming containing the, you know, the, the CVE. What does our exposure look like and what devices are at risk?11:03So what we're going to do now is we're actually going to move over to Cisco IQ and we're actually gonna be able to look up the CVE and, you know, really help Jordan get to the bottom of this, help Jordan get to the bottom of this and we're gonna move over to IQ now to do that.11:21So, this is the Cisco IQ demo environment. So with that all the data you're going to see is Cisco from cisco's lab environment. Right now I do have a viewer view and rather than admin, so if you are an administrator, you're probably going to see a bit more tasks along this getting started line here.11:37Some quick navigation just as a refresher. Up here I do have the help button which has some amazing resources for you to utilize. Everything from the getting started guide, learning videos, which one of our principal architects did, which walks through any possible thing you'd want to do in IQ.11:58As well as our supported product list, offer disclosure, which goes over data and our AI transparency technical note. Now, let's get back to Jordan's request. So in order to learn more about this particular CVE, we're actually gonna go to home, and we're gonna go to assessments.12:16Assessments is gonna look both at reactive and proactive security. Security advisories being more of one of the reactive. We're to click in here and we see a bit more about our security advisories. Security advisories and field notices are available for all products, NO matter what tier of support you're on.12:35Just because at the foundational level, it's something key to your security and making sure everything operates well within your environment. So what we're gonna do now is actually look up that CVE Jordan sent to us. We're gonna copy and paste it here.12:54And what Cisco IQ does, especially with our AIs, it's, it's contextually aware, which is great. So e.g., I've entered in the CVE, I can see the the security advisory here, but I also have these AI insights generated for me. So these AI insights at the beginning right here will just give you a summary.13:11We have all the information you're viewing.13:31But it's context aware. So it's aware now of the CVE I've entered. E.g., now it shows that this is only providing the AI insight for this particular CVE. It says based on the analysis, we see there are 988 affected assets for this. We can click view here to review.13:32Advisory promptly to assess exposure and we can review more information regarding what's the assessment, what's the severity, but we can click view on any of these really.13:53What I'm gonna do, it's gonna provide me with a bit more information and also be something I can send to Jordan, is I'm gonna click full analysis here. And what this is going to do is give me that insight information, but now in a format that I can either download as a PDF.14:04Customize or save to my report section within IQ. And I'll go over this report section in IQ via save in a later example. But what we're going to do now is actually customize this. So I want to send this to Jordan, but I want more information around risk remediation.14:22So I'm actually gonna hit customize. Oh, goodness. Can everyone see my screen still? I'm guessing. Okay. So what we're actually going to do now is go over and actually have a prompt I wanna enter in here.14:39I actually want to have a bulleted executive summary on exposure risk, and remediation. I'm gonna enter that in and it's generating my customization. So while that loads, I can either customize based off a free text prompt like I just did or there's other prompts I can explore. Prompt surrounding enrichment.14:56Oh. Which looks like that's still loading for me right now. But what we could see is the bulleted executive list is done. I can review all changes here. It says it's added that executive summary list I wanted. I'm able to scroll down and I can see that here. I'm gonna click keep.15:16And now I have my customer report ready for Jordan, which doesn't, which doesn't only go over the security advisory, the exposure, as well as the assets affected, but now it has this custom executive summary, which will help give Jordan more context about this advisory.15:34So what I can do is I'll save it to my reports or I could download it as a PDF to send over to him. The other option we have for this is just to click within here to the actual advisory. This will give me more information about the assessment. What I love is these are written in very simple language, very easy to.15:50Understand just what's the gist? How is this affecting my actual environment?16:10We can click here to view the advisory on Cisco's website. So if we need to know the potential product workarounds, replacement products, if that's applicable, we'll be able to click that here. But we'll also be able to see all the different assets that are affected. If all Jordan wants to say just a list of those affected assets, what we can do is export.16:14With this. And we can have the ability to export this either as a CSV or an Excel sheet. With that I can choose which columns I want in my report.16:34Right here. I also have the ability to filter these options. So say if I need to filter by report, a certain product type, say if Jordan's only really working with one sort of product family at the organization, I can change it by that. Say if he needs it by one location.16:44A lot of different options to customize this. Speaking of which, within all tables of IQ, they're very easy to customize to your liking. E.g., let's say IP address matters more than product ID, can drag and drop there, have it fixed. I also have the settings option here, which will allow me to select more column settings.17:00If I want. Say if there's things that matter more to me like product family or location like I mentioned, we can add those in.17:20So that's how Jordan potentially could, you know, walk through this process. And if we're looking at what this means, and again, we'll send out this deck so you have all these steps, is this is what we did to help. We went to the assessments, went to the security advisories and was able to search for the particular CVE.17:30From there we were able to use the AI insights to generate a full custom report that included the insights that we needed most. The other options included, again, downloading an Excel sheet that we can then reference and do our own analysis from or going to Cisco's website to read more about the advisory.17:50And I'd also just like to mention as I moved into our next example that all these examples are not restrictive. There's multiple different ways to solve the issues we're mentioning. We're just walking you through a few examples that could potentially help you get started. So next up we have Priya. She is a compliance auditor, and I'm sure this is going to be.18:10Relevant to some of you right now, but Priya says I'm hearing a lot about PQC regulatory compliance. Does that affect us? And if so, do we have a plan?18:30And by the way, what is PQC? And that's a great question. Some of you probably also have the same question, which is why we're actually gonna give some background context to this particular use case before we hop in. So, what is PQCC and what is the risk?18:40PQC stands for post quantum cryptography. So what this looks at is Q day. The day when today's encryption is broken by quantum computers. And the idea is we don't have a set date for this. It's a date in the near future somewhere. And again, it's the day we kind of, you know, it's not the day we get faster computer.18:58It's a different computing model moving from bits to cubits.19:19PQC is still math like other decryption methods, it's just it's able to solve much harder problems. So the question is, if this is something we're looking at in the near future, why do we need to focus on it today? So something that's happening now is when your data travels, say from, you know, your phone to your bank, it, it, people can view it, but it's.19:23Encrypted. But what happens when we get to the technology that can decrypt that information? And that's what quantum computing will be able to do. So right now bad actors are harvesting data to decrypt later. So risk to data in transit. There's also the trust now forge later.19:43So the idea of when you send information to your bank, you're trusting that, you know, you are sending it to your bank, that's who your person is rather than someone in the middle who's being able to look at your information. Additionally, some of you might have regulatory compliance deadlines that you're gonna be facing. What are those compliances around PQCC? Especially if you don't have a lot of context around what it.20:01Means for you and your company.20:21So, in addition to all of this, the National Institute of Standards of Technology has a lot of deadlines that, you know, require compliance to be as early as 2030 for some. The question is, how do we use Cisco IQ to then make sure we are one compliant, but also two compliant against these standards that might apply to.20:23To us. And what we're gonna do now is actually go into Cisco IQ to get that done. So we're still in the assessments capability here. And what we're actually gonna do is look at our overview here, and we'll see our quantum readiness assessment.20:43So what we could see here is we can see things around our quantum safe migration process, quantum safe alert, and looks like none of our assets in the demo environment are quantum ready. So if we look, the quantum safe assessment is broken down into three pillars. That's being able to do quantum safe communications.21:03Quantum safe products?21:24And crypto agility. We can also see the infrastructure summary here, so what's to be determined, what's not eligible, and what hardware, what particular devices need to be refreshed in order to be PQC compliant. At the top of this, we can also change the national standard based on where you're located. Right now this.21:25Measures against CNSA two point oh NSA CNSS, but we could see we have a lot of other ones including the standards for Australia, Canada Japan, India, just to name a few.21:45Now if we go into the particular quantum readiness assessment, within here, and I will say quantum readiness in order for your device to be measured against this assessment, that device needs to be on standard or signature level support. So if the asset is on basic or it's unsupported, it will not be included in this assessment.21:58You might also see that in order to get the data we need to run this assessment, we do require the granular data that is collected via Cisco IQ link. So that level of telemetry is required in order for that device to be run against this assess this assessment.22:17So what we're gonna do from here is we're actually going to look at the AI insights again, which we can see right here. And this is available usually when you see any big table, you'll have these AI generated insights, which gives you a summary instead of having to scroll through the entire table itself.22:32So much like what we saw in security advisories, we see the insights. So we can see the criticality of some of these, we can see which assets are failing, and this just might be a lot of information for me to digest right now. So what I'm gonna do again is hit full analysis.22:48And what this is going to do is generate a full analysis that says for me on my infrastructure's quantum safe infrastructure. So what we could see here is the key insights, and we provide you with more visuals or tables and charts than you could ask for.23:05So what we're going to do next is see how can we actually use the customization to maybe refocus this analysis to Priya's request. So we're gonna hit customize again. And what we're going to do is we're going to ask this to.23:21Refocus, Refocus the analysis refocus the key insights to emphasize remediation priority across.23:42All failed devices. And again, being able to customize these reports makes it easy to sift through this information, at the same time tailor it to the need of whoever's making this request. So as you can see again, it's generating this customization.23:57It's gonna take a second. But once we saw last time, once it's actually done, we can view all changes. It says it refocused all four key insights to emphasize remediation priorities, and we can see those changes have been reflected here.24:14Now what I'm gonna do is I'm actually gonna show you how we can save this in the reports and actually regenerate it in the future. So what I'm gonna do is hit save on this report and I'm gonna call it Cisco quantum safe infrastructure, and I'm actually gonna say, you know, for Priya.24:31Just so I have that noted, I'm going to click view report. And as we can see from the homepage, we're able then to see the report section here. And here's my report, the quantum safe infrastructure assessment for Priya. What we can see is the snapshot, so this was taken today 27 October.24:48If I have multiple of these snapshots, I can actually dropdown and click in between them. So if I needed some say month quarter by quarter type of analysis, I have the option to do so. I have the option to delete the snapshot, download it as a PDF if I need it outside of Cisco IQ or regenerate. So what if I do.25:08What happens when I click regenerate is this exact query will regenerate with the most up to date information I have in Cisco IQ.25:27Once I regenerate it, it will save it under the snapshot here. So say if I it's 27 November, I've, you know, Priya wants us a month to month assessment just to really make sure to see how we're doing in terms of our updated failures or past assessments. Shoot. We could come back here, regenerate it, we'd be able to see our 27 October report.25:35As well as that 27 November report. So moving back over here, let's walk through the steps we've taken together. So Priya's request overall, again, looking at how do we make sure we're PQ PQCC compliant? What does it mean? How are we.25:55Looking in terms of our estate in regards to this. So again, what we did is we went to assessments.26:15Overview quantum readiness, and took a look at the quantum safe pillars in the overview. We also then ran a full analysis and was able then to customize that report based off of Priya's request. Moving on to our next example from Marcus. Marcus is our VP of IT. He is.26:20Asking us something we dread. He's asking us to 1st do some forecasting, but also creating a PowerPoint, which as anyone knows, that takes a lot of our time. So Marcus is asking us.26:40Can you create for me a few slides for my LDOS network refresh conversation with finance next week? Really need to highlight highlight the risk. I also need you to forecast the refresh needs over the next three years. I don't know about you, but slides can take up a large chunk of time moving away from other strategic priorities. And this was one of the 1st features I found very.26:53Very, you know, one of the 1st features I was very excited about in Cisco IQ when it 1st launched, which is how we're gonna actually handle Marcus's request. And we're gonna go back to IQ to be able to do that. And from here, we're going to go over to our assets right here.27:13And actually before we go to assets, I I just got ahead of myself, we're actually gonna go to the AI assistant. So the AI assistant here again does not user data to train. It's trained on, think about that left hand side slide I showed earlier, that 40 years of Cisco expertise from everything our security advisories, our best practice assessments troubleshoot.27:33Shooting, that's what this is trained on.27:53Because of that, this can help with any IQ related tasks or questions. If we go to the prompt library, we're gonna get a brief idea of what are some examples of this. So here we can see all topics, everything from configuration best practices to assets to case management, general information, R.27:55Troubleshooting.28:16We're going to go to assets today to run our query. And as you can see, there's a lot of different options and remind you, you don't have to use these prompts, they're great starting points. There's also the free text option. So what we're going to do is we're gonna scroll down, and this is one of my favorite prompts. Generate a PowerPoint summary report for.28:17For all last day of support assets.28:37I'm gonna copy this over. We can see that it's getting ready to go. Hit enter. And something about our AI assistant is it will always show you the task breakdown. How is it working? How is it thinking? Just to have that transparency for you. Now this is loading and it's going to generate me a PowerPoint with that LDOS information.28:40Which will take a second or two, but once I have that, I'll be able then to show that, you know, to Marcus so we can see that that's going to be here. I can download this. And once it's downloaded I can then view it and it will go over information including the devices, the device families by location, the information I might need in order to, you know, deliver.29:01For that report to Marcus on what are we looking at in terms of our LDOS across our estate?29:21Now, the next thing that Marcus wanted us to look at is LDOS within the next three years. There's a few different places where we can actually view that information in IQ. One's going to be in the overview here for our assets.29:27What we're gonna view here is being able to see our LDOS snapshots so we can see assets past milestone within twelve months, twelve to 24 months or 24 to 36 months. If we click on any of these interactive charts, it's gonna bring us to inventory.29:43Where it's going to filter for those devices that I clicked on, you know, 24 to 36 months. All of these devices are the ones that are going to be LDOS within that timeframe. Again, the AI insights will be context aware, so the analysis I get here will be in application to those 24 to 36 month LDOS timelines.29:58Here what we're gonna do next is we can also view it here at end of life. So if we click end of life here, say if we want to do hardware, this will automatically filter for hardware end of life, assets with past and upcoming milestones. From here, what we can do is we can do the further analysis here like we did in the other sessions.30:18So do the run the full analysis here.30:37But the other thing I could do is just use the handy AI assistant again. So what we're gonna do here is go back to our prompt library and what we can do again is go back to assets, and we can look at all the different prompts here. So summarize assets past LDL.30:39We can look at.31:00All the different ones here, but I don't, we see the one for summarized assets reaching out to us in the next twelve months. I could copy and paste this over, say if I want it to be in the next 36 months instead. What I can do is then enter that. It's gonna summarize that information for me. And like we did with the other requests, we can then generate a report that we can send.31:02To Marcus. So not only do we have the PowerPoint ready to send him, we have a high level exec level report with the information we need that might matter most to him in terms of refresh planning, financing, et cetera.31:22So right now that's gonna be loading, again, showing our task breakdown, getting ready to go. And while that's still loading, prior my answer. Well, that's still loading, I'd love to say that again, within the prompt library, you can see we didn't have a prompt around 36 months.31:35If there's some, if there's something in IQ that, you know, you're not seeing that you want, we can, I'll show you in a second how we can actually use our feedback button to request features. So now we can see the chassis level assets reaching their LDOS in the next 36 months.31:54We can see that most of these are Cisco 9000 series switches. Great, so now we have a product family. Maybe that's how we want to focus the refresh. And we can see that you know some assets have extended support, some do not. We can download this Excel sheet, run a report there or again analyze the response to get that exact level.32:11A report that we can then send over to Marcus. I mentioned additionally that we can provide feedback in Cisco IQ, and that's gonna be down here right here. This is how engineering and product management learns what to prioritize. It's from feedback from customers like yourself. How can we provide feedback on user experience?32:31A feature request, any issues, api's, documentation. Again, please submit the feedback. If there's something that you want to see, submit it. So we're going back to summarizing Marcus's request. So what did we do? We used the AI assistant to generate a PowerPoint saved us a lot of time a whole afternoon.32:51Of, you know, playing around in PowerPoint making slides. We also use the AI system to generate insights on LDOS timeline for the next 36 months. We also looked at the LDOS dashboard and being able to look at how do we get that view across all of the different past milestone, one to three year range, how do we filter by that, run that analy.33:11Also looking at the hardware and software end of life tab, which automatically filters for assets that are upcoming to milestones or already past them.33:32So our next example has a very familiar word to us, but this is Sam. Sam is a security engineer, and what Sam is asking is, what do you make of this whole meet those thing? Do we need to be concerned? And I'm sure this is all very top of mind for a lot of you, so we're gonna like with the quantum.33:43Example, we're just gonna provide some quick context. So what does it mean to be meet those ready? So as we mentioned in the LDOS example, any LDOS really allows bad actors to execute at machine speed. How can we make sure our devices can keep up with that? So earlier in 2025, there was.34:01Large wake up call when author earlier 2026 got a little behind myself. When anthroptic released meet those, we really started talking about meet those because it was the 1st frontier model to be trained specifically on software analysis, specifically security reasoning. And what that means is it's able to find security vulnerability.34:21Which is, this is great, this can be used for good, but also bad. Bad actors can use this to really exploit your security vulnerabilities especially, you know, when there isn't support.34:42So yes, it's gonna help us find flaws in our software and help close those flaws before the software gets the market, but others out of the coin, the bad actors can use this. So what used to take human programmers months now AI can do in a matter of hours. We certainly heard stories of, you know, this happening within the real world, like the hugging facing.34:52Example being able to go rogue, but.35:12We have models that are creating risks. How do we make sure our infrastructure is ready to help fight those risks at that machine speed? And we have that visibility to make that happen. So now we're actually going to go into Cisco IQ to show how we can really be meet those ready or even just AI ready.35:16And what we're gonna do is go back to our homepage and we're gonna go to resilient infrastructure playbook right here. And what this is, it's it's the 1st one of our playbooks, but what I like to say this is, is it takes information that's already within Cisco IQ and puts it into views that really give you digesti.35:35Insights with direct actions you can take within a certain framework.35:55This particular framework is, you know, looking at creating an AI readiness plan. And what this is, it's cisco's response to meet those. How do we make sure that you and your infrastructure are AI ready and what do we think are the steps needed in order to make that happen? Well, the 1st thing is making sure you map the attack surface. Again, what's our favorite tagline? You.36:00Can't protect what you can't see. How can we make sure that we get telemetry status? We have insights into all of our devices, and also how do we make sure our assets are covered and supported that Cisco is gonna be there to help when something arises?36:20You can also view the direct insights here, which e.g. making sure looking into the the devices with missing telemetry, let's make sure that gets set up, but also making sure we view support coverage. This next step here is available for devices that are on standard or signature.36:34And what this view does, it takes our security advisories and it overlays it with something we call the importance tag. Now the importance tag is something new to Cisco IQ within our I think our July release, but what it is is it's pretty much Cisco looking at your configurations and based on how critical that device is to the network.36:52Work, we give it a different rating. So whether it's critical to your network infrastructure, high, medium, low or just unassigned.37:12So what we do is that importance tag which again gets assigned to assets on standard and signature is then overlaid with security advisories. What this allows you to do is prioritize how prioritize or even deprioritize where to remediate 1st based on your network criticality and what's critical to your network infrastructure.37:19So e.g., what we can see here is we have 350 of our critical network infrastructure assets that have security advisories. What I can do is then click into this, and then again I get that really great context of where insights here that go over these particular assets in general. These 350 critical assets with.37:39Security advisories. So we can see all of the important information. We can run an analysis from here, but what I actually want to go back and do again shown you how we navigate back, is if all it takes to remediate this issue is just pushing a software upgrade.37:59We can actually do that within this step as well. Again, how do we create actionable insights? So, if the device is running on iOS XE, we will expand to more software versions later, and is on Cisco IQ Link and standard and signature.38:18We can actually push that software upgrade from here. So it's not just run. We actually do make you go through the process of doing everything from reviewing, verifying, so you plan, prepare, execute, and verify throughout the process.38:34Just to make sure we do our due diligence and everything runs smoothly, but we can push those upgrades thanks to Cisco IQ link. And again, that's available for standard and signature assets here. The final thing is modernizing legacy systems. Again, you can't fight modern day threats on outdated systems. How do we actually get an LDOS look.38:50Work out from what's already passed LDOS to again that two to three year mark as well.39:10Of course, throughout all of this, if there are insights, you don't have the time to actually digest and apply to your business context or you don't have the bandwidth or the staffing, Cisco professional services is here throughout any part of Cisco IQ to help you really take this information and apply it to your business context. So.39:16Just a quick plug there. What we can also do is the AI assistant actually just got released with a few more preset prompts that will help us with some security hardening options. So what we're gonna do here is we're going to go to the AI assistant and go to the prompt library.39:34So again, big thing about meet those and AI ready is not just, again, it's creating that AI readiness plan, but it's also making sure your security posture is hardened as it can be. There are some preset prompts here to kind of help you gauge what what does it look like right now? So e.g., how many assets are in violation of security hardening best practices? List key security.39:52Your hardening steps for routers and switches. I actually ran this one earlier today and we'd like to show you what it looks like.40:12So this is an extension to the security hardening assessment, which is in our best practices, and within the assessments tab. It is a assessment that, you know, does require standard or signature on the asset to be measured against. But here we're just getting a list of key security hardening steps for routers and switches, something more generic.40:19And what we're gonna see it's gonna load that here for me, and we get a quick little playbook. So we can see everything from here are some key hardening steps. So, you know, how to enhancements for RSA keys, net netflow configuration.40:39Stable unused services, TTL based security protections. So just some quick ideas for you if you need just to gauge maybe where should we be going with this. So we're gonna actually go back to Marcus now.40:53I'm sorry we're past Marcus I'm messing up my names. Anyway, sorry Sam, back to Sam's request. So how did we use Cisco iq's future features to really see how well our infrastructure is ready for meet those and these new frontier model threats?41:09So what we can see is we went to the resilient infrastructure playbook, which again takes information already in Cisco IQ and applies it to the context of an AI readiness plan for us. Showed you how to push the iOS XE software upgrades from the resilient infrastructure playbook for those standard and signature assets.41:24We also looked at security hardening a bit. So that again is our best practice assessment available for standard and signature assets. And we also use the AI system prop library to get started with, we don't maybe don't know where to get started with security hardening or maybe where to focus. We use that to help guide us 1st.41:42And looks like we are still good on time, so we're actually going to move into our last example, and this is from Alex. Alex is a network engineer, and I'm sure we've all gotten messages with different errors that we have NO clue what they mean, and we have to go online, search them up, go through forums.42:00Cisco IQ can actually do it for you, which is fantastic. So Alex asks any idea what this error message means? Seeing this on this device, which is an ISR 4331. So we have the device and we have the error message. Let's go into IQ to show Alex how we can troubleshoot this.42:20So we're actually gonna go back to assets right here, and we're gonna go into inventory. And what I'm gonna do is I'm gonna type in the device we were looking at, which was remote.42:40Site three San Jose. If I can type, it looks like it's having some issues pulling it up. Oh, it's because my filters are still set. Reminder to always look at your filters and make sure they're cleared before you want to start looking up something.42:55Okay, great. All my filters are cleared, so now we should be able to see this.43:16Site three. Perfect. There it is. So what we can do now is click into this particular device. So we can see this is remote site three San Jose. We can again see that the product ID, all the information around identity, location.43:23Signals, also be able to see any product alerts. We see that there's some security advisories and field notices which we can address later. Again, that's not what Alex is asking about right now, but it's there if we need it, as well as the hardware and software end of life timelines. So what we're going to do now is actually go to ask AI.43:38And again, it sees that I'm working with my install base, here are the capabilities, and I'm actually going to ask it real quick. I've actually already have this query done just for the sake of time. And what I've asked it is right here.43:58What does the particular error message mean for this device? And the AI system actually came back with a breakdown. So it 1st was going to verify the device in Cisco IQ, then interpret the login, its platform context, and here's everything it found.44:13Likely cause of impact as well as the next steps you need to take for this for this error message. So instead of taking the time or your afternoon to take the error message and your device name and troubleshoot this via online or Cisco's website, Cisco IQ is the context to help you out with it here.44:31So again, that's just a quick way we can do some quick troubleshooting. Of course, this wouldn't be an example if I didn't go to the prompt library to show you some other examples we can use. E.g., we have troubleshooting here. So just some examples of other prompts you can do. Say if you get a syslog message you don't understand.44:49Or if you need to push push an SDN certificate, but again if say if the troubleshooting response you get doesn't actually help you with your issue. We can also do some things around case management and we can actually open a case for this device from the device itself.45:08So if we go from here, we can see that next the AI assistant is open a case. What I can do is hit open a case here. It's gonna validate my entitlement. Fortunately, again, this device does not have contract warranty, but if it did, we'd be able to then open a case for this device, provide the information, again, Cisco IQ then is called.45:25Context aware, it knows about the device and knows about the device's information, and it can include that within the TAC case itself.45:45So, summarizing our request with Alex, he gave us an error for a particular device and we were able to troubleshoot it for him. How did we do that? We went to the home assets and inventory.45:52We then use the AI system to help with guided troubleshooting. Again, with information that's a bit more granular to pull that information in terms of logs and other things, we do need IQ link or that collector set up. We also then used a particular AI prompt and then we were able to open a support case.46:10So those go over our examples for today. Very excited to see how you maybe apply some of these to your day to day, but here are some resources for your journey in doing so. Mentioned earlier today that we do have a November series coming up if you missed our features and capability session earlier or just.46:30Want another refresher. We'll have different presenters, different panelists, so again, different information that could potentially be shared.46:51So you can register for our November series here. Again, the 1st session will be 10 November, and that will be our features and capability session, which will be our general overview of Cisco IQ. Our next session in this series will be on 17 November, and that will be a deep dive looking at contracts, connectors, and the AI assistant.46:57Finally some resources for you. You'll get, we'll post this deck on the community site with where the other recordings currently live, but there's a lot of resources available to you to help you learn how to use Cisco IQ to derive value, how to onboard, get started, as well as our disclosures and AI transparency technical notes.47:20Additionally, let's keep the conversation going. As I mentioned from the community page, you can ask additional questions if there wasn't time for the panelists to answer them here or you think of them afterwards. Please go to the Cisco IQ Expert insights series, October ask me anything page. The link is listed here as well as the QR code. You.47:42You have until 31 October to post your questions there. And if you ask your questions there, a Cisco expert, will be able to answer it, but it's also a community space. Let's learn from one another. Let's be able to help each other out.48:01This is also where the slides in the session today will be posted. So if we go back to the link Mike posted earlier, if you're interested in the other Cisco Expert insights series as well as global webinars, from the Cisco community page, this is how you would navigate there. Everything from multi architecture, we do.48:14Global time zones, fresh content, monthly, quarterly, but it's also completely free to you. You just register for these sessions to be able to get the invites.48:34Finally, thank you, and we would love for you to provide feedback. You'll get a survey immediately after the session ends. Tell us how we did. Tell us what we'd like to see in future sessions. Your feedback does drive these and we do these for you, and we want to make them better for you.48:45Once you've completed the survey, you'll be redirected to the ask me anything site. Again, that's where you'll find previous recordings as well as the page where you can post your own questions to the community. But thanks again for spending your afternoon with us and all of our friends and emails. Looking forward to potentially seeing you in our November series, but thank you for your time today and I hope you all.49:02You'll enjoy the rest of your Tuesday.49:21