Cisco Security Cloud Control: Discover AIOps, Policy analyzer, best practices, and upgrades

So once again, thank you for joining the Discover AI ops policy analyzer best practices and upgrades overview. My name is Harry Davis and I'm director of customer adoption for, for the secure firewall product.00:10Join me today leading these presentations. Excuse me, for butchering your last name sir. Customer success specialist for secure part of. Before we start a couple of housekeeping notes, please feel free to ask questions.00:20In the Q and A and our panel customer success engineers will answer as many of those as possible. We anticipate the material will take nearly a full hour, but we'll try to answer some of the questions live if possible. Once the event ends, we will capture and answer any outstanding questions in a follow up email to all attendees. Finally.00:35There's a short survey at the end about the webinar and an option to request further adoption assistance. So with that completed, I will hand this over to kick off the session. Thank you sir. Thank you, Harry. Hello everyone, thanks for coming to the session and stay tuned for next 45 to 15 min.00:51And please bear with the Indian accent for the next 45 to 50 min. And if you go to Slido.com and input the number 3914528 with the password Cisco, you'll get the.01:10Poll and if you could help me understanding before we start, I wanted to understand the audience where we are and how to progress this session. We'll give a minute if you could.01:28Complete the poll and we'll take it further.01:44Yeah, that's good. We know at least we have most of the audience able.02:17Oh seven.four. There's nothing below that. That's a good sign.02:37Okay, could you help me with or what is the current FMC you're using, either it's UDFMC on prem, on prem, ok?02:45Oh, ok, there's very less, it's mix of on prem and CDFMC, but we do see most people are on on prem, that's good. It gives me an idea where to concentrate.03:05Some more. That's a nice segue. And I would like to know if people who are on.03:25On prem, do you guys aware of secure cloud controller? Okay ok everyone knows about Secure Cloud controller. That's a good thing. And I wanted to know.03:31For on prem FMC who are using, are you guys integrated to the SCC? Okay, got it majority of.03:52You guys not integrated it. Okay, now this session will help you. What is the importance that helps you guys to integrate it with SCC and what are the benefits once you integrate with SCC you're gonna get, right? So let's deep.04:09Begin to what's the aiops. So it's Aops is nothing but giving you an efficiency as an administrator to handle your firewall in an easiest way. So most of the times as an admins, what is the difficult part to handle.04:29To handle it's as an system firewall admin most of the times.04:49Handling the policy or how to modify a policy or what are the best practices you guys can implement on the firewall, right? Those are the things for any network admin or firewall admin, it is important, right? But as the.04:55Technology and the technology increases, our attack surface is expanding, right? And even if you look at the things everything is encrypted, either it's a good or bad, but most of the things are encrypted.05:12Now, will the firewall shows all the data? Yes, it will show all the data but putting together is the task which most of the admins having difficulty to, to do. But with the you it it simplifies.05:29It gives you a single pane, of visibility what's happening on the network and it will give you the how to view the things, right? So let's take a small demo to understand what a normal network administrator.05:49Performs. I'm considering myself as an subject matter expert for this demo and assume I have the tribal knowledge on firewall, ok? Now I'm just gonna walk you through a demo where.06:10Where you see a high CPU, right? And just it's a recorded demo. As you see, I'm getting on the right hand side corner where it says, hey, your CPU hog for on your firewall for that. So what we normally do, we go to.06:29Health monitoring and we identify which firewall is causing the issue. As you see in there, we have BGLDC core which is causing high CPU and immediately I can see on the CPU snot and CPU course, there is an hundred percent utilization on.06:48And the CPU. So I want to dig in more. As I mentioned, I have a tribal knowledge on this.07:07I might mind think that, ok, there could be an elephant flows, so elephant flow is nothing but a large continuous data stream with a massive amount of data over the network. And as you see, there is an eleph elephant flow connection events where you when you go to connection.07:13And I want to know more about what exactly those connections are. Now I'll dig into the events to identify what is this connections about and I have a filter where I can do elephant flow filter and it automatically shows me that what is the data flow it is.07:34So as you've seen when I put a filter on the application side, I can clearly see that it is an HPE data storage. So I know that this is, there is some backup happening or some data storage transactions are happening and I know that it is a legitimate traffic, but that is causing an.07:53High CPU. So what I do is I'll just go to the settings on the elephant flow settings, I will navigate and I'll just exempt that from the snort inspection. Once I exempt that particular application, HPE under.08:14On on the snot, now once I immediately, you see that on the CPU, the physical course, the CPU had reduced from hundred percent to 50. So now.08:33When I was performing this activity, so what exactly is happening, right? Every data is it is with me on the firewall, but to identify how many clicks I need to perform to get to a place where.08:49Okay, there is an, high CPU. I went to my events and I went on, I went to health monitor, I went on finding what's happening to the CPU and then I redirected that to events. I found the flow, I verified an application and then I.09:08And then exempt the application because I know that it is an trusted flow and instead of inspecting it.09:28I said perform and trust bypass the snot, which reduces my CPU. Now, the, what is the most challenging thing here, right? There are too much of data and to make a decision I need to know entire flow of.09:36How it is working and there is an assumption where since I have an SME knowledge on the firewall, there's an assumption which I made that, ok, there are, there could be an elephant closed and then this could be a problem and I verified, I went there and verified it. Now.09:54People who are not, who are just an firewall admins, I mean it's it's not their daily job to understand elephant flows and click on particular events filters, identify what happens, right? So what we brought is.10:13We wanted to use.10:32Our existing knowledge, put that on the firewall locks and provide you a single pane of view to give a simplifying operations and with enhancing your security. So how we do that, right? So you're gonna be familiarizing with this screen. This is.10:34Is where you see AI OPs insights. Now, before I touch down how you get this screen on your on, if you are using on prem fmcs, how you get into the screen, where, how can I utilize this? I'm gonna show you in the further demos, but.10:54Make sure when you see it is on the summary on the AI ops, it gives you different options. What are your health monitoring says what is about your traffic? How is your configuration, what is your operational things? And it will give you an total insights and you can.11:13Get into each insights by priority on on the each device, right? So what it does before, as I mentioned, we took 20 clicks 222 hours to three weeks to detect an issue and you need an expect level knowledge.11:33Significant operational overheads. Now with we are transaction transactioning that into single click and.11:52It's an guided remediation workflow as well. So how we are doing this, right? We take your traces, events logs, and we perform an AI operation, ML operation on that, and we provide you root cause analysis and pattern detection and we try we'll.12:03To Guide you.12:23To the flows. So in the next sessions, we are gonna identify all these things which we just did it, didn't demo on identify a problem and how aiops helps you without knowing all that knowledge within a single click, how it can identify and.12:25Give you an solution.12:44So these are the agendas which we're gonna perform and since you guys are everyone is aware of, AI ops, SEC I'm gonna skip that particular part. So here I'm in this demo I'm I'm just showing that how to create an SEC account. It just.12:48Just go to security.com sign up and you have an cloud.13:08Pretty much you you have this this demo is to showcase how you get into how you get a secure cloud controller account. It's as simple as getting a, it's I would say it is easier than creating a gmail.13:13It just asks you email address, your details, and once you are done, your account is created and it, you have a free subscription for FTD. So, once you're done, once you create an account, you have SCC with you. So now.13:29Considering you all are aware of.13:49SEC, I'm just gonna show you a demo how to integrate your on prem to the SEC. So under integrations, you see secure cloud controller. Once you click on that, there is an enabled secure cloud controller button. Once you did that, it will ask you to continue to.13:52Secure Cloud controller. As I said, you have already created an SCC cloud controller account and just logging into my account. Once I log into the account, it will show, it will give me an option to make sure on your FMC and on our your secure cloud controller.14:11I'm just selecting a tenant which you will create when you are using an, when you are creating a secure cloud controller account. So I just selected my tenant. It is asking me to validate the key on your FMC and you'll validate the key on the FMC.14:31I just did two things now. I clicked on enable and I logged into SCC and I'm just verifying the authenticity and once you are done, that's it pretty much your on on prem FMC is onboarded to SCC. You just need to go ahead and enable the telemetry.14:47Enabling telemetry will help your customer success engineers as well as.15:08To Cisco to understand in the life cycle journeys where your firewalls are, and in fact, if you enable telemetry, Cisco is not taking the entire data. It is just understanding are you utilizing the features or not? It is either yes or NO for a particular feature.15:15Cisco never takes the data from the customers by just enabling the telemetry and again enabling telemetry gives you, gives CSS or for your account manager or whom you are dealing with at with Cisco.15:34Will provide them a clear guidance at the life cycle journey where you are and they can help you on utilizing your services in a better way. So I'm just enabled it and then I clicked on save. Once I saved it, you'll see that it is integrated.15:51With Secure Cloud controller. Now what I need to do, I just log into secure cloud controller.16:11And I select the same tenant which I integrated with, and you see the product as firewall, you click on, as you know, SEC is a single pane of glass for all your security products. And now I am talking, we are dealing with fire.16:19We clicked on firewall and under once you click on firewall, you need to enable CDFMC.16:40Once you enable CDFMC, it is the 1st time I'm doing. Considering that you are just integrated, you never had an SCC. So you need to enable CDFMC. Once you enable CDFMC, if you, if you don't enable CDFMC, this is what it shows, but once you enable CDFMC, it will just give you an option and.16:47Will your ML and automatically you will have a ops.17:07As I said, this is the summary dashboard which we will be familiarizing in this session. So as what we did till now, we just logged into our FMC, clicked on integrate.17:12Logged in logged into our SEC, verified, validated it, just pressed Yes, we are validating it. My FMC, my on prem FMC is connected to secure cloud controller and I can use AI ops feature just by enabling aiops feature. No license.17:28Sing.17:48No extra money. Everything is free and you can start utilizing AI OPs. Now, ok, now we got aiops, right? We created an account, we just clicked on integrate, we brought that into cloud controller, now just enable AI ops. Whoever is using.17:50Seven dot.18:10To enable, can utilize this feature feature features. Whatever I'm gonna show further, everyone can utilize these features. Now, ok, now we are on on prem. What we gonna get, right? So I'm gonna talk about that. The 1st feature, what you're gonna get is policy analyzer and.18:11Optimizer.18:31Right, what is this policy analyzer and starting our demo, we just we discussed what is the main problem for an system admin or if you join a new company or you have a firewall which you never seen, what is the biggest hurdle? Okay, there are so many number of policies. I don't know.18:33Which policy.18:53Is being using, which policy has not been used? Are there any duplicates? How healthy is my policy? What exactly is there in the policy? Is there anything best practices I can involve in the policy or is there anything which I can delete? These are all questions and if you have thousand policies.18:55To dig into all thousand policies, it takes months to understand which policy is used by whom. And now what we brought with policy analyzer and optimizer is, we just simplified demystified that and given you an easiest way to understand.19:15All the policies and it will guide you, give you parities what is what is up with your policy. And as I've shown, this is our journey for a policy analyzer and optimizer. We started with.19:35Identifying there are duplicate rules and then we went to identify redundant rules and then object overlaps and now at present, if you are using seven.six or when I say seven.six on the FMC.19:51Your FTD can be seven.two. If your FMC is on seven six, you get all these features, expired rule detection mergable rules, based on heat count insights, remediation and version agnostics. I'll show you what.20:09All this means is, so consider this is an policy analyzer and optimizer. Now we integrated our FMC to SCC. And once you've done that on the summary insights, you will have policy analyzer and optimizer. I'm gonna show you how to.20:25Get to this page in the demo, but before I show the demo, I wanted to you guys to understand what exactly it does.20:45So it gives you overall summary. In this case I have 575746 total rules and out of which I can see that 4815 83 % are healthy rules and there are 09:31 rules which you can.20:54Which are unhealthy, which you can which policy analyzer optimizer will help you to negate these 09:31 rules from your firewall, and it shows that, hey, there are 20 near about 2906.21:10Rules which are shadows, there are expired rules which created and based on a time period and forgot to delete from the firewall. There are overlap objects and it also talks about redundant rules. There are a couple of rules mergable and there are overlap objects.21:26Partial or full overlap objects and partial overlap objects. Now if you look at.21:46It is showing me on shadowed rules. Shadowed rules is you have a/twenty four subnet on your network and there is another rule which is with/twenty four, which never hits, right? And redundant rule is the other way around. You have/twenty four network on your.21:52Policy one and on policy two you have/twenty two. So it it actually it is not required. It everything covers under/twenty two. Now you have an as I shown you it is automatically gonna detect your expired rules where as I said.22:11And you have a time range expiry and it is already expired.22:31And you're not using it. It's not required on the firewall. So all these things it can detect automatically and provide you a better policy efficient policy. Now, let's go and look at the demo, how it works. As I said, you are in secure cloud controller.22:36And when you click on insights and reports under firewall, the 1st thing you see is a summary page, and this is, we have already familiar with this page. So I clicked on firewall. I went on that insights and reports and you as you see here, under insights and reports.22:56Where you get policy analyzer and optimizer as an section. I just went, clicked on that.23:16And once you click on insights operate policy analyzer and optimizer for simplification instead of playing with all 3000 rules, I created three rules which where you see there are three rules and which says one rule.23:23Is for LO and there are two block rules. So now how policy analyzer optimizer can help me navigating, so navigating with these three rules, so as you see in there, there are overlapping there are three rules, one, two are blocks, one is LO.23:42And now I'm gonna click on duplicate rules. As you see here, it is a shadowed rule. So what, what it is shadowing with? The 1st rule is overlap shadowing with 2nd one and as you see inside, outside and the land network.24:00The only problem thing is I have.24:20On the source network, 1st one is LAN, second one is VP. Now, when I click on LAN, it gonna show me the details of that particular subnet. And as you see, there is a/twenty four subnet. And when I click on VP, where you see that under source network, it is a single IP.24:22IP address. So ideally it is it's not gonna utilize 2nd rule at any point because the 1st rule has entire subnet and there there is NO reason why I need to have a second rule and it is giving you an options where you can.24:42Disable fully shadowed rule or you can delete.25:02Fully shadowed rules Sorry we just talked.25:06About duplicate rules.25:26And now I'm gonna, it is again I'm showing the entire details of mergable rules, expired rules, how it's gonna verify. Now we're gonna talk about what happens and there is a policy insights as well. You can select based on rules.25:28You want to identify which rules never hit on this firewall which is already created. You can play around all the insights of this and you can you can utilize that. So in this case, what I'm gonna create is let's gonna have a look on how.25:47It can detect an anomaly. So now I have three rules.26:07Two logs, one says hello everything and I'm creating another rule because I have considering I have thousand rules in that, I don't know one password access list entry is being created or not. I'm just as a network admin, I came ok one password, there is a VPN.26:10Who came and said hey my one password is not working and I just came here, I wanted to give the preference and I wanted to create an access list. So I created an access list. Now when I click on apply.26:31It's gonna tell me, hey, there is an anomaly which is detected. Your current rule have a conflict with which what you are creating and it will also show you what is that rule is, and it will not allow you to create a duplicate rule. Once you integrate, utilize started.26:44Utilizing it, it will never allow a network administer When I say never allow, you can still apply the current rule, but it will always give you a pop up where there is an anomaly, there is already an existing rule. Do you still want to proceed or do you want to verify what is the conflict with? And when I verify.27:04It clearly shows hey there is an rule three which where you allow everything and you don't required.27:25Simply for one password. So do you want to discard it? And of course I want to discard it. So it keeps your system healthy and it will never allow any network admin to create and duplicate rules and it will clean up all your rules and it will.27:33Summarize it for you, what are the things which you had performed. So this feature you can utilize on any on prem devices.27:53If your FTD version is seven.two and your FMC is above seven.two and if you are on FMC version seven six, you get an another feature AI assistance. You can ask any questions to the assistants, it will give you details about that particular.28:04If you want to know what is the difference between snot two and snort three. I'm gonna show that in a demo. It will give you that details. You want to open a tag case, it will you can do it from these are only two features as of today.28:24As if you are on prem, if you are using on prem FMC, you can utilize these two features just by integrating it with SEC. And now the other features which we're gonna look at.28:39It does it on prem FMC doesn't have this capability but on in August, you're gonna get all these it's a tentative date, you're gonna get all these features which I'm gonna show in August in on prem FMC as well. That's our target which our.28:55Engineering team is, trying to.29:15Just give a minute. So now let's look at summary insights. So instead of going through the summary insight slides.29:20I'll directly get into the demo and we'll, we'll see, it's it's the same demo which we've seen prior to understand what what happens when there is an elephant flow.29:35So in the summary insights, we're gonna talk, we're gonna look at two things, right? There is a system, system health, health operations and traffic. So, for in this example, as you see, I'm gonna click on snot memory user.29:52Stage.30:12On the health operations, I clicked on snot memory usage and I'm clicking on that particular device. It is showing me which device of your FTD having an issue. So once I clicked on the snot memory usage, it is telling me your snot utilization has 87 % search.30:16And it defines then it defense surpasses than defined threshold and also it will it is giving me what are the probable causes are and input packet count. So now when there is a snot.30:35High snow CPU usage instead of going to multiple places, it is giving me in a single pane what happens for my snot memory and you have an time range with the usage and as you see at 255I.30:52I had, it started my my snort CPU started going high. At the same time, if you look at my related metrics, my connections has gone up.31:11And as well as my input packets has gone up and it is telling you the remediation. It could be because there is an there isn't huge input in the connection rate or a traffic rate. And by going into that particular.31:23Events at that particular time, I will clearly come to know what exactly happens in that situation. Now, in the same scenario where we will go to elephant flows which we identified, sorry for.31:44The interruption. So now as you see here, we we had identified elephant flows in the previous demo, right? So here we just click on the elephant flows. Now, it is telling me on that particular device which is IP seven seven has an issue with nine potential.32:05And now instead of doing that 20 clicks, it is gonna show me on the network, details about that elephant flows and also.32:26It was gonna provide me in the bottom what are the applications which is causing the issue? And now you know which application is having an instead of going to all the places, you can clearly see in this particular pane, these are four applications which is causing and I know Bittorrent.32:38Supposed not to be there and it also gives you what is the source IP, what is the destination IP, which is with relevant with your CPU usage, and it also gives you what is the throughput it is utilizing. And I'm not going to.32:58Identify this from events traveling going back with multiple clicks and identify this particular flow is causing the issue. It is there on a single pane where you just click on your traffic insights and you'll get to know what is happening on that particular.33:13Particular flows, and it also gives you a remediation things to do as we seen in the starting demo, we went to elephant flows and we just bypassed that particular application. So.33:33As you are aware, as I was talking, this pen in the aops summary is the place where it provides you all the information about what is happening. And it also, there's another feature which you can utilize.33:48It provide best practices for your device and it will guide you what are the best practices it will run through best practices recommendations on your firewall, and it will provide you the recommendations. We'll see it in the demo.34:06So as you see in here, these are the 1st place where in the insights reports, I click on a summary and then best practices. Under best practices it is telling me there are total two devices you have out of two devices, I ran 26 health checks.34:26I mean 26 checks and it is showing me there are five problems and it is also showing me on the right hand side what are the pasts and what are the things which you need to review out of those 26 checks. And now I'm selecting one device, so where it is telling me that how you can do 20.34:4330 % improvements on the device. I just clicked on the device and it is telling me, ok, the best practices assessment report is also available if you want to click and if you want to verify that report, as, as you've seen there are five things which it is asking me to review and on the left hand side it.35:03To provide me assessment for improved access control list and it is also telling me on the control access what I can improve. So I just show you one default access list with a logging and it is telling you it's not just providing you a recommendation. It is also.35:23Guiding you if it is a block, put the log at beginning log at the end. If it is IPS log at log at the end. If it is an allowed rule, you should have logging at the end. So it is telling you.35:43Either your login should be at the beginning for what kind of traffics and what kind of traffics it should be at the end. The reason why it shows is there is an access list as you've seen below, which doesn't have that action applied. It is asking you to if you want, you go ahead and apply. And there are toggle buttons where you can, if you.35:58Don't want to see that again, you can switch off. Let's say this particular configuration you are aware, you don't want to show that when you run your report again, you can pretty much close that. And now I'm gonna show you the report, how to generate and what all things it.36:18It identified in the report. On the right hand side, you see there is a report button. Once I click on the report button, I will get all the recommendations on your FTD and it will give, it will show the report what all.36:36It went through and why it is say successful, what are the things you can improve in the report? If you want to present that to your senior leadership, it is easiest way and for your understanding everything is there in the in that. So if once you click, it give you a PDF, these are the.36:52Summary which I went and this is the device name I performed the best practices analysis, and these are the steps which it went through and identified and what are the things for review.37:12So it's everything on a single click and you know need to go to each individual boxes, identify what's happening on the each role to demystify where the problems are, how can I improve it? It is all on, on single click where you just click on the best practices and.37:26And it will provide you all the details.37:46Interesting, right? So, and also it will prop there is another option if you enables, which is featured adoption and feature adoption is let's say you purchased licenses for the device and you are not sure.37:51What is the utilization of your box? Are you using all the features which is available on the FMC or FTD? So where I am in my journey, and it will provide you again in the summary tab.38:09And I'm gonna directly show you the demo instead of talking through the slides. So in this scenario, as a sh as you know, a summary page, we came, we clicked on it, feature adoption. And in this feature adoption, it is telling me, hey, you just used 25 % of it. You have to.38:26All features which is which you can enable and you adopted only three.38:46There are nine features which you can utilize on your firewall. So e.g., as I talked about AI assistance, so it says that, ok, you you have a assistance and you adopted it. You are utilizing because my FMC is connected and it is seven.six. And you see on the right top corner where I click.38:51This is what I was talking about AS systems. If you are seven.six and above, you can utilize this option if you are in FMC, and you can ask any question. I just asked, ok, what is the difference between? It is it's going through the AI assistance with and then it will.39:12It's just gonna pull you the data. What is the difference of between snot two and snort three while it is doing that, ok, it's given you the information. So I just it is telling me what are the things, what is the differences?39:32And architecture performance, what you can get what are the resources you can utilize to convert that rules, and if you want any other information, there are sources which it pulled from. And you can, as I mentioned, you can open a tag case from that and you can give a feedback on.39:50For that my assistance, is it good? Is it bad or what you are expecting from it so that our engineering team can make it more interactive based on the informations which you give. And as I mentioned, I need to help open a tag case and it'll ask you a couple of information.40:10Problem description, case title, and device information. Since the serial number is already exists, it opens in directly tag case and you can pretty much NO need to go to a different place and handle that.40:31And now, as I mentioned, it is an adoption feature, so it said, ok, you can enable SD WAN capabilities and I not adopted it. Now you don't know how SD WAN works, and it is telling me about one particular device. And now I can pretty much click on the videos.40:45And I know that how SD WAN works and it also gives you step by step process how to enable that and when to utilize. So everything on a single page and it will redirect you to the video. You can learn from that video recommendation.41:04Questions as well. And it will help you how many features you enabled.41:24And, what are not being enabled. And the other feature which is available is soft software upgrade planner. Now, again, in the software upgrade planner I'm gonna show the demo.41:28I clicked on software upgrade planner.41:48It shows me the device and I have one device which is current version is seven seven and it is telling me you your upgrade options are two. You can go to seven seven or you can go to ten, and it is telling if I upgrade to which version.41:55How many things so when I clicked on the device on seven seven, there are two bug fixes and there are 14 vulnerabilities and how much time to download that. And if I go to 1010, there are three bugs and it is also giving me the release notes right and there, what are the things, what are the new features came in.42:11Ten 1000, and as you see, the severity of the box, it is on the same page. You are not navigating to a different one. You are on secure cloud controller, you are clicking everything on the page. It is providing you what.42:31Based on your device, what are the bugs? If you want to know about the bug, it will give you ok once I click on it, it will redirect me to that bug page and I can verify what exactly it is. And if it is a CVV, I can look at what is the vulnerability about is that affected to your device.42:44Right, so basically instead of going to multiple places, understanding what is my upgrade path is, where exactly it is, you, it is showing you an simplest way and I clicked on the upgrade, it is giving me the options, ok, these are the things which is available. Do you want to download or you.43:03You want to click on upgrade. So I clicked on upgrade, go to the workflow.43:22It goes to the workflow, it performs all the, checks which is needed. Is this eligible for upgrade? It it is preparing for an upgrade, right? It, it, it it performs the, it performs a readiness check and.43:26Since I have a deployment which is already there is a configuration which is pending to push and it failed, so it will keep you up to date and it will give all the informations which you required for upgrade in a single page without moving.43:47Are my understanding opening a matrix of how to upgrade and firewall from which version to which. And another feature which you had is end of life planner. So if you have an.44:03Hardware which is end of life, it's gonna give you I toggled it saying that, ok, show me all end of life hardware and it's shown me that, ok, there is one double 525 which is gonna end of life when I was recording these videos, it is saying you have 15 days when you pick.44:20Click on that, it will not just say it is end of life. It will give you option for recommendations for replacement of hardware, what kind of hardware you can choose. And if you want to talk with expertise expert for that particular product, product, it will give you, and you want to get in sales in.44:39Information you can submit a request directly from here and it will give you the suggestions what you need to go for which upgrade you need to go for.44:59Pretty cool, right? I'm not moving anywhere. I'm getting all the insights just from and there is other feature which is application insights. So most of the times what happened, if there is a network outage, everything.45:09Blames on ok firewall is blocking something that is an outage, and people who are not aware of thousand eyes, it's just an digital experience platform provide you visibility into your network performance or cloud services or SaaS applications, right? So what I'm, what we are.45:26What is we.45:46Connected thousand eyes to track the applications whichever you wanted to and if there is an outage, it pops up and say hey there is an external outage or there is an outage on the application level, it's not the firewall and it will give you an indication, ok.45:50It's a firewall, it's not an it's a network outage, it's not a firewall problem. So e.g., I'm just gonna show you a demo on this particular rule, I.46:09I given the applications to track. So it is tracking Amazon and other applications. As you see on the settings, I said, ok, these are the applications which you need to track and you can you can go to application insights and track those applications.46:20One, once I put that applications, it is telling me, ok, as you see in the applications inside summary, which I asked to track, e.g., I, I said Amazon Web Services and again we demoed it. That's why you see 51 outages to just.46:39For the demo's sake, as you've seen here in when the Amazon services is down and how much time the duration outage is for, when it is started when it is end, so it will it's it will track your SaaS applications and provide you insights on if it is down and.46:56This option is available for aiops as well. So in the roadmap, we we trying to bring aiops for NAT rules as well as APA support for.47:15And as of now, the internet application outage visibility just I've shown which is in beta version, which is available for you. If you guys are running CDFMC, you can go ahead and use that.47:36All right, great work, sir. And, you know, again, thank you again and if there's NO, we have NO other questions, thank you again for spending time with us on this topic and and for any all the the questions we did get, please complete the survey at the end and be on the lookout for a Q and A email after the event and enjoy the rest of your day.47:52