Security Cloud Control: Understanding the Differences Between SCC and On-Premises FMC

Hello everyone, thanks for joining the session and good, so I'm Srini and I'm a customer success specialist from Cisco.00:10Security architecture and in today's sessions we are going to see some interesting topic about security cloud control. So in today's so we are going to see the difference between the security cloud control and the on prem FMC and what are the benefits?00:19You will get when you integrate your FMC or FMC with the as well as if you manage the FTD via ACC, what are the benefits you will get? So we are going to see this information today webinar.00:38So in today's sessions.00:58We so myself and along with me, my colleagues Lexia, Neeraj Kumar and joining the sessions and myself and Lexia will do the presentations and demo and Neeraj will give the answers for the questions you have.01:02So this is the team which going to take going to take over this webinar.01:20Okay, so before going to the technical things, so let let's housekeeping items. So if you have any questions please feel free to post the dedicated QR panel, which is at the right side, bottom right side of your screen.01:31And our panelists are will be ready to answer those questions. And also if you have any other informations or documents which you needed, you can request that and we will may email you even after the completion of the webinar.01:48Okay, so we have a pack we have a packaged agenda packaged agenda today. So we will start with then what is SCC and how it works. So we will give you a short overview and then we will.02:09Give the difference between the on prem FMC as well as the CDF that is managed to managing the FMC via CC. And then we will go on how to integrate your on prem FMC with the security cloud control.02:26Then finally, Lexia will show the demo of how to integrate the on prem FMC with the security cloud control ok.02:42So, 1st we are going to see what is the SCC. So before going to SCC, so 1st we need to see what are the different management options available in managing the FTD. So initially, if, if very small organizations which is having one or two FTD.03:01The devices, they mostly use the FDF fire firewall device manager, so that the management UI interface will running within the device itself. So that is called FDF. So single device management. It's mostly called it's also called as on box management.03:21Then for a medium or a large organizations which is having more than 20 or 30 FTD, it's difficult to use FDM, so managing each devices. So in that case they may use the on prem.03:40Centralized management solution called FMC firewall management center so the this can be integrated with the multiple FTD. Using this, you can able to manage the policy control or access control URL. So all those can be done.03:56By the centralized solutions.04:16So it will support reporting, tuning, as well as you can do any config advanced configurations also. Then, then comes to the main part SEC that is called cloud management. It's a completely SaaS solutions which is running on the Cisco.04:18Can close.04:38So here, you don't need to put any servers on your data center. It's completely maintained by Cisco just to want to integrate your FTD with the FTD or FMC with your SCC. So once you've done the integrations, you can be able to monitor all those via by logging into the.04:39SCC solutions via your browser. So while it has been introduced means it main objective of SCC to increase the visibility and manage your FTD up your cloud security portfolio. So that is the main big bit.05:00So, ok, so since it's running on these solutions, the data sovereignty is important part. So Cisco is usually considered the data sovereignty as a top priority. So your CCC is architectured and it is with regional silos, meaning means you are.05:20Data stays within the designated regions. So we are having three regions be one is the APJC Europe and North America. So in APJC, we are having.05:40Japan, India and Australia, so these are the three regions we are having in data centers and in Europe we are having a data center in Germany and in North America we are having data center in US and Canada. So and also the the each region is completely.05:51Aggregated.06:11So the data will not be copied from one region to another region. So each follows the respective country compliance policy. So if you take Europe they are following the GDPR, so it supports the GDPR standard in Europe. So similarly in each region, it will follow the data compliance.06:12Policy and we are also in each region we are having high availability and disaster recovery per region.06:32So you don't need to worry about the downtime or or any downtime. So it will be automatically the traffic will be routed to the another region. So we are having a complete as well as the recovery plan.06:39So, let's let's touch on the commercial side, SOC license is completely talent based. So it's secure base license for entitlement and a device license. So you have a flexibility here.06:58So, for base license you can maintain the tenant entitlement with one or three or five years of subscriptions available. And for device license, you can choose any two type of device license. So one is the bundle and another one is the device management only.07:14So bundle includes both the device as well as the logging. So logging is unlimited. So logging is unlimited, but you have to keep look on the retention timing. So retention timing on those logging is 90 days.07:32So if you want to take those locks for auditing, maybe you can correct and you can do the server before the 90 days period.07:48And the device managements, it's only it's a logging license separately you need to buy and it's only for the managing the devices. So you can check all those informations on the SCC firewall management ordering guide, which you can which is available publicly.08:04Okay, now we know what is the SCC and how it's the benefits the benefits to the customers and how the data survey has been protected in the SCC and also we look on what are the commercial licensing part about the SCC.08:26Now we are going to see the technical difference between the on prem FMC and as well as the SCC, which is called a CDFMC. Okay, so let's look at the foundational architecture. So.08:43That many of you are running today, it's like the classic on from FMC. So where the FTD will be directly connected to the FMC deployment as its go, the architecture is built on your centralized management model.09:01Where your FMC server as the single source of truth for your security posture. So if you take a management plan, the FMC is responsible for heavy lifting of policy orchestrations. This includes deploying configurations, pushing critical updates like a snot intrusion rules.09:17Vulnerability database updates and geo database updates. It is it is also where you manage the life cycle of your FTD devices, including smart licensing and software versions. The next one is the.09:37Control and telemetry flow is also maintained by FMC, so so if you notice that the bi directional communications between the, let me take this ok if you note that the bi directional communicate communications between the FMC.09:54To the FTD sensors in your data center so you can able to see it maybe in data center branch office. The FMC sends the instructions to the FTD and then the FTD report back with the intelligence. So that's why it's having actual complications. This includes collection logs, intrusion files, mall.10:11All those informations were exchanged between the FMC to FTD via this.10:32The FMC process this incoming events and to provide your actionable insight. So as an administrator, you you don't want to investigate on everything so you will just log into the FMC and you have a complete visibility about the top talkers, what are the connection events, what are the intrusion events.10:38All those informations you can able to view on the FMC, so it will give you a visibility and also you can able to create the alert notification in the FMC so that alerts directly go to the administrator.10:57Then the cloud dependency even even on this on premise model, we will still leverage the cloud. So notice that FTD interact with the cloud. So for the security purposes like malware, cloud malware lookup.11:08Our unknown URL lookups, so for that the FMC will reach to the Talos cloud or the thread Grid to check those. So while management is locally, so we rely on Cisco intelligence for this type of against the latest emerging threads in real time.11:24Okay, now we are going to integrate FMC with SEC. So, so it's called hybrid evolution. So this is where we bridge you, bridge your current on prem architecture with the power of Cisco security cloud.11:51So notice that your existing FMC remains a primary engines for the configurations and policy management. You don't need to rip any or replace anything. You, you just integrate, so that means your operational workflow for managing FTD.12:07Pushing snot rules and handling software remains unchanged. So, the main changes what are you see integrating the FMC with the SCC. So to create a hybrid environment by establishing this link, you can unlock three major multipliers, that means you will get a three major benefits. So one is the uniform visibility?12:23You gain, you get you can gain your centralized single pane of glass that doesn't just to show you the FMC but allows you to see across your security entire security ecosystems. This is he will support multiple security products, so you can see all those in a single glass play.12:43Okay, and instead of being limited by on prem FMC local resource so e.g., for storing the log, you will use the on prem server's storage. So it's completely database driven. But here the logging will be not on any data set.13:00Just so it's the cloud, so you have the ability to offload events or logs to the cloud for long for a longer time as scalable retentions.13:20And also SCC is having a advanced insights. So this is one of the critical game changer. So once connected your telemetry, it exposed it to Cisco AE assistant for security. So this enables automated policy analysis, thread correlations and proactive optimizations.13:30So that simply is not possible in an isolated environment. So once you've done the integrations only, you will get this AE assistance capability. So this makes administrator work much more easier. Okay, so now we will see how the flow.13:50The technical flow will happen. So, we have looked on the on premise model and hybrid model. Now look at the ultimate destination CDFMC orchestrated by SCC within CDFMC, we are removing the management server. We are removing the management server from your local data center.14:09That is the main thing.14:29And one more, you are NO longer responsible for the health so for suppose your FMC is completely removed, all those logs are sent to CDFMC, that means ccc. So here you are NO longer responsible for scaling of the management appliance. So because this management.14:31It's completely taken care of by the Cisco backend team. So Cisco was maintains and upgrade the FMC for you. Ensuring you are always on the latest version with zero effects on your part. So what are the benefits you are getting means here it is access like infrastructure as a service for management.14:51That means you eliminate the management battle, there is NO FMC size to size or backup or troubleshoot, that is one benefit. Then 2nd one is automated intelligence you are getting because this is hosted by Cisco, we handle the background automations for you.15:10This includes automatic download for snot rules, virtual data vulnerability database, geo database and thread fix that will be automatically downloaded. So your ftds are always fight able to fight against the latest attacks by getting the patches from Cisco directly.15:29By the CC. And as I already said that you are having unified that this workflow is natively unified with the broader CC ecosystems. You are not, you are not just getting a remote console, you are getting an intelligent management plane.15:49That integrate with our suite to provide predictive health monitoring and you can also do the deep policy analytics. So we have covered what as a CDFMC.16:06That means the CC and how it's worked and when you do direct integration of the FTD or what are the benefits you are getting? Now, why should you invest the time to integrating your existing functions on prem with this CC? So.16:23The three main thing is one is a AR operational efficacy. So, think of the Cisco AA assistance for security as an extension of your team by offloading complex data analysis to the cloud, we are doing the heavy lifting for you.16:38So this reduce the noise your security analyst to deal with daily or steaming your security tasks and allowing your team to to focus on high priority threats rather than the manual configurations. So that is the 1st thing. Then.16:54The policy analysis and optimizations. So over the time firewall policies became blocked or shadowed. Our redundant rules are these silent enemies of your network performance because the team don't know whether the policy is present or not. They may create a new policy. So in case of any urgent.17:10Just so to prevent that we are having a policy analyzer and optimizers running in DSC, so which looks across your entire policy sets to identify the inefficacies. So it effectively access an automated cleanup cleanup agents.17:30So it ensuring your policy remains lean, consistent and optimized without you have to manually audit thousands of rules because that is the biggest challenge for the 3rd one is the integrations that integration of identification of the issues that is called threat response.17:47And XDR integrations. So this is the perhaps the most critical benefit. By connecting to the cloud, you are plugging your firewall directly into the Cisco XDR ecosystem. So this means that when your thread is detected, you don't just see a log entry. You can trigger your automated response workflow.18:07Like a task what has to done next. We are reducing the mean to time mean time to respond MTTR by enabling cross platform security actions that move faster than the, any manual process.18:26So it will so any P one or P zero instance which may happen at the firewall or email. So since it is integrated to XDR, so you can act as fast as you can. So the thread response and the actions.18:43It's much more faster when you do the integrated the integration. So I think I covered what is SCC and what is the difference between the FMC and SCC. Now, my Colleaguesha is going to cover how to integrate on prem FMC and SCC, then she will show the demo.18:58Of the integration, right?19:18Thank you. Yeah, thank you. Thank you Rasan for the great presentation. So let me talk, take over here to share you my screen. I hope you are able to see my slide.19:20So in the next 30 min, I'm going to show you how to integrate our on premise FMC and SCCC. So this slide shows the overall workflow of this integration.19:40So just asan introduced. So based on your current deployment scenario, you can stop at any of the face based on your requirements.19:59So this slide shows three phases of integration. So in the 1st phase, we are going to simply integrate our on premise FMC and SCCC. So this is actually the hybrid management scenario where we use.20:13Use the on premise FMC to centrally manage our FTD devices where we can leverage the.20:33Cloud advanced features from SCCC, including the AI capabilities such as the AI assistant, the policy analyzer, and the optimizer features that introduced by Srinivasan.20:41So this is the 1st phase, and then for the customers who plan to use the CDFMC to essentially manage your FTD devices through the cloud based management scenario, then you can enable.20:58CDFMC, we send the SCCC cloud. So CDFMC is built, we send the SCCC cloud. So, and this require you to have the corresponding license for the CDFMC to manage your FTD.21:18So 2nd phase is we will enable the CDFMC within the SCCC, and then for those customers who plan to fully utilize CDFMC for central FTD management. Finally, we will migrate all the FTD devices.21:36From the on premise FMC to the CDFMC.21:56So SCCC provide the useful migration tool for those customers to easily migrate the FTD devices to the CDFMC in the SCCC cloud. And just as mentioned, the CDFMC is maintained.22:01By Cisco. So there's NO, so you NO longer need to manage the FMC hardwares, there's NO need to manage the software upgrades, manage the patches of the stuff are managed through the Cisco in the backend.22:21Okay, so in the following slide, I will show you the detailed steps of each phases and we will more focus on the phase one, the basic integration between the on premise FMC and SCCC so that you.22:42You can see what kind of the use case, the features and benefits that you can get from this integration.23:01So before the integration, there's some prerequisites that need to meet. So firstly, we need to make sure that FMC and FTD can have the reachability to the SCCC cloud where the HTTPS 4443 part.23:09And before the integration, we need to make sure there's NO pending deployment changes in our current FMC deployment, ok? And then we start to integrate our on premise FMC with SSCCC.23:30So we go to the, our FMC dashboard, we go to integration and we navigate to Cisco security cloud to start this integration. So within this integration page, so firstly, we need to choose which ranging for.23:47So normally we recommend customer to provision the SCCC tenant in APJC so that you can get faster response from SCCC.24:08And then we can click to enable this integration with SCCC. After we click enable, this will pop up a new screen of the integration with SCCC.24:20So within this page, it shows us the introductions of this integration and this require us to log into security cloud control to authorize FMC for the integration. So we will click on continue to, cisco.24:36For SSO to log into SCCC cloud. And this will navigate to security cloud sign on page. So if you already have the SCCC account, you can simply sign in with your SCCC account to complete this integration.24:56So for those customers, if you don't have the SCCC account yet, you can click on sign up now to create a new SCCC account. And after you create your account, you will need to create the tenant. So the tenant is actually like.25:16Your the organization. So, so if you have multiple branches in your organization, you can create multiple organization based on your hierarchy, and then you can choose which tenants, which organization that you.25:36Want to integrate with our on premise FMC.25:56So here after we choose the tenant, the organization, and then at the bottom, we will need to authorize FMC to integrate with our SCC tenant. And after we complete this configuration and we go back to.26:01For our FMC dashboard, we will see, Cisco security cloud status change to be enabled.26:21And then within this page, FMC also provides you the options to choose what kind of cloud features that you want to enable in your use case. So here in the next few slides I will show you the details about these settings.26:30So firstly, we have the setting for the event configuration. So this is provides you the option whether you want to send the events, the different kind of events to security cloud for dynamic analysis.26:51And then 2nd option is Cisco AI assistant feature. And this is the like the tool just asan introduced, which can help to accelerate and simplify your daily operations for the firewalls.27:10And the 3rd option is the policy analyzer and optimizer just asan introduced. So this is the one of the AI features provided by SCCC which can help you to detect if there's any anomaly.27:29So if there's anything that you need to be pay attention to and if there's any rules that need to be optimized.27:49So this feature will provide you a very detailed analysis report so that this can help optimize your current, access control policy deployment. And the 3rd, and the next setting is about the Cisco security cloud.28:00Support, so we recommend you to enable this configuration so that you can get enhanced support experience from Cisco in the backend.28:20And then it's about the XDR automation use case configuration. So if you are also using the Cisco XDR platform for the extended detection and the response usage, you can integrate XDR with.28:31Is the FMC for the automated use case. E.g., you can integrate with XDR to automatically block those malicious connections from the malicious IP addresses or hosts if we detect if there's any malicious.28:50Has connections from this malicious host.29:10And the lastly is about the zero touch provisioning feature. So this is actually the capability provided by SCCC. So through this integration, this also provides the option for our on premise FMC customers to give you the.29:14The ability to onboard the FTD devices to the FMC just through the zero numbers without having to perform the initial setup or initial onboarding to the on premise FMC. So this simplify the initial.29:33Onboarding of FTD to the on premise FMC.29:54Okay, so after we configure these cloud features based on your needs, and the next step is we need to save this configuration to make it effect in the FMC. And then this will start the integration with our security cloud control. So this.30:00This will take a few minutes to complete this integration, and we will see the status for the cloud onboarding from onboarding to finally become online after the successful integration.30:20Okay, so this is the phase one of the integration that we simply perform the integration between our on premise FMC and the SSCCC and after the integration you can get the benefit from the SSCCC and I will show you more details in the.30:39Demo. And then we move on to the next phase. So for those customers who are planning to use a CDFMC within the SCCC cloud. So the next step is we will enable the CDFMC capability.31:00So this will require you to have the corresponding firewall license to use this CDFMC feature. So to enable CDFMC, we go to the security cloud control dashboard. We go to the firewalls administration.31:19And we go to the FMC manual.31:39So after you activate the subscription license, and then you will see there's an option to enable CDFMC within the SCCC cloud. And in the meanwhile, in this FMC page, we can also see the integrated.31:42On premise FMC with the SCCC status as well.32:02And then we click to enable, cloud delivered FMC. And this will take around 15 to 30 min to activate the CDFMC in the SCCC cloud. And finally, we will see the.32:09Status change to active.32:29And then we can start to use the CDFMC for your FTD management. So, at in the SCCC there will be a dedicated dashboard for the CDFMC for you to centrally manage FTD and then.32:32This dashboard is actually similar to their on premise FMC that we have.32:52Okay, so for the CDFMC customers and in the case if you need to migrate your on premise FTD devices to the CDFMC for central management, SCCC provides you the migration tool that can simply.33:00By your migration to the cloud management.33:20So we send the administration menu, we can see there's a migration, feature. So within this migration feature, it provides us a widget to migrate our on premise ftds.33:24From the FMC to the CDFMC. So we can simply follow this widget to complete this migration.33:44So within this widget, it's require us to choose what is the source on premise fmcs that you want to migrate from, and then we can choose which FTD devices that you want to migrate to CDFMC for central management.33:54And after you choose these configurations and then we can start this migration. And we can view and check the migration status with within the console. So this migration process.34:13Take some time to complete this migration, and after this migration is completed and we will see, it shows the migration job is successfully completed in this page.34:33Okay, so after that we can log into CDFMC to evaluate the FTD configurations in the CDFMC dashboard. Okay, so this is to show you the integration.34:49Between the on premise FMC and the SCCC and what kind of use case that you can choose based on your requirement. And the next, I'm going to, the demo to show you the live demo on how we can integrate.35:08Our on premise FMC with SCCC. So from here I will switch to my demo environment. I hope you are able to see my browser. So this is my testing on premise FMC lab environment.35:28So let's log into this dashboard. So for FMC and the SCCC integration, it requires the, the FMC version at least seven.six.O version. And as you can see in.35:47My testing environment, I am integrating the FMC with seven.six.five version with the SSCC.36:07Okay, and within this FMC I also have the FTD devices that is rejected to this on premise FMC and the manage it by this FMC. Okay, and then let's move on to the integration. So we go to the.36:18Cisco security cloud to start this integration.36:38So firstly, we need to choose the ranging, so just as I introduced, we recommend you to provision the SCCC tenant in the APJC ranging so that so that you can get faster response from SCCC.36:42And then we click to enable secure Cisco security cloud to start this integration. So this will pop up a screen for this SCCC integration.37:01And the reason this integration page, it will introduce the integrations and the use cases of this integration, ok? And this require us to log in to the SCCC cloud. So here we click continue to, Cisco.37:21Simon page.37:41To log into the security cloud control. So just as I introduced so if you already have the SSO account, so you can simply log in with your SS C C SCCC account, and if you don't have the SCCCC.37:44Account, you can go to security.cisco.com to sign up a new SCCC account, and then you need to configure and create a tenant for your organization. Okay, so after you log into this SCCC integration page, within this page.38:04We need to choose the tenant, the organization that you want to integrate with the on premise FMC. So this tenant is actually the tenant that's created in my SCCC cloud, as you can see here. So I have two organization tenants here.38:24Here, so in this demo, I am going to integrate with my, this test tenant.38:44Okay, so we choose this tenant and then we will see we need to evaluate this code in the FMC console. So so we go back to the FMC. So this is actually to make sure that we are integrating with.38:52Is the correct FMC devices. So after we confirm this code, and then we can click to authorize FMC to start this integration.39:12Okay, so after we complete this setting, we go back to our FMC and now we will see the Cisco security cloud changes from disabled to enabled status. And to make this integration take effect, we need to.39:26Save the configuration. And within this configuration page, we also see these are the cloud features settings that I mentioned in the slide.39:46So you can configure the the features based on your requirements. E.g., here we can choose what kind of events that you want to send to SS SSCCC cloud.39:58And then, we recommend you to enable the AI assistant feature. So this is one of the AI features as well as the policy analyzer and the optimizer feature. And in the right side, we recommend you to enable the, the security class.40:16Support so that you can get enhanced the support experience from Cisco in the back end.40:36And then you can choose whether to enable the XDR automation configuration and the zero touch provisioning based on your requirement. Okay, so after we configure these features and then we hit save to save this configuration.40:43So as you can see, it shows up a window that it shows that it starts to integrate with our SSCC cloud. So it will take a few minutes to complete this integration.41:02So while we are waiting for this integration process, so here let's go to the SSCCC and let's take a look at the SCCC. So just asan introduced. SSCCC is a cloud based SaaS management.41:19Platform for Cisco's customers to centrally manage the cloud security products, which is including the AI defense, the CDF MC to manage the firewalls, the hypershield, the MCD, as well as the secure workload and the securex.41:39Products so you can manage all these products in one centralized place.42:00So here, let's navigate to the firewalls. So this is the place that we manage the firewalls. So at the 1st the beginning, if we go to the administration, we go to the FMC and in this page, we will see currently I have already in.42:06Enable the CDFMC in this SCCC cloud. So this require you to have the corresponding license to enable the CDFMC feature.42:26Okay, so as we can see the integration process is still in progress. And here, let me refresh to this page to see if it shows the on prem Maersk FMC here.42:39Okay, so now we can see, it's still the integration is still in process and now we can see our on premise FMC is onboarding to the SCCC. Okay, and then here, let's also take a quick look at the CDFMC dashboard.42:56As well. So here we can click on any of the settings here and this will navigate to the dedicated CDFMC management console. So just as I introduced, the configuration, the dashboard is very similar to the CDFMC.43:16Dashboard to the on premise FMC dashboard. So for the customers, if you migrate to the CDF MC to forcentral cloud management, so you can easily onboard to CDFMC because you get the similar experience.43:36And similar dashboard just with the on premise FMC. Okay, so currently for my CDFMC dashboard, I haven't onboarded any FTD devices to the CDFMC and for the customers are using CDFMC you can onboard.43:57Put FTD devices to the CDFMC for central management through the CDFMC.44:16Okay, so here let's go back to the integration with the on premise FMC. Okay, and now we can see the status change it to synced. And we go back to the FMC. So now we can see, let me refresh this page.44:24Okay, so now we can see the cloud onboarding status change from onboarding to online. And in the meanwhile, we will see, a new icon pop up in the, the, the FMC dashboard. So this is actually the.44:46AI assistant feature. So this is like the chat to GPT tool that you can leverage for your firewall management.45:05So in today's in today's session, we will not introduce more details of these AI capabilities, but if you are interested about these AI features, we recommend you to participate in the next SCC EIS session that is.45:15Scheduled in December. And in that session we will introduce more details of these AI ops features that's provided by SCCC.45:35Okay, so in the meanwhile, let's go to the policies as well. So as you can see here, there's a new column that show up in the access control policy section. This is actually the policy analyzer and the optimizer feature. So.45:46So after we enable the policy analyzer feature and optimizer feature in our FMC setting, so FMC is going to send our access control policy to the SCCC cloud for dynamic analysis.46:06To see if there's any anomaly or if there's any settings that we need to pay attention to that we need to optimize. So currently it is due, the analysis is due in progress, and also in the meanwhile in the task menu, we can.46:23You see there's many pop up a window that shows our access control policy is sending sharing through the SCCC for dynamic analysis.46:43Okay, so here let's go to the SSCC and we go to the insights and report. So this is all the AI features that is provided for the firewall customer that you can directly utilize. And one of the AI features is the policy analyzer.46:54Here and optimize the feature.47:14So within this page, we can centrally check the, the analysis report for our on premise FMC, the policies. Okay, so here we can see the status of this analysis.47:17As you can see, these are all the access control policies that we configured in our FMC, and we can see some of the access control policy has already complete the analysis.47:37E.g., here, let's take a look at this one of the access control policy and let's click to view the details, of this report. Okay, so as we can see here, so with this feature, we have.47:52Analysis that there's twelve access control rules that we configured in this access control policy and there's one rule that we have detected as unhealthy rules. So there's some space that we can optimize this rule.48:12Configuration. So here we can click on the, the, the more details about this rule. E.g., we can click this mergible rules and we can click on this observability observ observation.48:32Of the configuration. So with this AI feature it has detected there's two rules actually has some overlap of the configuration. As we can see here, one is the rule ten which is to allow the out.48:51Bound traffic and another is allow east to west traffic. So the AI has another analyzed that these two rules can be mergable to be one unified rule so that we can better we can better process the traffic.49:11Like.49:30Okay, so this is one of the aspects of this feature. And the furthermore, this feature can also detect if there's any expired rules if we have configured the time based rules in our policy. And also it can detect if there's any.49:31Duplicate the rules.49:51And also, if there's any overlapping object as well. E.g., ATR can also detect if there's any shadow rules. So for those shadow rules, these are the rules that will never be hit because the previous rules will always be.49:53Hit because there's some overlapping overlapping and the duplication between the settings of these two rules.50:13Okay, so after, so now we can see this features has finally complete this analysis and we can see most of the access control group access control policies are healthy, and we can see it will show up which access.50:22Test control policies still need to be optimized.50:42And we can click to check, details of this access control policies. Okay, so this is one of the AI features that we introduced in the slide. And I think this is one of the one of the benefits that you can.50:46Get immediately after you integrate our on premise FMC with the SCCC. And this is actually the hybrid management use case. So in this deployment scenarios, there's NO changes for our current firewall management.51:06We still manage our ftds through the on premise FMC, but with the integration with SCCC, you can get additional advanced features, the AI features from the security cloud control.51:27Okay? So that's the demo that I want to show you. And then let me go back to our presentation and we continue to rest of the slide.51:43Okay, so actually that's all the contents that I want to share to you about today's EIS session. So here is the summary of our today's session. So in today's introduction I we've.52:02Showed you, what is SSCC management management platform, and we also showed you what is the difference between the on premise FMC and the CDFMC.52:22So the CDFMC is the management platform that's built into the SCCC and it provides very similar dashboard as the on premise FMC, but this is a SaaS based solution, so you don't have to manage.52:39The FMC hardwares and you don't have to manage the software upgrade to patch the app the softwares and those kind of operation text for the FMC.52:58So all of those steps are maintained by Cisco in the backend. And then I also showed you the detailed steps of how to integrate our on premise FMC and the SCCC. So within this integration, there's NO changes for your.53:14Current firewall management, you only do the.53:34Do the enabled integration with the SCCC cloud and then you can immediately leverage the advanced cloud features provided by SCCC. Okay, ok, so that is about today's presentation and then we move to the Q.53:38Way a section of today.53:58So let's see if you have any questions about this introduction, and I can see you have some questions in the QA panel and the chat and our panelists has.54:01I helped answering that.54:20Okay, so if you have other additional questions, please feel free to post it in the QA panel and we will be online to help answering your questions. Okay, so lastly, lastly, I want to share you the resources of about.54:22This EIS session. So if you want to look at the recordings and the resources of today's session, please feel free to visit this community link. This provides a very detailed information about today's session as well as the past EIS.54:42Session as well.55:02Okay, so finally, thank you very much for participating today's presentation and we look forward to seeing you in the next EIS session.55:06