The first and most used
against feature of the next-generation. Firewall is
an application directly, recognize Pacific,
Ocean patterns in an iceberg traffic.
During the call. I'll
give you a few examples of words used for talking
about soldiering gas Network
traffic from Sum 41 capable name,
but
not the Facebook, but it's not only about that application.
If you are using this parvo from sampling, your
internalized party wants to protect your data center.
Tropical. Oriskany rent a
principal. If you're using the Microsoft active directory
environment to your network, then you can use you several
messages blocked. I mean, you are amusing diversion.
One
of this tropical has a significant vulnerabilities future.
You was back home on my work today. So
you
can create a 501, C
rule, which enables reverse directions
to switch version
2 and version 3 of an ICB protocol and
Block vs. MB version 1 + 1/4.
So basically when you are reducing our
mother spread footprint in
your password to no TCP
and UDP Port, 443 traffic can
use Force as well as
a definition for vote. But in most consistent generation fire
world does not need to know about ticket. When you report hotel
is just care about the company of the pocket.
That is the player. Everything is
an application with the Facebook measure. It's
a LinkedIn, D&S glass
dolls. All these are examples of an application
in 5 o
r. I having you like a thousands of
applications and updating you
stay in complication database, every day,
every year.
What are very useful feature next-generation? Firewalls of
the user identification is present
in some additional fire hose
to just be great. But mostly
a feature that came with the
invention of Lincoln Ranger, 250. User identification
feature is enabling the
Fargo to integrate with the Microsoft active directory
for Global or any other popular identity service.
And from this air is
the Fargo find out which IP address be
home by a particular user software
Temple is the fireball sees the
traffic starts from the IP address. 192.168
123 example
of this traffic is regenerated
from the John from the finance erection
in the next-generation firewall.
We can specify Fargo rule.
In a policy that is selling the firehole,
what to do from the traffic originated
from the finance, Active Directory Group users.
So we do not care about IP addresses.
This picture is not used for
constantly between
fires, FiOS
Network, changing location to
National fiber or Fiber without user
identification capability. Then you
need to cover all the top news from which your
users can originate from in your
file security policy cumbersome process.
If you have a lot of location part
of sadness and even if you call her, all
of them. Now more than a truck racing team, might
I add an additional stop to communicate
with. You was a five-hour operation
guy that you are
Idaho Falls. And that's
why I didn't reply rules are
important Source, IP
address of destination IP addresses in your
policy as long as you can get information about users
using these IP addresses from the active directory,
for example, that you can use to Simply extract. Instead
of five IP addresses to, you
need to care about
the IP address.
Next feature is in
the IDS building detection system in Georgia, prison system, which
enables next-generation firewall to detect known.
Explain to temps are attempts exploitation
of known vulnerabilities.
If you have a servers exposed
to the internet, but it can be used in the internal
web server
International, our next-generation firewall, and
our fireworks party and
able to use this on the internet, use this
web server in a regular way,
with our company's market
share
is actually definition of
a heart bleeds. It's a
very dangerous attack, which can sometimes
Session. So
it's almost
similar to exchange files
by Will detect.
Mother in your National traffic. You
can stop at a different. Five roles are
using this feature in a different place. Will have
a dedicated lesson about all the
operating system is on this picture needs weeding
vendors. The markets
are using
These pictures
doesn't come without penalties. There are
some challenges.
Did the most guys listen
to come and changes. First
is the impact on the
performance, because in order for the Next
Generation final to execute on all these features, the amendment
before, much more
Hardware resources, the CPU and
memory. And then the traditional firewall
for the same amount of troops traffic for
that connection for a second. But okay.
Yeah, so you you need to
buy a bigger box for the same traffic for
Saints Row. The second
option because I was
there said that 90% of the traffic is currently
end. Even though account
as far as there is an increasing rate
of an Egyptian traffic.
I saw if traffic is encrypted, even the
next-generation, firewall is blind to accountant. Almost
in every case, where security
GPS, even
though
I was only able to detect attacks which
are on the table to table, this encryption encryption song,
Observer on
the Internet. It's also encrypted look
for fibro. But of course,
Next Generation, Fargo are able to decrypt but
east coast
storm challenges itself because I'm
past performance, even more
drastically improve performance and also
some applications does
not work if you turn on the encryption, but
we will
have a dedicated lesson about
Directions Firewheel decryption, and we will discuss about the
issues and how you can overcome these issues
in your environment in this class
anymore diesel.