Hi my name is she had from teach ethics.
Welcome you all to Cisco firewalls course.
In this video we will cover the topic of next generation firewalls which is part of the Cisco firewalls
course.
By the end of this video you will be able to understand what are the next generation firewalls how they
operate and why actually we need them.
So let's start as we mentioned in previous videos there are various kinds of firewalls.
One of them is the next generation firewall which we actually used today.
Next generation firewalls actually are very intelligent.
Why.
Because complexity of modern cyber attacks and advancing hacking methodologies have evolved.
So enterprises had to look for a solution.
They had to look to a next generation firewalls for a bit of security.
There are many many kinds of Web based malware and intrusion attempts that can bypass regular security
protection techniques.
You can easily as a user's subscribe to an email or just click a link that can cause actually a risky
operation or can make your network in danger of so let's agree on this multiple forms of harmless software
executed when a user can mistakenly download it.
You can download something you're unaware of what's going on and somebody can just break into your network.
Those are some facts about why we need a next generation firewall so let's discuss the advantages of
using the next generation firewalls.
We need to be more intelligent to actually detect the risky operations.
So the main advantage of using a next generation firewall is being more intelligent with a deeper traffic
inspection traffic has to be inspected deeply.
All right.
Preventing malicious application and activity from using non standard ports as we all know any operation
or any application that can break through in your network can use a specific port number.
Now in a mother hacking methodologies applications and malicious applications specifically can use non-starter
standard sports which can actually put your network into at risk.
So the next generation firewall actually as we said is intelligent enough to detect what applications
are using what ports even those ports are non standard ports OK.
Next the next generation of firewall can handle complex rules or rules set when a new application is
added OK.
So mainly it's intelligent enough to detect if a new application or a software is trying to break through
your network here you go.
This is a real life scenario and advice when you are trying to purchase or buy a firewall for your company
or your organization before purchasing a new next generation firewall.
Ask the vendor if it offers support for implementing new applications.
Because as we said applications evolve all the time continuously.
So ask the vendor if he can support future risks future applications also ask whether the firewall can
be put into a learning moment So mainly you purchase a new firewall.
You put it into a learning mode so you can understand how actually it works and how well you can manage
the administration of this firewall.
So you know actually what are you doing.
What's going on so let's summarize this.
The next generation firewall actually is a part of the third generation of firewall technology which
is actually combining regular firewall and packets filtering functionalities plus some actually additional
functions like deep packet inspections.
DP I intrusion prevention system which we call an IP intrusion prevention.
Other techniques also can be employed like encrypting traffic using DNS or as an would filtering quality
of service bandwidth management so we can say that next generation's firewall actually are all in one
solution very intelligent to detect risks and dangerous operations and actually to act accordingly.
Let's move to the next slide
vision characteristics of a next generation firewall.
The next generation firewall would actually is a standard firewall.
Has standard category capabilities plus extra or additional inspection features like intrusion prevention
application awareness so they are aware of any new application you can actually upgrade their next generation
firewall for future information feeds or future information technologies.
You can upgrade it so they can detect what actually new applications or software or hacking techniques
are taking place
so using our firewall or a next generation firewall you can actually use techniques to address evolving
security threats.
I have included here a link just to look at an example of an exposure firewall next generation firewall
from Cisco.
This link actually includes like some models of Cisco firewall next generation firewall so you can just
like click on this link and explore how Cisco
is producing next generation firewalls All right.
So in this figure let's see who do we have our internet network or Internet clients.
Here we have our next generation firewall and this is the outside world which is our web server.
As we said the next generation firewall is a multi functional device
so it will actually include intrusion prevention.
It can detect attacks based on web behavior analysis.
The analyze the traffic the analyze the behavior of the traffic in in a very intelligent way.
And the even detect threat signatures.
Any threat or a virus or whatsoever has what we call a signature
a specific signature.
So firewall is next generation firewalls can actually detect any threat signature.
OK this is the same note I just mentioned.
I just include on the bottom here.
So we can remember how next generation firewalls operate.
Let's move to the next slide
a threat focused next generation firewall.
This is even more intelligent next generation firewall.
Those threats focused next generation firewall the actually focus on a specific threat so the next generation
firewalls plus the focus on a specific or a particular threat so they are even more intelligent.
So they include all the capabilities of a traditional next generation firewall plus the also provide
advanced threat detection and remediation
how they work mainly they know which assets to protect which assets are at risk the are very very intelligent
to predict what are the assets to protect of course they have some techniques to predict this based
on the traffic on the network based on what users do on the network so they can predict based on many
factors.
What are the assets to protect
these safe time reacting to attacks as I hear mentioned in in this not threat focused next generation
firewall or shrink time to detection and remediation.
So the act immediately quickly based on a prediction they predict what's going on on the network what
will happen so many better detect suspicious activities with network and endpoints
as we said they decrease the time from detection to cleanup.
So once they detect detect the threat the clean up in a very short time and of course the are easier
to administer than a regular next generation firewall.
So ease of administration and reduce complexity in configuration.
I have included here a link and a photo for a product from Cisco which is called Cisco firepower twenty
one hundredths which is actually a threat focused next generation firewall device.
You can just click on the link and explore what are the features they provide.
OK.
So this is just an example of the threats focused firewall model from Cisco.
You can click on the link read what are the features how they operate.
That's all for today's video.
On the next video we will discuss and cover Cisco specific firewalls which we call Cisco a is a I hope
you enjoy the video.
Thank you very much for watching and see you on this next video.