[Autogenerated] let's hop on the Cisco secure train.
Now, specifically, we'll talk about Cisco's secure firewall solution.
This was previously known as firepower,
threat defense and it fully integrates Snort two or three into the product
depending on the versions the snort inspection engine gives the secure firewall
very comprehensive Next gen firewall capabilities.
Not only does it integrate very tightly with the traditional
firewall features but the reporting capabilities,
intelligence integration and the ease of rural management
make the product work very effectively when managing it
with the secure firewall manager.
As you can see, Snort is right here in this firewalls traffic flow chart.
This means that the LeNA engine which is similar to the
traditional firewall phase processes.
The packets first then passes them to snort and back to lena.
When using snort with secure firewall,
you can create multiple inspection policies to send the data
to snort on a per firewall rule basis.
You can control if you want to inspect the packets or not,
you get very granular rule management capabilities that
easily allow you to override the defaults,
create custom rules and use recommendations that can be
generated based on the traffic scene.
This product also gives you the ability to create
remediation actions to help automate the response.
Using snore with secure firewall also provides a lot of context
capabilities as a result of the application detectors,
you're able to use this information to allow or block specific applications
in the traffic visibility is crucial in today's networks.
So this information can be used for threat hunting and
investigations as well and then tie in the platform with other
security products for more streamlined investigations,
response at orchestration and additional context sharing,
and you'll be set up with an effective security ecosystem.
One thing that I really like about this integration is that
you can investigate the intrusion events right from the
management centers dashboard.
The system automatically prioritizes and classifies the events to
assist in triage while you're investigating them.
You're able to actually download the packets for the event in question to
try to look at exactly what happened to cause the alert.
You'll see an example of this capability in the coming demo.
There's so many nuances that use information from snore in this
system that it really is tightly integrated.