通过思科安全防火墙保持网络安全.pdf

1、#CiscoLive#CiscoLiveAndrew OssipovDistinguished Engineer,Portfolio CTOBRKSEC-2236Keeping Up onNetwork Security withCisco Secure Firewall 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveYour Speaker3BRKSEC-2236Andrew ODistinguished EngineerPortfolio CTO for Network Security

2、Firewall Architecture,Threat Visibility,Hybrid Cloud,SSE 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEnter your personal notes hereCisco Webex App 4Questions?Use Cisco Webex App to chat with the speaker after the sessionFind this session in the Cisco Live Mobile AppCli

3、ck“Join the Discussion”Install the Webex App or go directly to the Webex spaceEnter messages/questions in the Webex spaceHowWebex spaces will be moderated by the speaker until June 9,2023.12344https:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKSEC-2236Agenda 2023 Cisco and/o

4、r its affiliates.All rights reserved.Cisco PublicIntroductionPlatformsThreat ProtectionConnectivityPrivate and Public CloudManagementSecure WorkloadConclusionBRKSEC-22365ASA9.19FTD7.3 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSecure Firewall:Inspect,Infer,and Coopera

5、te6BRKSEC-2236TCP inside:192.168.1.11/54397 outside:203.0.113.100/443 TCP inside:192.168.2.110/34624 DC:172.16.45.200/443TCP outside:198.51.100.231/13945 DC:172.16.45.201/443CampusCustomersAppsRemoteMapping network flows to specific user Mapping network flows to specific user actions via cloud appli

6、cation API and CASBactions via cloud application API and CASBNew-Normal FirewallSaaSSecure ClientClient context discovery via passive fingerprinting Client context discovery via passive fingerprinting and trusted endpoint agent cooperationand trusted endpoint agent cooperationContinue to decrypt inb