Shulou(Shulou.com)06/01 Report--

Cisco Firepower next-Generation Firewall (NGFW) has a next-generation firewall that is fully integrated with unified management and focuses on threat defense. It includes application visibility and control (AVC), optional Firepower next-generation IPS (NGIPS), Cisco Advanced malware Protection (AMP), and URL filtering.

Features of the Cisco FireSIGHT NGIPS solution:

Real-time context awareness: view and correlate the following large amounts of event data related to the IT environment-applications, users, devices, operating systems, vulnerabilities, services, processes, network lines

For, documents and threats.

Advanced threat defense: defend against the latest threats with the best existing threat defense system that has been tested by independent third parties and satisfied thousands of customers around the world.

Intelligent security automation: significantly reduces the total cost of ownership, helps you enhance your ability to adapt to the changing environment, and enables you to take full advantage of automatic event impact assessment, IPS policy tuning, policy management, network behavior analysis, and user identification.

High performance and scalability: excellent performance and scalability with dedicated devices with low latency single pass design. Optional application control, URL filtering, and advanced malware protection (AMP): reduce * * areas through precise control of hundreds of millions of URL in more than 1800 applications and more than 80 categories. Detect, track, and block the activity of suspicious files and malware to prevent the spread of infection and reinfection.

Provide visualization of the next generation of applications

Block or allow access to URLs and domain names

SSL decryption engine discovers hidden danger

Internet Border threat Visualization, Control and Defense

Automatic information collection of network hosts

Automatically locate hidden dangers-automatically locate the infection or host you need to pay attention to.

FirePower Managemetn Center (FMC): Cisco Security Product Management Center that runs on several different platforms. It provides complete and unified management of firewalls, application control, * defense, URL filtering, and advanced malware protection. FMC is the center of event and policy management for the following solutions:

1) Cisco Firepower Next-Generaton Firewall (NGFW)

2) Cisao ASA with FirePower Servers

3) Cisco Firepower Next-Generation IPS (NGIPS)

4) Cisco FirePOWER Threat Defense for ISR

5) Cisco Advanced Malware Protection (AMP)

FirePower Threat Defense (FTD): FTD integrates the softness of ASA features and FirePower features

1) Stateful fireall Capabilities

2) Static and dynamic routing

3) Supports RIP,OSPF,BGP,Static Routing

4) Next-Generatoin Intrusion Prevention Systems (NGIPS)

5) URL Filtering

6) Application visibility and control (AVC)

7) Adance Malware Protection

8) ISE Integration

9) SSL Decryption

10) Captive Portal

11) Multi-Domain Management

Here are the three architectures recommended for FMC and FTD deployment on the official website

Scenario 1-FTD and FMC are on the same subnet, which is the easiest deployment. Can be seen under FMC in the same subnet, FTD br1 interface:

Scenario 2-FTD and FMC are on different subnets. The control panel does not deploy FTD here through FTD. There should be a route to FMC and vice versa. From FTD's point of view, the next hop will be a layer 3 device (router)

Scenario 3-FTD and FMC are on different subnets. Through the control panel of FTD

This deployment typically uses the Firepower module in ASA, but there is a warning in the case of FTD. Because of the assumption that the FTD usage is the next-hop data interface, the interface is already configured when the FTD is registered. Because you cannot perform interface configuration, before registering the FTD pair there, FMC requires that you first register FTD for FMC use as another device for the next hop (similar to scenario 2 after configuring the data interface), and then you re-register FTD for FMC:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.