Security Everywhere: Cisco Intregrated Threat Defense workshop

Presenter: Panagiotis Georgiou, InfoSec Consultant, Networking Solutions, Space Hellas

Room: Vergina

The workshop will provide an opportunity to see the Cisco Security products interact in a unified fashion to provide a multi-layered security solution to protect the network against advanced malware threats.

We will assume the role of an attacker, perform a realistic attack against the target organization and use phishing with a malicious Excel file, in order to take control of a workstation on the inside of the network.

We will then use the Firepower Management Center (FMC) in order to investigate the attack looking at Indicators of Compromise (IoCs) and correlating events from IPS, Advanced Malware Protection (AMP), and Security Intelligence to understand the attack and its impact.

Finally we will understand how FMC automatically discovers the network it is protecting, the operating systems, the applications relevant vulnerabilities, and logged in users. This will also focus on a typical NGFW policy and understanding the ability to create policies to control applications.