Cybercapsule: Firewall - Network Discovery

[zsoulios]

In this video, you can learn how enabling network discovery in a Cisco firewall enhances visibility, improves security posture, and optimizes resource management by identifying hosts, applications, and unauthorized devices on the network.

Network discovery policy in a Cisco firewall is important for several reasons:

• Visibility and Context: Network discovery allows the firewall to passively analyze network traffic to discover users, applications, and devices. This provides context and helps determine the impact of attacks against your specific environment.
• Optimized Security: By understanding the network map and the devices connected, you can tailor intrusion prevention signature sets to the systems discovered on your network, enhancing security measures.
• Performance Management: Properly configured network discovery rules can prevent excessive and misleading events, which might otherwise fill the database and overload the management center. This helps maintain system performance and efficiency.

In the video, you will also find a short demo that provides a practical demonstration of the features discussed.

Explore more on:

• Cisco Secure Firewall Management Center

https://www.cisco.com/c/en/us/support/security/defense-center/series.html

• Cisco Secure Firewall - Resources

https://www.cisco.com/site/us/en/products/security/firewalls/firewall-management-center/resources.html