Untitled - Cisco Live

103 Pages·2017·36.43 MB·English

BRKSEC-1346
Security for the Rest of Us
Tips, Tricks, and Open Source for the Non-
Enterprise
Mike McPhee, Systems Engineer, @mikey_mcphee
Abstract
62% of cyber-attacks target small and medium business. Even worse, more
than half of those victims won’t last 6 months due to remediation costs and
lost production or reputation. The strategy of enterprises with dedicated
SOCs and budgets doesn’t work for businesses without dedicated
personnel. Global threats and tangled relationships make playing safely in
this economy harrowing. The little guys deserve to operate securely too. This
session will help non-Enterprise participants build compact security
architectures with Cisco solutions. Participants will see how to fortify with the
Cisco portfolio, including ISE, NGFW, Umbrella and AMP. The session will
show how to quickly integrate these solutions (along with open-source tools)
to boost efficacy, enhance visibility and enable automation. Participants will
leave with actionable steps that can improve their own security architecture.
This session's for engineers in small & medium businesses frustrated by a
lack of right-sized solutions.
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
CiscoW ebex Teams
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session
How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space
cs.co/ciscolivebot#BRKSEC-1346
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
About me
• 6 years as a Systems Engineer with
Cisco
• Security focus with 200-2500 user &
SMB coverage
• 12+ years designing integrated C2
systems
• 6 years in US Navy (bubblehead)
• CCIE #41663 (R&S, Security)
• CCDE 20180018
• Home in Rochester, NY US
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
What is this session about?
• Cisco development and acquisitions focus on improving efficacy and
reducing workload
• Those goals are impossible without tight integration and openness
• That integration and openness exists in two primary focus areas:
• Intelligence feeds
• Solution-to-Solution
• Holistic requirement analysis unveils opportunities
• Easy, quick-hit integrations can blend your solutions to reduce workloads
and improve efficacy.
• We support this by providing Simple, Open, and Automated solutions
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Important: Reference Materials Embedded!
• Focus on awareness of integrations and
benefits/effort around them
For Your
Reference
• Meant to be a leaping-off point, not an exhaustive
walkthrough – pointers to other sessions for depth
• Download slides! Includes lots of hidden how-to’s
• We cannot cover
Session worth visiting!
• Basic standup or inherent capabilities of each product
• Detailed Configuration – this is an introductory session
• Programming – we have great DevNet sessions to assist!
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Agenda
• What’s in your threat picture?
• A typical small or midmarket security architecture
• Beginning with the easy stuff
• Building a Smarter Perimeter
• Automating the Interior
• Conclusion
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
What are you afraid of?
It isn’t popular to view threats through through a
small business lens
• Lots of awesome reports! But…
• Poor representation of small/medium (non-enterprise)
environments
• Change is happening…
• Cisco SMB Cybersecurity Report (2018):
https://www.cisco.com/c/dam/en/us/products/collateral/security/small-mighty-threat.pdf
• Verizon: https://enterprise.verizon.com/resources/reports/DBIR_2018_Report.pdf
• SANS: https://www.sans.org/reading-room/whitepapers/analyst/noisy-there-results-2018-incident-
response-survey-38660
BRKSEC-1346 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 10