- [Instructor] One of the most important aspects
of security is network visibility.
The truth is you can't secure it
if you don't know that it exists on your network.
Visibility is the first step
in controlling and securing your environment.
There are multiple techniques
that can be utilized on your network
to obtain visibility necessary to maintain control
during an outbreak or compromise.
If you do not have complete visibility,
you'll have blind spots under your network.
The blind spots are where the bad guys hide.
This includes critical systems
as well as unnecessary services.
Any of these can be compromised.
Some of the most common technologies
that can be utilized
to obtain network visibility
include NetFlow, IPFIX, Cisco StealthWatch,
intrusion detection and prevention systems,
as well as advanced malware protection.
Many organizations fail to use
one of the strongest tools
that can help protect against today's security threats.
The network itself.
For example, Cisco Catalyst Switches,
data center switches,
ASR routers, integrated services routers,
NextGen firewalls, NextGen intrusion prevention systems,
NetFlow generation appliances
such as StealthWatch flow sensors,
and advanced malware protection,
all work in conjunction
with the Cisco application centric infrastructure
to protect before, during, and after the attack.
The network can be used
in security in two different fundamental ways.
The network as a sensor,
where NetFlow allows you to use the network as a sensor,
giving you deep and broad visibility
into unknown and unusual traffic patterns,
in addition to compromised devices.
And the network as an enforcer,
where you can use Cisco TrustSec
to contain attacks by enforcing segmentation
and user access control,
even when bad actors are involved.