- [Instructor] Security threat intelligence
is extremely useful,
one, correlating events, and to gain an insight
of what known threats are actually in your network.
And more importantly, DNS intelligence
and URL reputation is actually used
in many security solutions
including the Cisco Firepower appliances,
FTD or the Firepower Threat Defense solution
from Cisco Web Security appliances or WSAs.
email security appliances
and even cloud services like the Cisco CWS, right,
Cisco Website Security.
Now, for instance, you can correlate security events based
on threat intelligence to identify communications
to non-malicious command and control servers
based on DNS information.
Here, I'm actually showing
a different security threat intelligent events
in the Cisco FMC or the Firepower Management Center.
You can see that a host is actually communicating
to a known command and control server based
on DNS threat intelligence data.
And again, you can actually use, you know,
this threat intelligence and DNS information
with many other security events
and also things like NetFlow.