Cisco Secure Workload Firewall Enforcement Agents, Data Flow Mapping, and Advanced

Policy Deployment

Duration: 5 Days Course Code: N1_(CSWADV) Version: 1.0

Overview:
Cisco Secure Workload Firewall Enforcement Agents, Data Flow Mapping, and Advanced Policy Deployment, CSWADV, is a 5-day course
exploring telemetry data, the flows corpus, and how Cisco Secure Workload Firewall Agent provides enforcement. This course will provide the
details and hands-on activities necessary to successfully deploy, manage, and troubleshoot policies in Cisco Secure Workload.
The course qualifies for 40 Cisco Continuing Education Credits (CE).

Objectives:

Upon completing this course, the learner will be able to: Review administrative and management tasks necessary to operate,
support and manage Cisco Secure Workload
Describe how the Cisco Secure Workload Agents work to
enforce security policy Describe how Cisco Secure Workload telemetry data is utilized in
the Flows Corpus
Describe how to deploy the Cisco Secure Workload Firewall
Agent Construct effective policies based on discovered flows and
Application Dependency Mapping (ADM)
Describe how to Manage and Troubleshoot Cisco Secure
Workload Firewall Agent policies

Prerequisites:
The knowledge and skills that the learner should have before
attending this course are as follows:

Knowledge of cloud and (virtual) data center architecture or cloud

basic networking concepts
Familiarity with Cisco basic networking security concepts and
application security concepts
High-level familiarity with basic telemetry protocols and Big Data
analytics

N1_(CSWADV) [Link]/en-eg/ training@[Link] 00 20 (0) 2 2269 1982 or

1.0 16142
Content:

Module 1: Cisco Secure Workload Firewall Module 8: Cisco Secure Workload Flow Lab 3: Importing Context Data
Agent Search line
line line Task 1: Upload User-Defined Annotations
How the Cisco Secure Workload Firewall Understanding the Flow Corpus Task 2: View User-Defined Annotations
Agent Enforces Firewall Rules Using Scopes to Filter Results Task 3: Search by User-Defined
Deploying and Managing Linux Enforcement Searching with Conjunctions Annotations
Agents Correlating Flow Data with Hosts and
Deploying and Managing Windows Processes Lab 4: Scopes
Enforcement Agents Leveraging Annotations line
Deploying and Managing AIX Enforcement Task 1: Navigate Scopes
Agents Module 9: Using Secure Workload Forensics Task 2: Create a Scope
line Task 3: Edit a Scope
Module 2: Cisco Secure Workload Enforcement Forensic Signals
Agent Components, Messaging, and Interaction Configuring Forensics Lab 5: Application Dependency Mapping with
line Forensics Visualization and Alerts Agents
Enforcement Front End Forensics Scoring line
Firewall and Catch-all Rules Network and Process Hash Anomaly Task 1: Create an Application Workspace
The Preserve Rules Option Detection Task 2: Examine Conversations
Agent Config Intents Task 3: Examine Endpoint Clusters
Stateful Enforcement Module 10: Cisco Secure Workload Apps and Task 4: Create an Application View
API
Module 3: Enforcement Agent UI line Lab 6: Implementing Policy
Configurations and Troubleshooting App Store line
line User Apps Task 1: Gather IP Address Information
Agent UI Configuration Visualize Data Sources Task 2: Create the Server Load Balancing
Monitoring Agents Bring your own Data Information File
Platform Specific Enforcement Features and OpenAPI Task 3: Create an Application Workspace
Requirements Task 4: Review Day 0 and Automated
Known Limitations Lab Outline: Policies
Troubleshooting Inbound and Outbound line
Firewall Rules Lab 7: Policy Enforcement and Compliance
Labs are designed to assure learners a whole line
Module 4: Secure Connector, Edge and Ingest practical experience, through the following Task 1: Enable Policy Enforcement and
Appliances practical activities: Compliance
line line Task 2: Test Policy Enforcement and
Secure Connector Overview Compliance
Secure Connector features and Lab 1: Cisco Secure Workload GUI Task 3: Monitor and Troubleshoot Policy
configuration Familiarization Enforcement Status and Compliance
Edge Appliance Overview line
Edge Appliance configuration Task 1: Log in to Cisco Secure Workload Lab 8: Workload Security
Ingest Appliance Overview and Explore the Security Dashboard line
Ingest appliance features and configurations Task 2: Explore the Visibility Dashboard Task 1: Review Packages and CVE
Task 3: Explore the Visibility Flow Search Reports
Module 5: Application Dependency Mapping Options Task 2: Review Policy Enforcement
line Task 4: Explore the Visibility Inventory Task 3: Review Rule Order and Efficiency
Application Management Workflow Cycle Search Options
Application Insight Lab 9: Secure Connector, Edge and Ingest
ADM Process Lab 2: Software Agent Installation Appliances
ADM Run Results line line
Cluster Confidence Task 1: Configure Agent Intents Task 1: Review Secure Connector
Task 2: Install the Enforcement Agent for deployment and configurations
Module 6: Cisco Secure Workload Policy Linux Task 2: Review Edge and Ingest Appliance
Analysis Task 3: Install the Enforcement Agent for deployment and configurations
line Windows
Enable Policy Analysis Task 4: Monitor Enforcement Agent
Live Policy Analysis Status
Backdated Policy Experiments
Quick Policy Analysis
Diagnosis Using Policy Analysis

Module 7: Cisco Secure Workload Analytics

Policy Enforcement Overview
line

N1_(CSWADV) [Link]/en-eg/ training@[Link] 00 20 (0) 2 2269 1982 or

1.0 16142
 Policy Global Ordering ; Conflict Resolution
Scope Priorities
Troubleshooting Policy Enforcement

Further Information:
For More information, or to book your course, please call us on 00 20 (0) 2 2269 1982 or 16142
training@[Link]
[Link]/en-eg/

Global Knowledge, 16 Moustafa Refaat St. Block 1137, Sheraton Buildings, Heliopolis, Cairo

N1_(CSWADV) [Link]/en-eg/ training@[Link] 00 20 (0) 2 2269 1982 or

1.0 16142