Cisco Next-Generation Security Solutions

Network threats are emerging and changing faster than ever before. Cisco Next-Generation Network Security technologies give you all the visibility and control you need to anticipate and meet tomorrow's threats, wherever they appear. Now, three Cisco network security experts introduce these products and solutions, and offer expert guidance for planning, deploying, and operating them. The authors present authoritative coverage of Cisco ASA with FirePOWER Services; Cisco Firepower Threat Defense (FTD); Cisco Next-Generation IPS appliances; the Cisco Web Security Appliance (WSA) with integrated Advanced Malware Protection (AMP); Cisco Email Security Appliance (ESA) with integrated Advanced Malware Protection (AMP); Cisco AMP ThreatGrid Malware Analysis and Threat Intelligence, and the Cisco Firepower Management Center (FMC). You'll find everything you need to succeed: easy-to-follow configurations, application case studies, practical triage and troubleshooting methodologies, and much more. - Effectively respond to changing threat landscapes and attack continuums - Design Cisco ASA with FirePOWER Services and Cisco Firepower Threat Defense (FTD) solutions - Set up, configure, and troubleshoot the Cisco ASA FirePOWER Services module and Cisco Firepower Threat Defense - Walk through installing AMP Private Clouds - Deploy Cisco AMP for Networks, and configure malware and file policies - Implement AMP for Content Security, and configure File Reputation and File Analysis Services - Master Cisco AMP for Endpoints, including custom detection, application control, and policy management - Make the most of the AMP ThreatGrid dynamic malware analysis engine - Manage Next-Generation Security Devices with the Firepower Management Center (FMC) - Plan, implement, and configure Cisco Next-Generation IPS-including performance and redundancy - Create Cisco Next-Generation IPS custom reports and analyses - Quickly identify the root causes of security problems

Omar Santos, CISSP No. 463598, Principal Engineer of the Cisco Product Security Incident Response Team (PSIRT), leads engineers and incident managers in investigating and resolving Cisco product vulnerabilities. He has held IT and cybersecurity positions for 20 years, and has designed, implemented, and supported secure networks for enterprises and the U.S. government. Formerly technical leader within the Cisco World Wide Security Practice and TAC, he has led industry-wide initiatives to harden critical infrastructure. He is the author of several books including Cisco ASA, CCNA Security, NetFlow, and many other cyber security topics. Panos Kampanakis, CCIE No. 28561, CISSP No. 367831, is a Technical Marketing Engineer in the Cisco Security and Trust Organization (S&TO). Kampanakis has extensive experience with cryptography, security automation, vulnerability management and cyber security. He presents on security at Cisco Live, participates in standards bodies to provide interoperability for security information sharing, cryptography and PKI; and works with the Cisco PSIRT to mitigate vulnerabilities. His interests include next-generation and post-quantum cryptography, cryptographic interoperability, and IoT security. Aaron Woland, CCIE No. 20113, Principal Engineer in the Cisco Security Business Group, works with Cisco's largest customers. He specializes in secure access and identity deployments with ISE, solution enhancements, standards development, and futures. An inaugural member of Cisco Live's Hall of Fame for Distinguished Speakers, he is a Network World security columnist, and holds GHIC, GSEC, Certified Ethical Hacker, MCSE, VCP, CCSP, CCNP, and CCDP certifications. His books include Cisco ISE for BYOD and Secure Unified Access.

- Chapter 1 Fundamentals of Cisco Next-Generation Security - Chapter 2 Introduction to and Design of Cisco ASA with FirePOWER Services - Chapter 3 Configuring Cisco ASA with FirePOWER Services - Chapter 4 Troubleshooting Cisco ASA with FirePOWER Services and Firepower Threat Defense (FTD) - Chapter 5 Introduction to and Architecture of Cisco AMP - Chapter 6 Cisco AMP for Networks - Chapter 7 Cisco AMP for Content Security - Chapter 8 Cisco AMP for Endpoints - Chapter 9 AMP Threat Grid: Malware Analysis and Threat Intelligence - Chapter 10 Introduction to and Deployment of Cisco Next-Generation IPS - Chapter 11 Configuring Cisco Next-Generation IPS - Chapter 12 Reporting and Troubleshooting with Cisco Next-Generation IPS