Security Guides on Security in 45 | Cisco Security Podcast

Cisco Firewall Guide: From ASA to Hybrid Mesh Firewall

Wed, 02 Oct 2024 00:00:00 +0000

The Evolution of Firewalling

Firewalling has evolved through four distinct generations, each responding to fundamental shifts in how networks are used and attacked.

Stateful Firewalls (1990-2007) addressed growing internet access and basic attacks with connection state tracking, IP/port filtering, and basic traffic control. SSL/TLS decryption emerged toward the end of this era.

XDR Explained: Extended Detection and Response Guide

Wed, 02 Oct 2024 00:00:00 +0000

What Security Operations Teams Need

Security operations teams face three fundamental challenges: getting a correlated view of alerts across their environment, working with speed, accuracy, and confidence, and remediating threats with guidance and automated playbooks. XDR — Extended Detection and Response — is the platform category designed to solve all three.

Why Traditional Approaches Fall Short

Ransomware Campaigns Are Multi-Vector

Modern attacks don’t come from a single direction. A well-tailored phishing email leads a user to a malicious website. That website drops a payload onto the user’s device. The malware then moves laterally to other machines and eventually exfiltrates or encrypts data. Each stage of this kill chain may touch a different security tool — email gateway, DNS security, endpoint protection, network firewall, and data loss prevention.

Zero Trust Security: The Complete Guide

Wed, 02 Oct 2024 00:00:00 +0000

What Is Zero Trust?

Zero Trust is a security framework built on a simple principle: never trust, always verify. Unlike traditional perimeter-based security that assumes everything inside the corporate network is safe, Zero Trust treats every user, device, and connection as potentially compromised until proven otherwise.

Zero Trust is not a single product — it’s an architectural philosophy that requires continuous verification across your entire infrastructure. Every access request is evaluated based on identity, device posture, location, and context before access is granted — and that verification continues throughout the session.