https://www.aparat.com/v/M8XmP
1. Introduction to Cisco ACI Solution_

یلدا مبارک
تخفیف 25 درصد طرح یلدا 1400
تا پایان روز جمعه 3 دی ماه
@raykatg

1. Cisco FTD Overview and Features
Cisco FTD (Firepower Threat Defense) is a Cisco Next Generation Firewall and IPS solution for securing our network and applications. It also includes many other security features that are introduced in this section as an introduction.
website link:
https://lnkd.in/d6wevmJk

youtube link:
https://lnkd.in/denpTwMn

2. Cisco FTD Installation Guide
The Cisco FTD installation process and its integration with Cisco FMC for centralized management is the topic of this section. We will install Virtual FTD and Virtual FMC with importing the OVF version of these software. Then we will integrate FTD and FMC with each other so that we can manage FTD centrally and via centralized FMC.
website link:
https://lnkd.in/dAqYjRpv

youtube link:
https://lnkd.in/dZeUax-v

Course: Implementing Cisco ACI Solution
Lesson: 3. Cisco ACI Terminologies
Language: Persian (Farsi)
https://lnkd.in/eDJSihQy

آشنایی با منظق و مفاهیم پایه ای Cisco ACI
قطعا در دیتاسنترهای مبتنی بر معماری SDN-based سیسکو، نگرش و شیوه متفاوتی را برای ایجاد شبکه و ارتباطات در پیش خواهید گرفت که با شبکه های سنتی کاملا متفاوت هستند. در این بخش سعی داریم با این ساختار و مفاهیم جدید که اتفاقا بسیار اساسی و پایه ای هم هستند، آشنا شویم که در ادامه راه ضروری هستند.
اگر این مفاهیم به دو بخش فیزیکی و منطقی تقسیم شوند، در این بخش با مفاهیم منطقی آن آشنا می شویم.

Course: Cisco FTD Design and Implementation
Lesson: 3. Cisco FTD Routed Mode Setup Guide
Cisco FTD Routed Mode is the option we chose to install FTD. In the last section we connected FTD and FMC in management-plane network. In this section we will bring FTD into the data path between LAN and Internet network. Interface configuration, configuring default gateway and basic NAT configuration are basic necessary configurations to add FTD to the path for inspecting data traffic.
website link:
https://rayka-co.com/lesson/3-cisco-ftd-routed-mode-setup-guide/

youtube link:
https://www.youtube.com/watch?v=kx9dr6eLWFY

@raykatg

4. Cisco ACI Access Policy Concept and Terminologies
Course: Implementing Cisco ACI Solution
Language: Persian (Farsi)
https://lnkd.in/ebDeaqVa

آشنایی با منظق و مفاهیم پایه ای Cisco ACI
قطعا در دیتاسنترهای مبتنی بر معماری SDN-based سیسکو، نگرش و شیوه متفاوتی را برای ایجاد شبکه و ارتباطات در پیش خواهید گرفت که با شبکه های سنتی کاملا متفاوت هستند. در این بخش سعی داریم با این ساختار و مفاهیم جدید که اتفاقا بسیار اساسی و پایه ای هم هستند، آشنا شویم که در ادامه راه ضروری هستند.
اگر این مفاهیم به دو بخش فیزیکی و منطقی تقسیم شوند، در این بخش با مفاهیم فیزیکی آن آشنا می شویم.

4. Cisco FTD Access Control Policy
Course: Cisco FTD Design and Implementation
website link: https://lnkd.in/e2Wnes5f
youtube link: https://lnkd.in/eHjiC5gN
FTD access control policy is the first policy that we implement since it is the most normal policy that anyone configure in any firewall. With FTD ACL policy, we can, not only filter the traffic in layer 3 and layer 4, but many applications and micro-applications can be controlled through ACL policy. In this section we will only control traffic up to Layer 4.

latest video in this course: https://lnkd.in/etJUp7BA
1. Cisco FTD Overview and Features
2. Cisco FTD Installation Guide
3. Cisco FTD Routed Mode Setup Guide
4. Cisco FTD Access Control Policy

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 5. Cisco FTD Application Control Policy
Language: English
website link: https://lnkd.in/dK_-6bgy
youtube link: https://lnkd.in/d4Ti4-5V
overview:
Cisco FTD application control provides the capability to control many applications and micro-applications based on the factory-configured signatures. signatures recognize applications based on many fields in the application layer.

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 6. Firepower Custom Application Detector
Language: English
website link: https://lnkd.in/eAJ9vNz6
youtube link: https://lnkd.in/eurpbdXZ
overview:
Firepower Custom Application Detector gives the capability to add signatures for our custom business applications to the list of application detectors so that we can call them when we add an access control rule. In this section we will create a custom application detector specific to our business.

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 7. Cisco FTD Prefilter Policy
Language: English
website link: https://lnkd.in/dbM5Ynci
youtube link: https://lnkd.in/dUnt8H6D
overview:
Cisco FTD Prefilter Policy is the first level of access control and gives the capability to allow or filter a specific traffic at L3/L4 without the need to be forwarded to CPU intensive access control policy. It is also known as “fastpath” because it quickly allows or denies traffic, without deep packet inspection.
For example, you might want to allow ICMP for troubleshooting purposes and also drop Telnet traffic for security reasons. They do not need to be inspected by CPU-intensive engines like access-control policy, IPS policy, file policy and so on.

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 8. Cisco FTD Security Intelligence ( IPs and URLs)
website link: https://lnkd.in/dFnGxGjz
youtube link: https://lnkd.in/da34qr6h
overview:
Cisco FTD Security Intelligence is used to black IPs, URLs and Domains with bad reputation. It uses mainly a database created by cisco Talos Security Group which periodically update the list of malicious senders and contents.
In this section, we will talk about security intelligence to block IPs and URLs with bad reputation. Blocking malicious domains will be discussed in the next video since the process is somehow different.

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 9. cisco FTD DNS Security Intelligence (DNS Sinkhole)
website link: https://lnkd.in/dPQutsns
youtube link: https://lnkd.in/ddN_a6ph

overview:
Cisco FTD DNS Security Intelligence is used to quickly block connections to or from domain names with a bad reputation based on a database created by Cisco Talos security group. You have the option to drop DNS queries for malicious domain names or return a specific IP address called DNS sinkhole to redirect users to that sinkhole IP address and log the users accessing malicious domains.

Table of Contentn sofar:
1. Cisco FTD Overview and Features
2. Cisco FTD Installation Guide (Version 7.0.1)
3. Cisco FTD Routed Mode Setup Guide
4. Cisco FTD Access Control Policy
5. Cisco FTD Application Control Policy
6. Firepower Custom Application Detector
7. Cisco FTD Prefilter Policy
8. Cisco FTD Security Intelligence ( IPs and URLs)
9. cisco FTD DNS Security Intelligence and DNS Sinkhole
... To Be Continued

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 10. Cisco FTD Threat Intelligence Director (TID)
website link: https://lnkd.in/e6nWqWmV
youtube link: https://lnkd.in/eNvmR77j

overview:
Cisco FTD Threat Intelligence Director (TID) is a supplemental security intelligence solution to block IPs, URLs, and domains with bad reputations based on third-party sources and not just based on a specific source from a specific vendor.

Table of Content:
1. Cisco FTD Overview and Features
2. Cisco FTD Installation Guide (Version 7.0.1)
3. Cisco FTD Routed Mode Setup Guide
4. Cisco FTD Access Control Policy
5. Cisco FTD Application Control Policy
6. Firepower Custom Application Detector
7. Cisco FTD Prefilter Policy
8. Cisco FTD Security Intelligence ( IPs and URLs)
9. cisco FTD DNS Security Intelligence and DNS Sinkhole
10. Cisco FTD Threat Intelligence Director (TID)
... To Be Continued

راه اندازی اولیه Cisco ACI
قبل از ورود به جزئیات بخش های مختلف Cisco ACI که مقدمات آن در بخش های قبلی گفته شد و برقراری ارتباط بین کامپیوترهای انتهایی، در این بخش یاد بگیریم که چگونه شبکه مبتنی بر Cisco ACI راه اندازی اولیه می شود. همانطور که قبلا گفته شد، بیشتر این پروسه اتوماتیک است و ما صرفا اطلاعات لازم را در جهت راه اندازی اتوماتیک در اختیار APIC Controller قرار می دهیم.
https://www.aparat.com/v/xgraO

https://www.aparat.com/v/xgraO
راه اندازی اولیه Cisco ACI

https://www.aparat.com/v/njqua
7. پیکربندی Out of Band Management برای دسترسی به سوییچ های Leaf and Spine

7. پیکربندی Out of Band Management برای دسترسی به سوییچ های Leaf and Spine
بعد از اینکه در بخش قبلی یاد گرفتیم چگونه شبکه ACI را بالا بیاوریم که تقریبا همه پیکربندی ها به صورت اتوماتیک انجام شد، در این بخش، ابتدا مروری بر ادامه مسیر و راه خواهیم انداخت که تقشه مسیر را حداقل تا 8 فصل بعدی نشان می دهد. سپس به اولین گام این مسیر می پردازیم که چگونگی پیکربندی تجهیزات برای دسترسی OOB است تا حتی اگر شبکه دچار مشکل شود، همچنان امکان دسترسی به تجهیزات وجود داشته باشد
https://www.aparat.com/v/njqua

Course: Cisco FTD Design and Implementation (Version 7.0.1)
Lesson: 12. Cisco Firepower Malware and File Policy
website link: https://lnkd.in/eYVtKAhn
youtube link: https://lnkd.in/ePsHR6eh

overview:
Cisco Firepower Malware and File Policy, as the name suggests, gives the capability to inspect and control the files as they are transmitted over the network. We can inspect them with local or cloud anti-malware (AMP) to detect and block malware files. We can also control files based on our policy...

Table of Content:
1. Cisco FTD Overview and Features
2. Cisco FTD Installation Guide (Version 7.0.1)
3. Cisco FTD Routed Mode Setup Guide
4. Cisco FTD Access Control Policy
5. Cisco FTD Application Control Policy
6. Firepower Custom Application Detector
7. Cisco FTD Prefilter Policy
8. Cisco FTD Security Intelligence
9. cisco FTD DNS Security Intelligence and DNS Sinkhole
10. Cisco FTD Threat Intelligence Director
11. Cisco FTD URL Filtering
12. Cisco Firepower Malware and File Policy
... To Be Continued

8. ایجاد Policy در سطح Fabric
همانطور که قبلا گفته شده است، عمده کانفیگ های مربوط به شبکه به صورت اتوماتیم انجام می شود و حداقل برای ایجاد ارتباطات اولیه نیازی به کانفیگ جدیدی بین سوییچ های leaf-and-spine ندارید.
با این وجود چندین کانفیگ اولیه است که پیکربندی آن در سطح فابریک ممکن است در مراحل پیشرفته تر شما نیاز باشد. لذا در این بخش با ابزار Fabric Policy بعضی از پارامترهای اساسی شبکه Fabric پیکربندی می شود که مهمترین آنها NTP، BGP Route Reflector و تنظیمات DNS است که در این بخش نشان داده می شود
https://www.aparat.com/v/aGtpS