Search results

SJRMC

APFC RIR

PIH Health

SJC Tech Days

Northwest

RCN RIR

West Area RIR

Cisco LIVE! US 2025

NTUA

Base Tour Incubation TTT

Lucas Museum

In today’s fast-paced threat landscape, organizations face sophisticated cyberattacks targeting endpoints, networks, and email systems. The ability to rapidly detect, investigate, and respond to incidents across multiple vectors is vital for maintaining a strong security posture.

This hands-on workshop is designed to empower security professionals with the practical knowledge and skills needed to orchestrate a rapid and effective incident response strategy using Cisco’s integrated security solutions, as well as Microsoft Defender for endpoint protection. The session emphasizes the importance of securing email as a primary attack vector, alongside endpoint and network security.

Participants will gain hands-on experience with a powerful ecosystem of tools, including Cisco XDR, Secure Endpoint, Umbrella, Secure Malware Analytics, Cisco Firewalls, Cisco Email Threat Defense, and Threat Intelligence. Additionally, we’ll explore how to seamlessly integrate these tools with Microsoft Defender to create a unified, robust security strategy.

Workshop Highlights:

This workshop will provide practical, hands-on experience with:

• Cisco XDR: Consolidate and analyze telemetry from across your security ecosystem to enable faster detection and response.
• Cisco Secure Endpoint: Detect and mitigate endpoint threats with advanced EDR capabilities powered by real-time analytics.
• Cisco Umbrella: Protect users from malicious domains, phishing, and malware with DNS-layer security and secure web gateway features.
• Cisco Secure Malware Analytics: Conduct in-depth malware analysis to uncover sophisticated threats and generate actionable intelligence.
• Cisco Firewall: Strengthen perimeter defenses with comprehensive threat protection and policy enforcement.
• Cisco Email Threat Defense: Secure email, the most targeted attack vector, by identifying and blocking phishing, business email compromise (BEC), and malicious attachments.
• Threat Intelligence: Leverage actionable threat intelligence to enhance your ability to detect and respond to emerging threats.
• Microsoft Defender for Endpoint: Integrate and utilize Microsoft Defender to ensure seamless endpoint protection across hybrid environments.

Key Takeaways:

• Build a unified, streamlined incident response strategy across email, endpoint, network, and cloud environments.
• Gain practical experience with Cisco XDR and its integration with endpoint, email, and network security tools.
• Learn to operationalize threat intelligence to improve detection and accelerate response times.
• Explore real-world workflows for detecting, analyzing, and neutralizing advanced threats, including ransomware, phishing, and malware.
• Discover best practices for integrating Microsoft Defender with Cisco’s security solutions to create a multi-layered defense strategy.

Who Should Attend:

• Security Operations Center (SOC) analysts
• Incident response teams
• Cybersecurity engineers and architects
• IT professionals responsible for securing enterprise environments

Workshop Format:

• Duration: 4-6 hours (customizable based on audience needs)
• Structure:
  • Interactive presentations and demonstrations
  • Hands-on labs with guided exercises
  • Live threat simulations and response workflows

Prerequisites:

• You will need to bring a laptop for this hands-on workshop
• Basic understanding of cybersecurity concepts and frameworks.
• Familiarity with endpoint, email, and network security tools is helpful but not required.
• Ensure you are able to access https://ciscosecurityworkshop.com/ portal or else ask your IT Admin to allow this URL: https://ciscosecurityworkshop.com/ . If not possible, please bring your personal Laptop.
• The workshop uses a Microsoft tenant (ciscothreathunting.ninja). This tenant should be allowed and tenant restrictions should not be applied.
• A dual monitor / screen would be helpful for the workshop but not essential.

Why Attend?

This workshop provides a unique opportunity to strengthen your incident response capabilities by mastering the integration of Cisco and Microsoft security solutions. Learn how to secure your organization’s email systems, endpoints, and network infrastructure against today’s most sophisticated cyber threats. With actionable insights and guided hands-on labs, you’ll leave with the confidence to rapidly detect, investigate, and respond to threats across multiple attack surfaces.

Test

Overview:
The Hybrid Mesh Firewall Design Workshop is a comprehensive 4-hour interactive session designed to help organizations understand and leverage Cisco’s Hybrid Mesh Firewall capabilities. This workshop combines a targeted presentation, hands-on collaboration, and strategic planning to help customers modernize their firewall architecture, enhance security visibility, and optimize operational efficiency.

Agenda:

1. Introduction & Presentation (30-45 minutes)

• Overview of Cisco’s Hybrid Mesh Firewall solution
• Key Advantages: unified policy management, improved visibility, operational simplification, and cost savings
• Real-world examples and customer success stories
• Discussion on integrating a hybrid mesh approach with existing infrastructures

2. Interactive Discussion & White-boarding (1–2 hours)

• Open dialogue between customers and Cisco Solutions Engineers (SEs) on current firewall management practices
• Identification and mapping of all firewall types, vendors, and locations within the customer’s environment
• White-boarding session to illustrate current state, highlight challenges, and reveal potential gaps in visibility or management
• Discussion of integration opportunities and quick wins for hybrid mesh deployment

3. Roadmap & Wrap-Up (1 hour)

• Summary of key findings from the discussion and whiteboarding
• Collaborative development of a high-level roadmap for adopting a hybrid mesh firewall solution
• Recommendations on next steps to streamline operations, reduce costs, and improve security posture
• Q&A and assignment of follow-up actions or resources

Key Takeaways:

• Clear understanding of Cisco’s Hybrid Mesh Firewall solution and its advantages
• A detailed map of the customer’s current firewall landscape
• Identification of immediate opportunities and long-term strategies for transformation
• A customized roadmap to help achieve a unified, scalable, and efficient security architecture

Who Should Attend:

• IT and Network Security Leaders
• Firewall and Infrastructure Administrators
• Information Security Teams
• Cisco SEs and Technical Architects

Format:

• 4-hour session (in-person or virtual)
• Combination of presentation, discussion, and collaborative white-boarding
• Actionable deliverables and next steps tailored to customer environment

Example Agenda:

Notes:

• Ensure stakeholders from all relevant teams participate for a holistic view.
• Bring network topology diagrams and inventory lists for deeper engagement.
• The session is interactive and tailored to specific customer needs.