Secure FirewalliCAL Export

Project Meteor - Ingram SG

The Hybrid Mesh Firewall: Project Meteor workshop is designed to equip participants with the knowledge and hands-on experience needed to modernize firewall strategies using Cisco’s Hybrid Mesh Firewall technology. This innovative solution unifies security across data centers, cloud, campus, and IoT environments, providing a highly distributed security fabric.

During this session, you will step into the shoes of a fictional engineer at PseudoCo and work through real-world scenarios that highlight the power and flexibility of Cisco’s security solutions.

The workshop will make extensive use of Cisco Security Cloud Control and cover topics such as deployment, SD-WAN configuration, shared objects management, and application segmentation. This is a great opportunity to build hands-on experience and deepen your understanding of modern network security practices through a self-paced workshop.

Key Takeaways

• Clear understanding of Cisco’s Hybrid Mesh Firewall solution and its advantages
• Gain hands-on experience with Cisco Security Cloud Control for centralized and extensive security management
• Understand how to configure SD-WAN for optimized and secure network connectivity
• Explore enhanced cloud visibility to monitor and protect distributed applications and data
• Deepen your knowledge of Shared Objects and their role in efficient policy management
• Master application segmentation techniques using both endpoint agents and the firewall for comprehensive security.

Who Should Attend

• Anyone involved in firewall management, policy enforcement, or security modernization initiatives

Workshop Format

• Duration: 2 hours
• Structure: A multi-phase, self-contained hands-on workshop
• Phases Include:
  • Onboarding firewalls and simplifying branch connectivity
  • Integrating cloud policies and multi-cloud defense
  • Configuring segmentation for workloads and applications
  • Testing threat detection capabilities including encrypted traffic inspection
• Tools Used: Cisco Security Cloud Control, Secure Firewall, Multi-cloud Defense and Secure Workload

 SHAPE

Prerequisites

• Cisco account registration (CCOID) – Click here for more information
• Cisco Security Workshop account registration – Click here to register
• Basic understanding of firewall concepts and network security

 SHAPE

Why Attend This Workshop

In today’s complex and rapidly evolving threat landscape, traditional firewall approaches are no longer sufficient. The Hybrid Mesh Firewall: Project Meteor workshop empowers you to modernize your security posture by adopting a distributed firewall fabric that scales with your enterprise needs. Attendees will gain practical skills to reduce attack surfaces, prevent lateral movement, and protect critical applications across hybrid environments. This workshop offers a unique opportunity to experience Cisco’s cutting-edge firewall technology firsthand, enabling you to lead your organization’s security transformation with confidence and agility.

Copart Cisco Firewall Test Drive 10.0

The firewall test drives are web based sandboxes to allow customers to work with instances of virtual FMCs and FTDs in a lab environment.  You will practice configuring the basic fundamentals and advanced features available in version 10.0 in a virtual environment.  These test drives require no prior experience.   Test drives at this time for version 10.0 - is  the Foundation test drive .

The Foundation test drive contains the following scenarios:

• Initial Configuration
  • FMC configuration
  • Network Object creation and Variable Set
  • Security Zones
  • Basic Access Control
  • Device registration
  • Platform settings
• Network Configuration
  • Interface, Routes and NAT
• Threat Configuration
  • Network Discovery policy
  • Malware & File policy
  • Decryption policy
  • Intrusion/Network Analysis policy
• Access Control
  • Access Control Policy Settings
  • Rules
  • Encrypted Visibility Engine

Firewall Lab Foundational

Cisco Secure Firewall 10.0 Hands-on Workshop

Vyskúšajte si najnovšie možnosti Cisco Secure Firewall 10.0 v praktickom hands-on labe zameranom na modernú ochranu siete, viditeľnosť do prevádzky, bezpečný vzdialený prístup, SD-WAN scenáre a využitie AI pri správe bezpečnostných politík.

Tento lab nie je len o klasickom nastavení firewallu. Účastníci si prejdú reálne scenáre, ktoré ukazujú, ako Cisco Secure Firewall pomáha chrániť používateľov, aplikácie a pobočkové siete v prostredí, kde je čoraz viac šifrovanej komunikácie, dynamických identít, cloudových služieb a hybridnej infraštruktúry.

Počas workshopu si účastníci prakticky vyskúšajú pokročilé funkcie Cisco Firewall Management Center, Zero Trust Access, prácu s identitou používateľov a Security Group Tags, SD-WAN rozšírenia vrátane DVTI a monitorovacích dashboardov, ako aj bezpečnostné mechanizmy pre detekciu hrozieb v šifrovanej prevádzke. Verzia 10.0 zároveň prináša vylepšenia v oblasti EVE, nové možnosti práce s dešifrovaním prevádzky a rozšírenia pre správu a analytiku.

Čo si v labe vyskúšate

Pokročilé možnosti Cisco Secure Firewall

Účastníci sa zoznámia s tým, ako Cisco Secure Firewall pracuje s dynamickými atribútmi, identitou a bezpečnostnými tagmi. Lab pokrýva CSDAC vo Firewall Management Center, Zero Trust Access, policy-based routing podľa používateľa alebo SGT a využitie VRF s Dynamic VTI cez SD-WAN Wizard. Súčasťou sú aj nové pohľady do prevádzky cez SD-WAN Summary Dashboard, Site-to-Site VPN Dashboard a Remote Access VPN Dashboard.

SD-WAN a bezpečné pobočky

Lab ukazuje, ako môže firewall fungovať nielen ako bezpečnostný prvok, ale aj ako súčasť pobočkovej konektivity. Cisco dokumentácia k SD-WAN funkciám uvádza podporu scenárov ako Direct Internet Access, Umbrella Auto Tunnel, DVTI hub-spoke topológie, application-aware routing, ECMP, dual ISP a monitorovanie výkonnosti WAN liniek.

Threat Lab a šifrovaná komunikácia

Účastníci si vyskúšajú bezpečnostné scenáre zamerané na detekciu hrozieb, prácu s QUIC decryption, výnimkami pre Encrypted Visibility Engine a security content tagging. EVE vo verzii 10.0 prináša nové režimy monitor/protect, používanie EVE pre aplikačnú detekciu a nové dashboard widgety pre lepší prehľad nad podozrivou šifrovanou komunikáciou.

AIOps a AI podpora správy politík

Samostatná časť labu je venovaná Cisco AI Assistant, Policy Analyzer a Policy Optimizer. Cieľom je ukázať, ako možno znížiť operačnú záťaž pri správe firewallových politík, rýchlejšie porozumieť konfigurácii a lepšie identifikovať potenciálne konflikty alebo príležitosti na optimalizáciu. Cisco uvádza, že integrácia FMC so Security Cloud Control sprístupňuje služby ako Cisco AI Assistant for Security, Policy Analyzer and Optimizer a Zero-Touch Provisioning.

Pre koho je lab určený

Workshop je vhodný pre technických špecialistov, presales konzultantov, sieťových administrátorov, bezpečnostných architektov a partnerov, ktorí chcú lepšie porozumieť aktuálnym možnostiam Cisco Secure Firewall a naučiť sa ich prezentovať alebo nasadzovať v reálnych zákazníckych scenároch.

Je vhodný aj pre účastníkov, ktorí už Cisco Secure Firewall poznajú, ale chcú si prakticky vyskúšať nové funkcie verzie 10.0, najmä v oblastiach Zero Trust Access, SD-WAN, encrypted visibility, threat detection a AI-assisted policy management.

Predpoklady účasti

Účastníci by mali mať základnú znalosť sieťových princípov, TCP/IP, smerovania, VPN a základov kybernetickej bezpečnosti. Nie je potrebné byť expertom na Cisco Secure Firewall, ale praktická skúsenosť s firewallmi, bezpečnostnými politikami alebo správou sietí je výhodou.

Na workshop je potrebné priniesť si vlastný notebook.

Čo si účastníci odnesú

Po absolvovaní labu budú účastníci lepšie rozumieť tomu, ako Cisco Secure Firewall 10.0 pomáha riešiť moderné bezpečnostné výzvy: ochranu používateľov a aplikácií, kontrolu šifrovanej komunikácie, bezpečné pripojenie pobočiek, vzdialený prístup, prácu s identitou a efektívnejšiu správu firewallových politík.

Cieľom je, aby účastníci neodišli len s teoretickým prehľadom, ale s praktickou skúsenosťou, ktorú môžu využiť pri návrhu riešení, diskusii so zákazníkmi alebo pri vlastnom nasadení Cisco Secure Firewall.

Cisco Secure Firewall Workshop - Foundation

Experience the latest innovations in Cisco Secure Firewall 10.0 in this lab. Discover how the Encrypted Visibility Engine (EVE) enables threat detection in encrypted traffic, while AI-driven SnortML provides protection against signature-less attacks. Take advantage of expanded SD-WAN features and improved OT security with advanced access control and containment. Seamless Splunk integration delivers robust security analytics for effective incident response. This lab will help you build the knowledge and skills needed to highlight the strengths of Cisco Secure Firewall 10.0.

Cisco Firewall Test Drive 10.0 - Foundation - Jump Solutions

Experience the latest innovations in Cisco Secure Firewall 10.0 in this lab. Discover how the Encrypted Visibility Engine (EVE) enables threat detection in encrypted traffic, while AI-driven SnortML provides protection against signature-less attacks. Take advantage of expanded SD-WAN features and improved OT security with advanced access control and containment. This lab will help you build the knowledge and skills needed to highlight the strengths of Cisco Secure Firewall 10.0.

Cisco Firewall 10.0 Basic lab

Csico Secure Firewall  10.0 Basic Lab

• Initial Configuration
• FMC configuration
•     Network Object creation and Variable Set
• Security Zones
• Basic Access Control
• Device registration
• Platform settings
• Network Configuration
• Interface, Routes and NAT
• Threat Configuration
• Network Discovery policy
• Malware & File policy
• Decryption policy
• Intrusion/Network Analysis policy
• Access Control
• Access Control Policy Settings
• Rule
• Encrypted Visibility Engine

Cisco Firewall 10.0 Advanced lab

Cisco Secure Firewall 10.0 Advanced LabAdvanced

• CSDAC in FMC
• Zero Trust Access (ZTA)
• Secure Firewall with SD-WAN Capabilities
• PBR with SGT/User Identity
• VRF Support for DVTI using SD-WAN Wizard
• SD-WAN Summary Dashboard
• Site to Site VPN Dashboard
• Packet-Tracer in Firewall Threat Defense
• Remote Access VPN Dashboard
• hreat Features in 10.0

• • AI Assistant & Policy Analyzer and Optimizer

Foundation FW 10

Aricoma FTD 1

Aricoma FTD 2

SaskPoly Secure Firewall Foundation

Today’s modern organizations are struggling to safely enable business innovation at breakneck speeds while at the same time mitigating the risks to digital resilience posed by frontier AI models discovering and exploiting vulnerabilities at a pace never seen. Organizations need deep visibility into Users, Device and Applications across the entire organization and the power to enforce security controls at every place in the network.

This lab is intended for Sask Poly team members who are new to Cisco Secure Firewall or who would like to brush up on the core capabilities. As part of the lab you will work through staging the Firewall Management Center, adding Secure Firewalls and the configuration of routing, NAT, firewall rules, IPS, malware policies and more!

There is also a Secure Firewall Advanced lab available to be completed later this week and can be scheduled upon request in the future.

Experience the latest innovations in Cisco Secure Firewall 10.0 in this lab. Discover how the Encrypted Visibility Engine (EVE) enables threat detection in encrypted traffic, while AI-driven SnortML provides protection against signature-less attacks. Take advantage of expanded SD-WAN features and improved OT security with advanced access control and containment. Seamless Splunk integration delivers robust security analytics for effective incident response. This lab will help you build the knowledge and skills needed to highlight the strengths of Cisco Secure Firewall 10.0.

Advanced FW 10

NSW Police Firewall Foundation Session 2

SaskPoly Secure Firewall Advanced Lab

Today’s modern organizations are struggling to safely enable business innovation at breakneck speeds while at the same time mitigating the risks to digital resilience posed by frontier AI models discovering and exploiting vulnerabilities at a pace never seen. Organizations need deep visibility into Users, Device and Applications across the entire organization and the power to enforce security controls at every place in the network.

This lab is intended for SaskPoly engineers with experience with Cisco Secure Firewall to experience the latest innovations in Cisco Secure Firewall 10.0 in this Advanced lab. There is also a Cisco Secure Firewall Foundation lab available for team members new to Secure Firewall to walk through the full setup process, after which the Secure Firewall Advanced lab is available as well for the whole group.

Discover how the Encrypted Visibility Engine (EVE) enables threat detection in encrypted traffic, while AI-driven SnortML provides protection against signature-less attacks. Take advantage of expanded SD-WAN features and improved OT security with advanced access control and containment. Seamless Splunk integration delivers robust security analytics for effective incident response. This lab will help you build the knowledge and skills needed to highlight the strengths of Cisco Secure Firewall 10.0.

[WEG] Cisco Secure Firewall Foundation workshop

Firewall Test Drive Foundation - AP - Universitas Riau

Firewall 10.0 workshop - Tech Data HK with customer

FTD2805F

FTD

Cisco Secure Firewall Threat Defense Basic Lab - Japan

NSW Police Advanced Firewall Session 1

20260603_Cisco Secure Firewall Threat Defense Basic Lab - Japan

Firewall Foundation 10.0 - PVT Hybrid Stockholm

There are a number of scenarios available which are outlined below. Users should start at the beginning which will take you through initial setup of the FMC, device registration, zone and interface setup, routing and NAT policies. You can then proceed to configuring threat protection such as Discovery policy, Intrusion policy using Snort 3, Malware & File policy, Security Intelligence, Decryption policy and finally Access Control rules and advanced settings.

To accomplish these labs, we will use the dCloud lab environment. There are a number of VMs deployed including Firewall Management Center (FMC), FTD devices, as well as Windows Domain Controllers and other Windows and Linux hosts.

List of Lab Scenarios

• Initial Configuration
  • FMC configuration
  • Network Object creation and Variable Set
  • Security Zones
  • Basic Access Control
  • Device registration
  • Platform settings
• Network Configuration
  • Interface, Routes and NAT
• Threat Configuration
  • Network Discovery policy
  • Malware & File policy
  • Decryption policy
  • Intrusion/Network Analysis policy
• Access Control
  • Access Control Policy Settings
  • Rules
  • Encrypted Visibility Engine