Featured Posts

Various network nodes with security locks, representing encrypted traffic visibility
Network Security

How To Investigate Encrypted Traffic Without Decrypting It 

Most malicious traffic is encrypted, and in real environments, you usually don’t have the keys to inspect it. You can still investigate encrypted traffic effectively by ...

Read More
Representation of lateral movement: attack spreads through a network from a central point
Network Security

How To Detect Lateral Movement: A Step-by-Step Guide 

Blocks of data in a digital environment. Most of the blocks are clear but one is red, representing AI-powered anomaly detection
NDR

How Network Anomaly Detection Works (And Why It Matters)

All Posts

joanna
Security Operations

FireSIGHT Integration – Updated 2017

Since I wrote my last blog on FireSIGHT integration, a lot has changed with Scrutinizer. We have a new

Read More
Network Operations

Cisco Zone-Based Firewall Reporting

Today, I will be talking about the Cisco Zone-Based Firewall, including their differences and advantages compared to a Cisco

Read More
Configuration

Cisco ASA vs. Palo Alto

Firewalls play a critical role in protecting an organization’s network from a never-ending list of Internet-borne threats. Firewall selection

Read More
Network Operations

Exporting NetFlow or IPFIX

Is your engineering team trying to decide if you should be exporting NetFlow or IPFIX? This is the area

Read More
Network Operations

How to run Cisco ASA ACL Reports: Netflow Security Event Logging

In this blog I’ll show you how to use Cisco ASA NSEL (aka Cisco ASA NetFlow) reporting to monitor

Read More