I don't find a war zone and protection and it's a new topic, interesting and a quite important one.
So this doctor, what we're going to discuss.
The agenda would be.
That border zone protection will be part of the protection overview.
We just have a look.
What are those then, a difference between zone and deed of protection with respect to and OLAP conservation?
These are our task and verifications if possible.
What is this new zone protection overview?
So we know the power supply will soon be any time we want to send any traffic from one side to another
site.
We need to create we need to select the traffic based on the zones.
So segmenting the traffic into functional organizations won't reduce the number catastrophist.
The policy portion of the network exposed the potential to basically zone protection, defend the network
and Gideons planning attacks against subsequent attacks, attempts back at these attempts and attack
that, you know, IP protocol for somebody and maybe just for your internal network or external network
or any time to deal with some kind of, let's say, think and maybe half open session, maybe just sending
the same kind of sending the same technology and things like that.
Reconnaissance is like trying to recover during board scan.
I think we try to discover the internal network back at base attack as well and things like that and
attack.
Those are not known IP protocols like you would Etemad as well.
So these are the production profile we will be creating, which can protect our zone.
And we know in one zone there are multiple networks or interpret what we are doing.
Taylorism protection provided to protect each zone.
You can apply the same profile to similar zones as well, so you can apply the same zone or a different
zone as well.
So what is the no need of protection, of a denial of service, protection, defense, political system
against flood attacks, especially devices that user access from the Internet, such as the Pepsodent
database and protected resources from the special projects to in the in the other end, like this one?
It's a little bit different.
We will see later on what denial services, protection you can protect, protect your internal let's
say you have an e-mail server, you have a database server, all you have like any other server inside
your DMV.
And you would you want to protect your wallet to protect that.
If a certain horse is getting a certain number of requests and after a certain number of requests,
so somebody should not flood that particular horse with an unlimited shipping request or flood them
with so many other attacks that DCP keep your IP attacks, which makes sure that the holes should not
be busy with doing something unnecessarily, which is normally shouldn't the.
So this is the kind of things we can do with a do not you don't actually know literally just a little
bit different between Zoom Zoom and the protection zone protection policy, allow the use of the flood
protection and have the ability.
Basically, what's the difference?
Actually, it can protect you from the flooding.
Flood protection and have the ability to protect against it also and sweep the porch scanning.
Normally these are utility we use as a network.
The Internet will continue to discover what ports are open.
What are the internal networks?
We are, for example, if you want to discover what you have, let's say a network page 192 one sixty
one, and we want to see what IP addresses are used, what eyewitnesses are not in use.
So you can look at IP because each twenty four.
Twenty four will give you.
250, for example, now 250, four people, you don't know how many people are alive or not.
OK, so you can sleep on a boat.
I people like to sleep something like that.
Protocol and a tool will show you which can show that, OK, how many people are alive in your net?
So you don't want to do this and all this kind of reconnaissance attack, so what you can do, you can
do a physical thing, segmentations, overlapping segmentation, DCP non sync package, the production
profile we have, that's performance impact since they are applied precession and do not engage people
in the zone protection.
If you want to apply the protection, of course it can apply to your security policy, but own protection
does not apply to your security policy in general.
OK, so that is why they they have less they are less performances in performance, one for the final
one, they have less impacted as compared to the Beatles one.
Protection, protect them from these these attacks.
OK, do those protection for these.
The protection from the complete, some of the same thing doing production, but also the key difference,
a major difference, the policy can be classified as an aggregate production policy can be aggregate
as well.
So there are two types of profile, a classical classical profile, Aloul, the creation of cash, all
that apply to the single society.
OK, if you just want to apply to the single source I classified, but it's the maximum number of session
rate, but it can be created for traffic matching the policy and then block that single IP address wants
to take threshold.
For example, you say what a particular place inside your DNA, you will not allow more than five tokens
from one particular horse.
And if there are more than five thousand requests from one single IP, you can block that as well.
The aggregate profile allows the creation of maximum 500, but all the packet matching the policy.
The pressure applied to the U.S., but the idea that it would be impacting all the traffic policy,
OK.
So that's the difference between these protection details, protection.
The difference is we discuss the difference as well.
And now we are going into the lab.
All we can do that lab is when I can just only show you on our device.
The things we're talking about, so, for example, should we create a profile here?
OK, I'll show you in a minute as well.
OK, and then you apply to the zone here, the dose related, you can see the dose protection.
This is what we're talking about.
You see the classified and I'm going to get classified signals and I'm going to get it for the.
And then you go into the policy and you create a detailed policy, for example.
This one.
So that's the lab we are going to configure.
Thank you.