The path to the moon and dose protection that.
But the lab is already created using this technology, and this is what we are going to do, we are
configuring we have a different tool already configured configured BMD is already the Internet is already
computer, but actually is already configured.
We will we also need to consider maybe another zone as well.
So these are different zones of creating.
So first of all, we are creating a profile for the Internet, actually, because this is connected
with the Internet side.
We do not want that.
This holds, for example, if somebody discovers to try to discover something on this network, we should
be getting some kind of.
A lot or we can block this particular thing is we can also block some of the DMZ halls here, for example,
we can block them.
So that's the kind of things we are doing.
So let me show you where we have the.
So this is the production scholarship configuration, guys.
OK.
So first of all, you can see we need to configure our.
It wasn't just a template in Jordan at the interface.
OK, and here we need to configure the Sunni protection.
So what we are going to consider.
OK, untrust production price.
Rafael.
And you can see you can configure.
Think of that.
OK, how many other?
OK, UDP, for example, ICMP, ICMP, BASIX and IP as well, to basically do that, somebody should
be sending.
How many allow me to activate maximum, maximum?
If you have 40000 connections, then you should be getting an alarm.
We can also consider secondly, we can also be looking at some sensible.
And we can create different action, we can.
If somebody use a force can actually be alert of that should be block.
OK.
I'm going to give you an example.
Horsewhip.
Block, for example, so we can do a different.
Judy, people, scanners, what?
Also, you can see like it is over IP spoofed IP address because of the multiple people on the decide
where the traffic is coming from and if somebody spoofing the IP interface, which does not belong to
it, will also provide you at protection, not always protection, for example, using the Internet,
for example, as well.
OK, you see the.
So you can also.
Configure that, but we're not going to configure so advanced, for example, strict IP IP option,
drop routing rules, don't think they should be not be allowed.
For example, there are many of them.
You can read more detail related to your.
Yeah, but these are the ICMP drop, for example.
OK, and you see, that's my profile.
I have created.
This is the profile we have created now you can choose whatever you want to keep your jobs as one.
And then what you you need to apply to the Internet.
Go to the zoo and actually.
And he was only to the Internet.
The unity, just this room is already created, you know, using my profile here.
You see, this is the production profile has been activated.
So you can only apply one profile.
Interesting one, actually, right?
That's what you can do.
Let's now after this, you create a profile and then apply to the zone, actually, then we do commit
to changes in.
Pushing the constitution too divisive as well.
I'm just pushing the Constitution, but before we do that, I just want to go into our external machine.
There you can see this this technology we haven't seen or.
The they one to 65 to 165, 100 network.
I have logged in as well as the machine and what we have learned on the.
If I can bring this.
OK, so you can see I have a tool called Ping Ping.
And you can see if I do the scan right now on my outside interface, on my Internet network, Internet
zoom.
So, look, this it's doing the scanning, though.
That shows that twenty one boards of one IP address, two two point fifty scan in four seconds open.
OK, so these are the tools people can run from the outside.
And can try to discover the network.
These are the ports, the ports we can define, for example.
OK, you can see.
These are the official sports, so you can see it, the scan, I can scan the board and you can see
these are the boards scan from twenty two point sixty five thousand.
It is actually I can see that these are the boards probably.
It's getting ugly, but what do you phone?
Look at is.
I really don't know the meaning of official and unofficial, OK, but I do not see the bite so far,
but you can see I'm running this tool from behind the scene.
OK, but just give me one minute.
I just want to find that information.
OK, the confusion going on right now.
But now we are unable to.
But these are the tools we are running now with the current configuration.
OK, where we can see the ECB board is allowed, we can block that right now, we just allowed it because
I'm pushing the configuration, almost 50 percent is done.
It has not been applied.
We are running the and right now on the on the X-ray machine and the inventory, as you can see, you
start the scan right now again from 022 65000.
And you can see the current port, how many port it has scanned.
I can say.
So we can run the ball scan on the outside now.
It's 75 percent complete.
Just give me a minute.
Now, let me check the board again, if I can, the game.
That's my concept.
It should work or not.
Let me see.
I can run the ball scan again.
No problem from my tool.
Actually, I can run the board scan.
Well, this network.
And see or caught up to 2000, for example.
I can't allow it right now, I just want to, for example, blockade and see what happened.
Just change it to cameraman.
The a contribution to the Pentagon.
Now, the setting, the configuration of the template to the final to take another couple of minutes
to has been submitted.
And let me try to run the port down again and see what happened.
Uh.
Between these two is both.
Exit.
Go to.
Monitor improvs.
That you can only.
It's a tick, people scan.
Horsewhip.
Block, we try to do the whole sweep, for example.
Well.
So basically, you can verify this also from the new SSX with the firewall and you run this commercial
counter global.
You can see you can verify it from these package as well.
OK.
They are increased.
So this is how you can verify it.
Another way you can verify from the can verify the final exam from the exam.
That's what all the documents say that you can verify from the.
That's actually ICMP, right?
So right now, it's not there will be another protest, but this is the configuration, very simple,
create this profile.
And attach, go to the zone and attach.
OK, this is how we touch and then you can verify the of.