Which Cisco network security device supports contextual awareness?
Which Cisco network security device supports contextual awareness?
Firepower is a Cisco network security device that supports contextual awareness. It provides real-time visibility and control over users, applications, devices, threats, and vulnerabilities in the network. This capability allows it to offer effective threat prevention with full contextual awareness, ensuring robust network security.
https://blogs.cisco.com/security/a-visibility-driven-approach-to-next-generation-firewalls
D: Firepower The question is asking about a "network device" that supports Firepower supports contextual awareness With real-time visibility, gain more insight into and control over the users, applications, devices, threats, and vulnerabilities in your network https://www.cisco.com/c/en/us/products/collateral/security/ngips/datasheet-c78-742472.html
I say D - Firepower. "Provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response." page 11: https://www.cisco.com/c/dam/m/en_sg/cisco-start/assets/pdfs/Cisco_Start_Catalog_1612AP_p08-13Security_LDSL_1211.pdf
Actually second thoughts, it could be A, as the question just asks for "contextual awareness" not "full contextual awareness".... yep knowing that proves that I know my Cisco Security stuff!
It is A
Correct answer A: Cisco Identity Services Engine (ISE) is a network security device that supports contextual awareness. Cisco ISE provides contextual-based access control, allowing organizations to define and enforce security policies based on various contextual factors such as user identity, device type, location, time of access, and more. This enables organizations to establish dynamic, policy-driven access control that adapts to changing network conditions and user requirements.
Both are contextual awareness but only firepower is a Network security device , Cisco Identity Services Engine (ISE) is a security policy management platform
Cisco ISE also is a PHYSICAL network security device that can be deployed in your typical data center. https://www.cisco.com/c/en/us/td/docs/security/ise/1-0/install_guide/ise10_ovr.html#wp1106751
stupid trick question: both could be correct Cisco Firepower NGIPS sets a new standard for network threat protection. It integrates real-time contextual awareness, security automation, advanced malware protection, and superior threat intelligence with industry-leading network intrusion prevention. No other solution offers the visibility, simplicity, openness, and effectiveness required to protect today’s dynamic environments against increasingly sophisticated threats. ISE: evertheless, enabling contextual awareness and micro segmentation, for example, in today’s complex networks has never been more challenging. Enter Cisco Identity Services Engine (ISE), the leader in connecting trusted users and devices to trusted services
With Cisco ISE, your organization will have a centralized security solution that automates context-aware access to connect trusted devices with trusted services. https://www.cisco.com/c/en_sg/products/security/identity-services-engine/index.html#~case-studies
Cisco ISE contextual awareness is a feature of Cisco Identity Services Engine (ISE) that provides context-aware identity management for network access. It determines whether users are accessing the network on an authorized, policy-compliant device and establishes user identity, location, and access history. It also integrates with other security platforms to share identity, device, and network information for better threat detection and response https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_overview.pdf https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/at-a-glance-c45-732858.html