Information Technology

Cisco® Implementing Automation for Cisco® Security Solutions v1.0 (SAUI)

Instructor-Led 11 Agenda

Description

This course demonstrates the tools and the benefits of leveraging programmability and automation in Cisco Security Solutions, including Cisco Firepower Management Center, Cisco Firepower Threat Defense, Cisco ISE, Cisco pxGrid, Cisco Stealthwatch Enterprise, Cisco Stealthwatch Cloud, Cisco Umbrella, Cisco AMP, Cisco Threat grid, and Cisco Security Management Appliances. Students will learn how to use the API for each Cisco security solution and specific applications of when the API benefits IT security content.

Course Overview

Course Objective

Upon completing this course, students will be able to meet these objectives:
Understand the overall architecture of the Cisco security solutions and how APIs help enable security
Understand how to use Cisco Firepower APIs
Understand how pxGrid APIs function and their benefits
Understand what capabilities the Cisco Stealthwatch APIs offer and construct API requests to them for configuration changes and auditing purposes
Understand the features and benefits of using Cisco Stealthwatch Cloud APIs
Learn how to use the Cisco Umbrella Investigate API
Understand the Functionality provided by Cisco AMP and its APIs
Learn how to use Cisco Threat Grid APIs to analyze, search, and dispose of threats

Who Should Attend

Channel and Customer
Engineers
Network Engineer
System Engineer
Wireless Engineer
Consulting Systems Engineer
Technical Solutions Architect
Network Admisnistrator
Wireless Design Engineer
Network Manager
Channel SEs
Sales Engineer
Channel AMs
Account Manager

Introducing Cisco Security APIs Lesson Id 1

Introducing Cisco Security APIs

Consuming Cisco Advanced Malware Protection APIs Lesson Id 2

Consuming Cisco Advanced Malware Protection APIs

Using Cisco ISE Lesson Id 3

Using Cisco ISE

Using Cisco pxGrid APIs Lesson Id 4

Using Cisco pxGrid APIs

Using Cisco Threat Grid APIs Lesson Id 5

Using Cisco Threat Grid APIs

Investigating Cisco Umbrella Security Data Programmatically Lesson Id 6

Investigating Cisco Umbrella Security Data Programmatically

Exploring Cisco Umbrella Reporting and Enforcement APIs Lesson Id 7

Exploring Cisco Umbrella Reporting and Enforcement APIs

Automating Security with Cisco Firepower APIs Lesson Id 8

Automating Security with Cisco Firepower APIs

Operationalizing Cisco Stealthwatch and Its API Capabilities Lesson Id 9

Operationalizing Cisco Stealthwatch and Its API Capabilities

Using Cisco Stealthwatch Cloud APIs Lesson Id 10

Using Cisco Stealthwatch Cloud APIs

Describing Cisco Security Management Appliance APIs Lesson Id 11

Describing Cisco Security Management Appliance APIs

Lesson Id	Title	Description
1	Introducing Cisco Security APIs	Role of APIs in Cisco Security Solutions<br />Cisco Firepower, Cisco ISE, Cisco pxGrid, and Cisco Stealthwatch APIs<br />Use cases and security workflow<br />
2	Consuming Cisco Advanced Malware Protection APIs	Cisco AMP overview<br />Cisco AMP endpoint API<br />Cisco AMP use cases and workflows<br />Discovery 1: Query Cisco AMP endpoint APIs for verifying compliance
3	Using Cisco ISE	Introducing Cisco Identity services engine<br />Cisco ISE use cases<br />Cisco ISE APIs
4	Using Cisco pxGrid APIs	Cisco pxGrid overview<br />WebSockets and STOMP messaging protocol<br />Discovery 2: Use the REST API and Cisco pxGrid with Cisco Identity services engine
5	Using Cisco Threat Grid APIs	Cisco threat grid overview<br />Cisco threat grid API<br />Cisco threat grid use cases and workflows<br />Discovery 3: Construct a Python script using the Cisco threat grid API<br />
6	Investigating Cisco Umbrella Security Data Programmatically	Cisco Umbrella investigate API overview<br />Cisco Umbrella investigate API: Details<br />Discovery 4: Query security data with the Cisco Umbrella investigate API<br />
7	Exploring Cisco Umbrella Reporting and Enforcement APIs	Cisco Umbrella reporting and enforcement APIs: Overview<br />Cisco Umbrella reporting and enforcement APIs: Deep dive<br />Discovery 5: Generate reports using the Cisco Umbrella reporting API
8	Automating Security with Cisco Firepower APIs	Review basic constructs of Firewall policy management<br />Design policies for automation<br />Cisco FMC APIs in depth<br />Discovery 6: Explore the Cisco Firepower management center API<br />Cisco FTD automation with ansible<br />Discovery 7: Use ansible to automate Cisco Firepower threat defense configuration<br />Cisco FDM API in depth<br />Discovery 8: Automate Firewall policies using the Cisco Firepower device manager API
9	Operationalizing Cisco Stealthwatch and Its API Capabilities	Cisco Stealthwatch overview<br />Cisco Stealthwatch APIs: Details<br />Discovery 9: Automate alarm policies and create reports using the Cisco Stealthwatch APIs<br />
10	Using Cisco Stealthwatch Cloud APIs	Cisco Stealthwatch Cloud overview<br />Cisco Stealthwatch Cloud APIs: Deep dive<br />Discovery 10: Construct a report using Cisco stealthwatch Cloud APIs<br />
11	Describing Cisco Security Management Appliance APIs	Cisco SMA APIs overview<br />Cisco SMA API<br />Discovery 11: Construct reports using Cisco SMA APIs<br />