WEBVTT - This file was automatically generated by VIMEO

1
00:00:06.800 --> 00:00:11.900
 Welcome to the last video. Our IPS

2
00:00:10.900 --> 00:00:13.300
 part of an

3
00:00:13.300 --> 00:00:20.100
 exaggeration 500 training video. Call

4
00:00:16.100 --> 00:00:20.500
 Marilyn

5
00:00:20.500 --> 00:00:23.800
 kabalkin LPS sparkle platform

6
00:00:23.800 --> 00:00:26.500
 and housing Commander,

7
00:00:26.500 --> 00:00:31.800
 the intrusion prevention on this platform options for

8
00:00:31.800 --> 00:00:35.200
 now. You can use either North engine

9
00:00:34.200 --> 00:00:38.900
 or you can use the story Kata PS. I

10
00:00:38.900 --> 00:00:41.700
 will show you the snort but just

11
00:00:41.700 --> 00:00:47.200
 really depends

12
00:00:46.200 --> 00:00:48.100
 on what you prefer.

13
00:00:48.800 --> 00:00:51.500
 Some nice industrious as

14
00:00:51.500 --> 00:00:54.400
 Community or up strongly advocating. The

15
00:00:54.400 --> 00:00:57.300
 story and we are seeing the store

16
00:00:57.300 --> 00:01:01.400
 each other presents to grow over time, or snort

17
00:01:00.400 --> 00:01:03.400
 snort, to

18
00:01:03.400 --> 00:01:07.100
 steal the most popular IPS and you

19
00:01:06.100 --> 00:01:11.200
 can spare ribs or signatures between checkpoints

20
00:01:09.200 --> 00:01:14.500
 is called smart,

21
00:01:12.500 --> 00:01:16.900
 space. I

22
00:01:15.900 --> 00:01:26.400
 also text

23
00:01:20.400 --> 00:01:26.500
 me

24
00:01:26.500 --> 00:01:29.200
 your number. I'll give it to you and how is Katie on your

25
00:01:29.200 --> 00:01:31.000
 hard work. These are songs.

26
00:01:32.200 --> 00:01:35.200
 I can't stop what you can

27
00:01:35.200 --> 00:01:36.200
 do with PS 10.

28
00:01:37.400 --> 00:01:42.700
 We are IPS log into

29
00:01:42.700 --> 00:01:43.500
 the madness.

30
00:01:48.400 --> 00:01:51.700
 In order to use the IPS, you

31
00:01:51.700 --> 00:01:54.600
 need to first check that

32
00:01:54.600 --> 00:01:57.400
 you have. On the back of the manager

33
00:01:57.400 --> 00:02:00.400
 that you have a snort or three cards

34
00:02:00.400 --> 00:02:03.500
 service of a package installer.

35
00:02:03.500 --> 00:02:04.800
 Here I have

36
00:02:06.500 --> 00:02:10.200
 It's not just becomes available packages and

37
00:02:09.200 --> 00:02:12.500
 find the snores are

38
00:02:12.500 --> 00:02:16.900
 so Ricotta and install. Is

39
00:02:16.900 --> 00:02:19.700
 that easy? Then we

40
00:02:19.700 --> 00:02:22.800
 were going on in the last lesson

41
00:02:22.800 --> 00:02:25.400
 about application ID. We were

42
00:02:25.400 --> 00:02:29.200
 talkin. If you remember about the PSNC application

43
00:02:28.200 --> 00:02:34.600
 identification, potential sexual fantasies

44
00:02:32.600 --> 00:02:35.300
 using a

45
00:02:35.300 --> 00:02:38.600
 snort signature has to adjust. Open up idea,

46
00:02:38.600 --> 00:02:41.700
 from snorts to detect the application, which

47
00:02:41.700 --> 00:02:44.500
 has two. I think so far as

48
00:02:44.500 --> 00:02:47.600
 even a Cisco that you cannot use the

49
00:02:47.600 --> 00:02:50.100
 application identification in

50
00:02:50.100 --> 00:02:53.600
 a farmer boys is directly, but eats everything is considered

51
00:02:53.600 --> 00:02:56.500
 through start showing up. Yes. That's that's why I'm doing

52
00:02:56.500 --> 00:03:00.200
 this little show. The application

53
00:02:59.200 --> 00:03:02.400
 navigation congregation as well cuz it's

54
00:03:02.400 --> 00:03:05.700
 just a few more clicks on the IDS and

55
00:03:05.700 --> 00:03:06.400
 regular.

56
00:03:06.500 --> 00:03:09.900
 Yes,, great top to reconfirm

57
00:03:09.900 --> 00:03:12.800
 that we have installed snort as a package on

58
00:03:12.800 --> 00:03:16.200
 our pfSense firewall. Now, let's

59
00:03:15.200 --> 00:03:19.200
 go to Coffee Creations.

60
00:03:18.200 --> 00:03:23.100
 Configuration is done. Click

61
00:03:21.100 --> 00:03:23.800
 on the store.

62
00:03:24.700 --> 00:03:26.400
 First day of some global settings.

63
00:03:27.300 --> 00:03:30.100
 Of course, it's sheer. You enable the

64
00:03:30.100 --> 00:03:32.600
 sub days.

65
00:03:33.700 --> 00:03:36.300
 How are you? So you need to do. You

66
00:03:36.300 --> 00:03:39.100
 want that same article, 3 of

67
00:03:39.100 --> 00:03:42.400
 charge? I mean, there are a commercial updates provided by

68
00:03:42.400 --> 00:03:45.700
 Cisco or Cisco Talos. Their threat Intelligence Center,

69
00:03:45.700 --> 00:03:48.800
 or you can use the community signature.

70
00:03:48.800 --> 00:03:51.700
 It's automatic. And it's free. As

71
00:03:51.700 --> 00:03:54.600
 I said, except those commercial grade

72
00:03:54.600 --> 00:03:57.400
 signatures or rules. That's are from touching

73
00:03:57.400 --> 00:04:01.000
 a real license. Cisco. You hear

74
00:04:00.200 --> 00:04:04.500
 your North user account

75
00:04:03.500 --> 00:04:06.800
 using the smart

76
00:04:06.800 --> 00:04:11.800
 Point Master? Cause this is like an API

77
00:04:09.800 --> 00:04:13.600
 identification for

78
00:04:13.600 --> 00:04:17.100
 your North is able

79
00:04:16.100 --> 00:04:20.700
 to pull the updates from your account

80
00:04:19.700 --> 00:04:22.700
 from the internet. North website

81
00:04:22.700 --> 00:04:24.100
 for Community website.

82
00:04:24.800 --> 00:04:27.400
 And here we need to enable open

83
00:04:27.400 --> 00:04:30.100
 up ID, if we would like to use the

84
00:04:30.100 --> 00:04:34.200
 application to text him as well. So if you

85
00:04:34.200 --> 00:04:38.600
 want to use the application and Jason, and

86
00:04:37.600 --> 00:04:41.500
 from here, we

87
00:04:40.500 --> 00:04:43.500
 can check the update status of

88
00:04:43.500 --> 00:04:46.300
 a snort rules that the snort signatures, we

89
00:04:46.300 --> 00:04:49.200
 can see the yard. There is no

90
00:04:49.200 --> 00:04:54.200
 any alerts currently blocked off. So explain later.

91
00:04:53.200 --> 00:04:58.400
 So you

92
00:04:57.400 --> 00:05:02.200
 can Define what happens from

93
00:05:00.200 --> 00:05:05.700
 IP addresses. IP

94
00:05:03.700 --> 00:05:06.400
 addresses in

95
00:05:06.400 --> 00:05:10.200
 this past, least the real be owls

96
00:05:09.200 --> 00:05:12.000
 and they will never be bought.

97
00:05:16.100 --> 00:05:19.500
 Suppression of suppression is you need to find

98
00:05:19.500 --> 00:05:22.700
 some suppression rules to import a

99
00:05:22.700 --> 00:05:25.600
 temporary. Supresores. If there

100
00:05:25.600 --> 00:05:28.500
 is enough snow. It's not true. What is generating

101
00:05:28.500 --> 00:05:32.400
 a lot of followers in a short time. You're

102
00:05:31.400 --> 00:05:34.600
 just some kind of for scanning Us

103
00:05:34.600 --> 00:05:37.800
 Toys R Us. So you can Define the suppression rules

104
00:05:37.800 --> 00:05:41.200
 of what they are, but it's

105
00:05:41.200 --> 00:05:44.600
 not on a every pocket that triggers signature, but

106
00:05:44.600 --> 00:05:47.200
 give me alerts every one hour or something like that.

107
00:05:49.900 --> 00:05:52.300
 I believe these are list the

108
00:05:52.300 --> 00:05:55.500
 four deep for my IP address already. So kind

109
00:05:55.500 --> 00:05:58.600
 of the community and

110
00:05:58.600 --> 00:06:01.500
 updates you can use your

111
00:06:01.500 --> 00:06:04.200
 own if you want. These are kind of

112
00:06:04.200 --> 00:06:09.500
 internet, smart

113
00:06:07.500 --> 00:06:11.000
 TV IP

114
00:06:10.100 --> 00:06:13.700
 address. That's your network is communicating with

115
00:06:13.700 --> 00:06:16.600
 an address from disagreeable to

116
00:06:16.600 --> 00:06:19.400
 you, so we can walk this traffic and Tyler

117
00:06:19.400 --> 00:06:22.400
 in order to

118
00:06:22.400 --> 00:06:26.400
 enable its on the particular interface. For

119
00:06:25.400 --> 00:06:28.200
 example,, can I have

120
00:06:28.200 --> 00:06:31.400
 two weeks? I see, you're my father wanted one, so

121
00:06:31.400 --> 00:06:34.100
 I can my neighbors, and I want, and I will

122
00:06:34.100 --> 00:06:37.700
 do the same on the line. So, if I'm able to turn a man's Northville

123
00:06:37.700 --> 00:06:40.700
 more traffic, this is coming through. My wanting

124
00:06:40.700 --> 00:06:43.600
 to face. That is ingress to my manager, phase

125
00:06:43.600 --> 00:06:46.200
 wiring, is working to freeze, but if I'm able

126
00:06:46.200 --> 00:06:46.700
 to come over,

127
00:06:47.500 --> 00:06:50.800
 I wish I knew then Northville

128
00:06:50.800 --> 00:06:53.200
 inspect Pockets. Also coming in

129
00:06:53.200 --> 00:06:56.300
 the morning, to see the twins traffic. That

130
00:06:56.300 --> 00:06:58.200
 is going out of -4.

131
00:07:01.200 --> 00:07:04.300
 She's all that we

132
00:07:04.300 --> 00:07:06.400
 need now for an interface.

133
00:07:07.400 --> 00:07:10.200
 For some future, if we

134
00:07:10.200 --> 00:07:13.700
 leave it. So, like this without any further changes

135
00:07:13.700 --> 00:07:17.700
 to snort will not walk at, it's just the text.

136
00:07:18.400 --> 00:07:21.200
 If we click here to watch

137
00:07:21.200 --> 00:07:24.800
 offenders and if you leave it in the so-called Legacy

138
00:07:24.800 --> 00:07:27.400
 mod means that every smart alert.

139
00:07:27.400 --> 00:07:31.900
 Every hostage is causing a snorkeler. So,

140
00:07:30.900 --> 00:07:33.400
 and we'll be able to see

141
00:07:33.400 --> 00:07:38.500
 these costs, and we

142
00:07:38.500 --> 00:07:41.200
 can afford the cost from the walkways. We

143
00:07:41.200 --> 00:07:44.300
 can Define how long in the

144
00:07:44.300 --> 00:07:48.600
 blood Queen. This is

145
00:07:48.600 --> 00:07:51.500
 actually a configuration for an

146
00:07:51.500 --> 00:07:55.100
 oxymoron means

147
00:07:54.100 --> 00:07:57.600
 Northville actually,

148
00:07:57.600 --> 00:08:00.500
 get only a copy of pockets and then decide what

149
00:08:00.500 --> 00:08:03.700
 to do with them, and then inform the pfSense firewall

150
00:08:03.700 --> 00:08:05.400
 into extra weight.

151
00:08:07.400 --> 00:08:10.500
 On the other hand, even more dissimilar

152
00:08:10.500 --> 00:08:13.800
 as the more than can

153
00:08:13.800 --> 00:08:16.500
 be found on the commercial products. Just

154
00:08:16.500 --> 00:08:20.800
 don't like that place is called, which means

155
00:08:20.800 --> 00:08:24.700
 the store change in is installed, but

156
00:08:24.700 --> 00:08:38.400
 I'm not sure if they have

157
00:08:38.400 --> 00:08:43.800
 the sort engine position is between a Metro

158
00:08:42.800 --> 00:08:45.500
 driver and the colonel

159
00:08:45.500 --> 00:08:49.400
 has not

160
00:08:49.400 --> 00:08:52.700
 been able to

161
00:08:52.700 --> 00:08:55.900
 immediately block the traffic in the

162
00:08:55.900 --> 00:08:58.900
 NY mods. We can set individual signatures

163
00:08:58.900 --> 00:09:01.500
 whether it's a walk or our four hour

164
00:09:01.500 --> 00:09:04.600
 traffic. So this means that we do

165
00:09:04.600 --> 00:09:07.200
 not have because if we do so I can see more

166
00:09:07.300 --> 00:09:07.800
 Then.

167
00:09:08.900 --> 00:09:11.200
 Certified. The address to

168
00:09:11.200 --> 00:09:15.300
 block in legacy mode. Everyone will

169
00:09:14.300 --> 00:09:18.500
 cause the snort alerts will be on

170
00:09:17.500 --> 00:09:20.300
 the other hand on the inline mod.

171
00:09:20.300 --> 00:09:23.500
 We can figure out whether this more

172
00:09:23.500 --> 00:09:26.100
 to go walk, the traffic or not on a secret room.

173
00:09:29.500 --> 00:09:32.400
 Which is in the inline mode, I'll go

174
00:09:32.400 --> 00:09:35.100
 on the community. There is a lot of

175
00:09:35.100 --> 00:09:38.700
 rumors that there's a lot of complaints on the inline Maldives.

176
00:09:38.700 --> 00:09:42.000
 It really works with a certain type of network interface

177
00:09:41.000 --> 00:09:42.600
 drivers.

178
00:09:43.100 --> 00:09:46.500
 Is Cameron Champ song where he

179
00:09:46.500 --> 00:09:49.800
 became York in line mode

180
00:09:49.800 --> 00:09:53.200
 with your Hardware with a Carson beans, expect

181
00:09:52.200 --> 00:09:56.000
 problem cuz I

182
00:09:55.100 --> 00:09:58.100
 haven't used in wine mode because there is a

183
00:09:58.100 --> 00:10:02.500
 lot more options to show you. Okay?

184
00:10:08.700 --> 00:10:11.200
 How can I need to turn on the snow. I

185
00:10:11.200 --> 00:10:17.400
 need to start notes on this particular operation on

186
00:10:16.400 --> 00:10:19.600
 the line. So I

187
00:10:19.600 --> 00:10:22.200
 have to tweak everything from

188
00:10:22.200 --> 00:10:24.200
 the beginning of the another Ranger.

189
00:10:26.500 --> 00:10:34.300
 Let's see

190
00:10:33.300 --> 00:10:37.600
 what we can figure out where

191
00:10:36.600 --> 00:10:40.100
 we have an interface. I'll see

192
00:10:39.100 --> 00:10:43.100
 what he can configure. Fresno Coin in diesel

193
00:10:42.100 --> 00:10:45.500
 prices. We have the categories. We

194
00:10:45.500 --> 00:10:47.500
 need to enable signature categories.

195
00:10:48.500 --> 00:10:51.500
 Select all simple. Please know

196
00:10:51.500 --> 00:10:54.400
 these open up ID rule. These are rules for the

197
00:10:54.400 --> 00:10:57.900
 application for the application of instigation. And these

198
00:10:57.900 --> 00:10:59.400
 are rules for attacks.

199
00:10:59.700 --> 00:11:02.300
 I can either use these are

200
00:11:02.300 --> 00:11:05.200
 not the rules. I'm sorry. If these are categories. Only, I can

201
00:11:05.200 --> 00:11:08.200
 either select certain categories for I

202
00:11:08.200 --> 00:11:11.200
 can use the policy. This is the same amount as we

203
00:11:11.200 --> 00:11:16.100
 still on the Firepower of the Cisco. So I can

204
00:11:15.100 --> 00:11:19.500
 say it. What I want the balance is going

205
00:11:19.500 --> 00:11:22.400
 this balance of connectivity and security or maximum security

206
00:11:22.400 --> 00:11:31.900
 or connectivity your security. They have

207
00:11:31.900 --> 00:11:36.600
 the same meaning. So will automatically

208
00:11:35.600 --> 00:11:39.100
 enabled certain rules

209
00:11:38.100 --> 00:11:41.500
 and that actions for the rules.

210
00:11:41.500 --> 00:11:45.200
 I can choose to set for alert

211
00:11:44.200 --> 00:11:48.400
 action for all my rules or what

212
00:11:47.400 --> 00:11:50.700
 the policy Lisbon supposed

213
00:11:50.700 --> 00:11:53.700
 to decide which role to have our protection and

214
00:11:53.700 --> 00:11:56.300
 which roles will have a truck or what

215
00:11:57.100 --> 00:11:59.100
 8 Mile and Dequindre.

216
00:12:01.100 --> 00:12:04.500
 Please know that I cannot choose the main categories

217
00:12:04.500 --> 00:12:07.300
 anymore. I cannot click on

218
00:12:07.300 --> 00:12:10.900
 them. While I have selected the IPS policy only, if

219
00:12:10.900 --> 00:12:13.700
 I do not have policy and check the IPS policy

220
00:12:13.700 --> 00:12:17.300
 that I'm free to choose the categories. If

221
00:12:16.300 --> 00:12:19.400
 I'm using the policy policy will take care

222
00:12:19.400 --> 00:12:23.600
 of it. So I know if

223
00:12:23.600 --> 00:12:26.400
 I'm working tomorrow. I have long

224
00:12:26.400 --> 00:12:29.300
 rolls, a CDs or variable, please

225
00:12:29.300 --> 00:12:33.000
 note variables. Remember these from The Cisco demonstration,

226
00:12:32.500 --> 00:12:35.600
 of course, you can configure them here,

227
00:12:35.600 --> 00:12:38.300
 you can have different set of variables for our

228
00:12:38.300 --> 00:12:41.300
 barrier pfSense firewall interface for

229
00:12:41.300 --> 00:12:47.700
 someplace. I can run in 1/4, Mile

230
00:12:47.700 --> 00:12:51.400
 on East North

231
00:12:51.400 --> 00:12:54.600
 Bonneville Salt the same as on a Cisco because they're

232
00:12:54.600 --> 00:12:56.800
 not liable to turn off PS4.

233
00:12:58.900 --> 00:13:02.000
 Professors pizza, right

234
00:13:01.600 --> 00:13:08.600
 Network analyzers. Policy on a similar normalization

235
00:13:05.600 --> 00:13:09.000
 of

236
00:13:08.200 --> 00:13:11.800
 the traffic. Sign of the IPS are the

237
00:13:11.800 --> 00:13:14.600
 traffic through the same eyes as a

238
00:13:14.600 --> 00:13:18.100
 potential victim of an attack, which has

239
00:13:17.100 --> 00:13:20.400
 better accuracy, of detection of

240
00:13:20.400 --> 00:13:23.800
 an attacks. And also the process

241
00:13:23.800 --> 00:13:26.500
 servers are responsible for modifying, your

242
00:13:26.500 --> 00:13:29.800
 normalizing, traffic court, removing some animals from

243
00:13:29.800 --> 00:13:33.000
 the traffic, cock blocking, traffic,. Normally.

244
00:13:32.600 --> 00:13:37.700
 I don't

245
00:13:37.700 --> 00:13:40.600
 know what everything. What is not according to

246
00:13:40.600 --> 00:13:43.200
 the RFC Sanders for a

247
00:13:43.200 --> 00:13:48.400
 particular protocol. Can be. I go

248
00:13:48.400 --> 00:13:51.300
 to the monroes. I see my rules. Can

249
00:13:51.300 --> 00:13:54.200
 I see my signature. Let me see

250
00:13:54.200 --> 00:13:57.400
 my action for a road so I

251
00:13:57.400 --> 00:13:58.100
 can actually,

252
00:13:58.900 --> 00:14:02.300
 Here's our categories. For example.

253
00:14:04.800 --> 00:14:08.200
 Actually through time, you see, there is a state of

254
00:14:07.200 --> 00:14:11.600
 what is a

255
00:14:10.600 --> 00:14:13.200
 different disable. This miserable is

256
00:14:13.200 --> 00:14:17.500
 disabled, but I can click here and choose the table.

257
00:14:21.700 --> 00:14:24.200
 And then I can do is the action of the Wild.

258
00:14:25.200 --> 00:14:28.300
 I can drop the silent drop in tactics and it

259
00:14:28.300 --> 00:14:32.000
 appears set to decline the server and allergist generate

260
00:14:31.100 --> 00:14:32.500
 the other.

261
00:14:33.100 --> 00:14:35.800
 Indie folk. Just leave it to the policy.

262
00:14:37.400 --> 00:14:40.200
 Throughout her. So I

263
00:14:40.200 --> 00:14:43.300
 can be reached at

264
00:14:43.300 --> 00:14:46.500
 collection since I have

265
00:14:46.500 --> 00:14:49.300
 configured on the interface setting,

266
00:14:49.300 --> 00:14:52.400
 since I have configured it in line, more than an able to

267
00:14:52.400 --> 00:14:55.200
 actually choose actions for my

268
00:14:55.200 --> 00:14:58.200
 rules on a row by row by row by the

269
00:14:58.200 --> 00:15:02.800
 store for each individual room, that I can choose an action days. That

270
00:15:02.800 --> 00:15:05.700
 I'm not using the NY Mall, the Legacy more

271
00:15:05.700 --> 00:15:09.100
 than a little block. Every IP

272
00:15:08.100 --> 00:15:11.800
 address that is causing an alarm. Now, when

273
00:15:11.800 --> 00:15:16.000
 I go to, now, when

274
00:15:15.100 --> 00:15:19.200
 I go to my room,

275
00:15:18.200 --> 00:15:21.300
 now, you can see that

276
00:15:21.300 --> 00:15:24.700
 I cannot change direction anymore because there

277
00:15:24.700 --> 00:15:29.500
 is only available. I will call

278
00:15:29.500 --> 00:15:32.700
 the Aurora actionaid will be found itself

279
00:15:32.700 --> 00:15:34.500
 on the block list.

280
00:15:35.600 --> 00:15:38.100
 I know I promised you last time. So show you the

281
00:15:38.100 --> 00:15:43.100
 application I need. And yes, very North

282
00:15:41.100 --> 00:15:45.500
 North related

283
00:15:44.500 --> 00:15:48.200
 to actually show you

284
00:15:48.200 --> 00:15:51.900
 this song for on the 160 because

285
00:15:51.900 --> 00:15:54.200
 it's easier to

286
00:15:54.200 --> 00:16:03.300
 walk. So

287
00:15:58.300 --> 00:16:03.500
 I

288
00:16:03.500 --> 00:16:06.500
 need to

289
00:16:06.500 --> 00:16:09.600
 make sure that I will select all open up ID, Roe.

290
00:16:09.600 --> 00:16:15.900
 What I

291
00:16:15.900 --> 00:16:18.300
 can do with the application ID. I

292
00:16:18.300 --> 00:16:23.400
 cannot be compared to commercial products

293
00:16:22.400 --> 00:16:27.100
 such as I cannot

294
00:16:26.100 --> 00:16:29.600
 hear, actually found the

295
00:16:29.600 --> 00:16:32.700
 application ID functionality to my firewall

296
00:16:32.700 --> 00:16:34.500
 rules, which means I cannot say

297
00:16:35.400 --> 00:16:38.700
 Traffic from this IP address. This IP

298
00:16:38.700 --> 00:16:41.200
 address is always only for a

299
00:16:41.200 --> 00:16:43.800
 YouTube. I cannot do that. I can only

300
00:16:49.200 --> 00:16:50.200
 I don't know.

301
00:16:55.300 --> 00:17:02.200
 Restart the

302
00:17:01.200 --> 00:17:08.700
 song. I'll

303
00:17:08.700 --> 00:17:11.600
 tell him that. I procured the same as for the 5-hour

304
00:17:11.600 --> 00:17:21.500
 25, existing connections

305
00:17:20.500 --> 00:17:24.000
 connection, to

306
00:17:23.200 --> 00:17:26.000
 be blocked while the store to get a hold of

307
00:17:26.700 --> 00:17:29.500
 North. Road means

308
00:17:29.500 --> 00:17:33.700
 that you will lose temporary communication

309
00:17:32.700 --> 00:17:44.500
 through the box, but they somehow

310
00:17:44.500 --> 00:17:46.100
 I go to laundry room.

311
00:17:49.100 --> 00:17:54.100
 Open up ID. Social networks, social

312
00:17:52.100 --> 00:17:56.100
 networking rules and

313
00:17:55.100 --> 00:17:58.200
 I can choose what the action will be.

314
00:17:58.200 --> 00:18:01.800
 So for example, Myspace do I want to have a space

315
00:18:01.800 --> 00:18:04.300
 from my organization through the

316
00:18:04.300 --> 00:18:07.300
 internet? I can't say no, just

317
00:18:07.300 --> 00:18:07.700
 drop it.

318
00:18:09.100 --> 00:18:13.300
 Okay. So now I'm effectively dropping my space communication

319
00:18:12.300 --> 00:18:15.300
 with the internet. That's all

320
00:18:15.300 --> 00:18:18.400
 what I can do about it. I cannot configure as I can do

321
00:18:18.400 --> 00:18:21.600
 with the power. Of course that point I cannot say. Okay,

322
00:18:21.600 --> 00:18:24.700
 but Marcus think, users can use my my space

323
00:18:24.700 --> 00:18:27.800
 or Universe originating from marketing. Southwest

324
00:18:27.800 --> 00:18:30.500
 can use my space but users from

325
00:18:30.500 --> 00:18:33.100
 the sales department, cannot use my

326
00:18:33.100 --> 00:18:41.600
 face. I do not have that kind of authority and I can

327
00:18:37.600 --> 00:18:43.300
 just

328
00:18:41.300 --> 00:18:44.800
 see what how,

329
00:18:44.800 --> 00:18:48.600
 what's matching to

330
00:18:47.600 --> 00:18:53.200
 change the laundry out, both very

331
00:18:50.200 --> 00:18:53.700
 primitive

332
00:18:53.700 --> 00:18:57.500
 and a simple, but it's a Community

333
00:18:56.500 --> 00:18:59.800
 Edition free products developed

334
00:18:59.800 --> 00:19:03.700
 by communities developed by people are actually

335
00:19:03.700 --> 00:19:06.900
 willing to provide some piece

336
00:19:06.900 --> 00:19:09.000
 of copper to the community and they

337
00:19:09.100 --> 00:19:12.500
 19 * to make the money directly from. I mean,

338
00:19:12.500 --> 00:19:15.900
 you can pay the sport but the

339
00:19:15.900 --> 00:19:18.200
 product is not the commercial grade products. So

340
00:19:18.200 --> 00:19:22.900
 that's why it's letting some features. We do

341
00:19:22.900 --> 00:19:31.800
 not need to do something. It's a

342
00:19:31.800 --> 00:19:34.700
 great solution. Will have some budget

343
00:19:34.700 --> 00:19:37.700
 constraints. And this one is real quick, far,

344
00:19:37.700 --> 00:19:41.300
 more effectively and easy to set up a viable IPS

345
00:19:40.300 --> 00:19:43.900
 the web proxy war bonds,

346
00:19:43.900 --> 00:19:47.700
 the Ravens. $0 for

347
00:19:47.700 --> 00:19:51.500
 the Harver Harver

348
00:19:50.500 --> 00:19:53.700
 can be built by yourself or

349
00:19:53.700 --> 00:19:59.100
 you can purchase a PC if

350
00:19:58.100 --> 00:20:01.800
 you want, so he's actually very simple

351
00:20:01.800 --> 00:20:02.500
 to set up.

352
00:20:06.600 --> 00:20:09.600
 Something just leave work, at least as a temporary solution

353
00:20:09.600 --> 00:20:13.300
 until we were able to purchase commercial. Greater

354
00:20:12.300 --> 00:20:17.500
 offense, regarding

355
00:20:17.500 --> 00:20:20.100
 the IPS wrap it

356
00:20:20.100 --> 00:20:20.200
 up.
