Laserfiche WebLink
Consulting Services Agreement between City of San Leandro and 12/18/2017 <br />ConvergeOne, Inc. for Cisco Firewall Upgrade Project Exhibit A – Page 6 of 11 <br />➢Setup Health Policy <br />○Enable/disable monitoring base on policy usage <br />➢Setup Object Management <br />○Define Network Object <br />○Define Variable Set (Customer will provide RFC1918 for their internal LAN) <br />○Define Security Zones <br />➢Setup Security Intelligence <br />○Network List and Feeds <br />○DNS List and Feeds <br />○URL List and Feeds <br />➢Setup Sinkhole (If applicable) <br />➢Setup Device Management <br />➢Integrate FSM with AD ( Requires AD agent to be installed on Windows 2008+ DC or <br />member 2008+ Server) <br />➢Initial configuration of Firepower IPS <br />➢Initial configuration for AMP <br />➢Join sensors to FMC <br />➢Set the sensors in discovery mode for one week minimum <br />Optimization (After one week) <br />➢Configure IPS with Firepower Recommendation rules <br />➢Configure AMP policy <br />➢Configure access control policy <br />○Build four standard rules and use IPS and AMP policy <br />➢Enable Security Intelligence <br />➢Create local account for FP management <br />➢View logs in FSM for one weeks <br />➢Identify false positives <br />➢Fine tune IPS policies <br />➢Use Geo based policies to block traffic from regions perceived as threats. <br />➢Test Firepower policies <br />○IPS <br />○AMP <br />➢Change mode for SFR module to Inline mode <br />➢Configure FSM for alerting <br />○IPS impact flags <br />○AMP alert <br />➢Discovery alert (if applicable) <br />➢Setup scheduling to automate the following <br />○Reports