Duration
5 days
Course description
This course provides you with techniques to proactively analyze and troubleshoot the ESM CORR-Engine database and HP ArcSight ESM Manager to provide efficient services to your organization. This course teaches you to design and deploy hierarchical, fault tolerant manager implementations as well integration strategies between HP ArcSight ESM and other HP ArcSight appliances such as Logger, Connector Appliance, and the ArcSight Management Center products.
Audience
Typical candidates for this course are System Administratorswho:-Install, administer, maintain and troubleshoot HP ArcSight ESM components-Design and implement integrations between HP ArcSight ESM and other HP ArcSight appliances-Proactively investigate the health of the HP ArcSight ESM CORRE environmentPrerequisites
Have an understanding of:• Common security devices, such as IDS & firewalls• Common network device functions, such as routers, switches, hubs, etc.• TCP/IP functions, such as CIDR blocks, subnets, addressing, communications, etc.• Basic Windows operating system tasks & functions• Possible attack activities, such as scans, man in the middle, sniffing, DoS, etc., and possible abnormal activities, such as worms, Trojans, viruses, etc.• SIEM terminology, such as threat, vulnerability, risk, asset, exposure, safeguards, etc.• 6 months experience administering HP ArcSight ESM• Completed HP ArcSight ESM Administrator
Objectives
This course prepares you to:
- Design, deploy and configure an HP ArcSight ESM multimanager layout for high-availability and fail-over
- Assess and implement integration strategies for HP ArcSight ESM and HP ArcSight appliances
- Provide credentials for HP ArcSight ESM including RADIUS and LDAP/AD
- Use available HP ArcSight and Oracle tools to investigate the health of your installation
- Implement HP ArcSight best practices for backup and recovery for an Oracle 10g database
Programme scope, delivery arrangements and suitability are confirmed during enquiry.