Implementing Cisco Intrusion Prevention System (IPS)

Duration

5 days

PREQUISITE

The knowledge and skills that a learner must have before attending this course:

Cisco Certified Network Associate (CCNA) certification

• Interconnecting Cisco Network Devices 1 (ICND1)
• Interconnecting Cisco Network Devices 2 (ICND2)

Cisco Certified Network Associate Security (CCNA Security) certification

• Implementing Cisco IOS Network Security (IINS)
• Working knowledge of the Microsoft Windows operating system

COURSE CONTENT

The Implementing Cisco Intrusion Prevention System (IPS) course is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. It is a five-day instructor-led course aimed at providing network security engineers with the knowledge and skills needed to deploy Cisco IPS-based security solutions. Successful graduates will be able to reduce risk to the IT infrastructure and applications using Cisco IPS features, and provide detailed operations support for the Cisco IPS.

COURSE OBJECTIVE

Upon completing this course, the learner will be able to meet these overall objectives:

• Evaluate products and deployment architectures for the Cisco IPS product line.
• Perform an initial implementation of a Cisco IPS sensor.
• Implement an initial security policy using a Cisco IPS sensor according to local policies and environmental requirements.
• Deploy customized policies to adapt Cisco IPS traffic analysis and response to the target environment.
• Implement a basic Cisco IPS data management and analysis solution.
• Implement complex Cisco IPS policy virtualization, high availability, and high performance solutions according to policy and environmental requirements.
• Perform the initial setup of, and maintain specific Cisco IPS hardware.

WHO SHOULD ATTEND

• Cisco customers who implement and maintain Cisco IPS solutions
• Cisco channel partners who sell, implement, and maintain Cisco IPS solutions
• Cisco systems engineers who support the sale of Cisco IPS solutions

1. Introduction

• Evaluating Intrusion Prevention and Intrusion Detection Systems
• Choosing Cisco IPS Software, Hardware, and Supporting Applications
• Evaluating Network IPS Traffic Analysis Methods
• Evasion Possibilities and Anti-Evasive Countermeasures
• Choosing a Network IPS and IDS Deployment Architecture
• 2. Installing and Maintaining Cisco IPS Sensors
• Integrating into a Network
• Performing the Initial Setup
• Managing Cisco IPS Devices
• 3. Applying Cisco IPS Security Policies
• Configuring Basic Traffic Analysis
• Implementing Cisco IPS Signatures and Responses
• Configuring Signature Engines and the Signature Database
• Deploying Anomaly-Based Operation
• 4. Adapting Traffic Analysis and Response to the Environment
• Customizing Traffic Analysis
• Managing False Positives and False Negatives
• Improving Alarm and Response Quality
• 5. Managing and Analyzing Events
• Installing and Integrating IME with IPS Sensors
• Managing and Investigating Events
• Reporting and Notifications
• Integrating IPS with SMN and MARS
• Using the Cisco IntelliShield Database and Services
• 6. Advanced Solutions
• Using Cisco IPS Virtual Sensors
• Deploying Cisco IPS for High Availability and High Performance
• 7. Configuring and Maintaining Specific IPS Hardware
• ASA AIP SSM and AIP SSC Modules
• ISR IPS AIM and IPS NME Modules
• IDSM-2 Module

Programme scope, delivery arrangements and suitability are confirmed during enquiry.