Duration
3 days
Overview
Trend Micro™ Deep Security™ 20 Training for Certified Professionals is a three-day, instructor-led training course. Participants will learn how to use Trend Micro™ Deep Security™ software for advanced hybrid cloud security on physical, virtual, and cloudbased servers. This course details the basic architecture of the on-premises Deep Security solution, deployment options, protection modules, policy configuration, and administration of the system. As part of the course, participants will deploy Deep Security agents on a variety of Windows® Server platforms, as well as the Deep Security Virtual Appliance. Best practices and troubleshooting details for successful implementation and long-term maintenance of the system are discussed.
Audience
This course is designed for IT professionals who are responsible for protecting users, networks, data centers, and cloud resources from data breaches and targeted attacks. This includes those responsible for:
- Operations
- Deployment
- Security Response
- Compliance
- Support
Prerequisite
There are no prerequisites to attend this course, however, working knowledge of Trend Micro products and services, as well as an understanding of basic networking concepts and principles will be helpful.
Basic knowledge of the following topics is also beneficial:
- Windows servers and clients
- Firewalls and packet inspection devices
- VMware® ESXi/vCenter/NSX
- Amazon AWS/Microsoft® Azure™/VMware vCloud
- Virtualization technologies
Skills Covered
Upon completion of this course, students will be able to:
- Describe the purpose, features, functions, and capabilities of Deep Security 20
- Define and install components that make up Deep Security
- Implement security by enabling protection modules
- Describe available configuration and administration options
- Attempt the Trend Micro Certified Professional for Deep Security Certification Exam
Module 1: Product Overview
- Introduction to Deep Security
- Deep Security protection modules
- Deep Security deployment options
- Deep Security components
Module 2: Trend Micro Deep Security Manager
- Server, operating system, and database requirements
- Deep Security Manager architecture
- Installing and upgrading Deep Security Manager
Module 3: Deploying Deep Security Agents
- Deep Security agent architecture
- Deploying Deep Security agents
Module 4: Managing Deep Security Agents
- Command line operations
- Resetting agents
- Protecting agents
- Viewing computer protection status
- Upgrading Deep Security agents
- Organizing computers using groups and Smart Folders
Module 5: Keeping Deep Security Up to Date
- Security updates
- Software updates
- Deep Security relays
Module 6: Trend Micro Smart Protection
- Smart Protection services used by Deep Security
- Configuring the Smart Protection source
Module 7: Policies
- Policy inheritance and overrides
- Creating new policies
- Running recommendation scans
Module 8: Protecting Servers from Malware
- Anti-malware scanning techniques
- Enabling anti-malware protection
- Smart Scan
Module 9: Blocking Malicious Websites
- Enabling web reputation
- Setting the security level
Module 10: Filtering Traffic Using the Firewall
- Enabling the Deep Security firewall
- Firewall rules
- Traffic analysis
- Traffic order of analysis
- Port scan
Module 11: Protecting Servers from Vulnerabilities
- Virtual patching
- Detecting suspicious network activity
- Web application protection
- Enabling intrusion prevention
- Intrusion prevention rules
- Security Sockets Layer (SSL) filtering
- Protecting web applications
Module 12: Detecting Changes to Protected Servers
- Enabling integrity monitoring
- Running recommendation scans
- Detection changes to baseline objects
Module 13: Blocking Unapproved Software
- Enforcement modes
- Enabling application control
- Detecting software changes
- Creating an inventory of approved
Module 14: Inspecting Logs on Protected Servers
- Enabling log inspection
- Running recommendation scans
Module 15: Events and Alerts
- Event forwarding
- Alerts
- Event tagging
- Reporting
Module 16: Protecting Containers
- Continuous integration/continuous deployment
- Software development using containers
- Protecting containers with Deep Security
Module 17: Automating Deep Security Operations
- Scheduled tasks
- Event-based tasks
- Quick start templates
- Baking the Deep Security agent into an Amazon® Machine Image
- Application programming interface
Module 18: Detecting Emerging Malware Through Connected Threat Defense
- Connected Threat Defense phases
- Trend Micro™ Deep Discovery™ Analyzer
- Trend Micro Apex Central™
- Configuring Deep Security for Connected Threat Defense
- Tracking submissions
Module 19: Appendix Topics
- Activating and managing multiple tenants
- Protecting virtual machines using the Deep Security virtual appliance
- Troubleshooting common Deep Security issues
Programme scope, delivery arrangements and suitability are confirmed during enquiry.