Implementing Cisco Intrusion Prevention System (IPS) — A 4-Day Course
Synopsis
This course aims to provide delegates with the knowledge and skills needed to design, install, configure, and maintain a Cisco IPS sensor for small, medium, and enterprise networks. The course also describes the procedures for managing intrusion prevention system (IPS) alarms.
Course Objectives
After completing this course the student should be able to:
- Explain how Cisco IPS protects network devices from attacks
- Install and configure the basic settings on a Cisco IPS 4200 Series Sensor
- Use the Cisco IDM to configure built-in signatures to meet the requirements of a given security policy
- Configure some of the more advanced features of the Cisco IPS product line
- Initialize and install into your environment the rest of the Cisco IPS family of products
- Use the CLI and the Cisco IDM to obtain system information, and configure the Cisco IPS sensor to allow an SNMP NMS to monitor the Cisco IPS sensor
Intended Audience
- The primary audience for this course is as follows: Network designers, Network security administrators
- The secondary audience for this course is as follows: Network administrators, Network engineers, Systems engineers
Prerequisites
Students who attend this advanced course meet the following prerequisites:
- Familiarity with networking and security terms and concepts, including completion of the Securing Cisco Network Devices (SND) course
- Strong user-level experience with Microsoft Windows operating systems
Certification
IPS training course is recommended as preparation for exam:
- 642-533 IPS
This course is associated with the Cisco Certified Security Professional (CCSP) and Cisco's Security Specializations
Publicly scheduled dates, locations, and prices
London — £1645 (+VAT)
- 6–9 Apr 2010
- 12–15 Apr 2010
- 1–4 Jun 2010
- 26–29 Jul 2010
- 11–14 Oct 2010
- 22–25 Nov 2010
Wokingham — £1645 (+VAT)
- 7–10 Jun 2010
- 6–9 Sep 2010
Manchester — £1645 (+VAT)
- 6–9 Sep 2010
Leeds — £1645 (+VAT)
- 4–7 Oct 2010
- 8–11 Nov 2010
Outline Course Contents
Intrusion Prevention Overview
- Explaining Intrusion Prevention
- Examining Cisco IPS Products
- Examining Cisco IPS Sensor Software Solutions
- Examining Evasive Techniques
Installation of a Cisco IPS 4200 Series Sensor
- Installing a Cisco IPS Sensor Using the CLI
- Using the Cisco IDM
- Configuring Basic Sensor Settings
Cisco IPS Signatures
- Configuring Cisco IPS Signatures and Alerts
- Examining the Signature Engines
- Customizing Signatures
Advanced Cisco IPS Configuration
- Performing Advanced Tuning of Cisco IPS Sensors
- Monitoring and Managing Alarms
- Configuring a Virtual Sensor
- Configuring Advanced
- Features Configuring Blocking
Additional Cisco IPS Devices
- Installing the Cisco Catalyst 6500 Series IDSM-2
- Initializing the Cisco ASA AIP-SSM
Cisco IPS Sensor Maintenance
- Maintaining Cisco IPS Sensors Managing Cisco IPS Sensors
