Given an example of Cisco's defense in depth, the learner will explain how Cisco IPS protects network devices from attacks. Given an IPS sensor appliance, the learner will install the appliance in the network and initialize it. Use IDM to configure basic sensor settings. The learner will use IDM to configure built-in signatures to meet the requirements of a given security policy. The learner will describe the functions of signature engines and their parameters. The learner will use IDM to tune and create signatures to meet the requirements of a given security policy. Given a scenario, the learner will use IDM to tune a sensor to work optimally in the network. Given a scenario, the learner will use the Monitoring Center for Security and Cisco Threat Response to maximize alarm management efficiency. The learner will explain blocking concepts and use IDM to configure blocking for a given scenario. The learner will install the NM-CIDS in a router and initialize it. The learner will install the module in a Cisco Catalyst 6500 Switch and initialize it. The learner will use a Cisco Catalyst 6500 Switch to capture network traffic for intrusion prevention analysis. The learner will install and recover the sensor software image and perform service pack and signature updates. The learner will use the CLI and IDM to verify system configuration

Who Should Attend

• Employee
• Customer
• Channel Partners/Resellers

Prerequisites

Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites: Certification as a CCNA or the equivalent knowledge. Basic knowledge of the Windows operating system Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications).

Course Outline

1. Course Introduction
2. Security Fundamentals
3. Intrusion Prevention Overview
4. Getting Started with the IDS Command Line Interface
5. Using IDM
6. Basic Sensor Configuration
7. Cisco Intrusion Detection System Alarms and Signatures
8. Signature Engines
9. Signature Configuration
10. Sensor Tuning
11. Alarm Monitoring and Management
12. Blocking Configuration
13. Cisco Intrusion Detection System Network Module
14. Intrusion Detection System Module Configuration
15. Capturing Network Traffic for Intrusion Detection Systems
16. Sensor Maintenance
17. Verifying System Configuration

Duration

5 Days (40 Hours)

Associated Certifications

CCSP

Benefits Summary

• Modern equipment and small class group (5-6 student)
• Students work with real Cisco equipment (Cisco routers 25ХХ, 26ХХ, 36ХХ, 4000, 1 router for one person, switches Cisco Catalyst 2924 и 3550) at their individual PC, (Pentium IV, 512 МВ RAM, 17” monitor).
• Fully qualified, certified instructor (status CCDA, CCNP, CCAI).
• Theory amount to 40% from the total course duration.
• Practical skills, labs amount to 60% to learn a lesson more effective and strengthen new material.
• Testing system
• Pre-classes tests help to estimate knowledge level of using program and are intended for the most optimal choice of educational program.
• After-classes tests help to estimate knowledge received after trainings.
• Cisco Press manual.
• The courses will help to prepare for certified exam ССNA and CCNP in the future.
• After courses students are welcomed to use our support system during six months free using e-mail