IPS - Implementing Cisco Intrusion Prevention Systems v6.0

Summary

Implementing Cisco Intrusion Prevention Systems (IPS) v6.0 is a 4 day, instructor-led class that provides the knowledge and skills needed to design, install, configure, and maintain a Cisco IPS sensor for small, medium, and enterprise networks.

Audience

Cisco professionals looking to secure networks.
  

Prerequisites

To benefit fully from this course, it is recommended that you have the following prerequisite skills and knowledge:

• Familiarity with networking and security terms and concepts, including completion of course SND Securing Cisco Network Devices
• Strong user-level experience with Microsoft Windows operating systems
   

Course Objectives

After completing this course the student should be able to:

• Explain how Cisco IPS protects network devices from attacks
• Install and configure the basic settings on a Cisco IPS 4200 Series Sensor
• Use the Cisco IDM to configure built-in signatures to meet the requirements of a given security policy
• Configure some of the more advanced features of the Cisco IPS product line
• Initialize and install into your environment the rest of the Cisco IPS family of products
• Use the CLI and Cisco IDM to obtain system information, and configure the Cisco IPS sensor to allow an SNMP NMS to monitor the Cisco IPS sensor 
   

Certified Professional Exams

This course prepares for you the following Certified Professional Exams:

• Cisco Certified Security Professional (CCSP)

• Intrusion Prevention Overview
• Explaining Intrusion Prevention
• Examining Cisco IPS Products
• Examining Cisco IPS Sensor Software Solutions
• Examining Evasive Techniques
• Installation of a Cisco IPS 4200 Series Sensor
• Installing a Cisco IPS Sensor Using the CLI
• Using the Cisco IDM
• Configuring Basic Sensor Settings
• Cisco IPS Signatures
• Configuring Cisco IPS Signatures and Alerts
• Examining the Signature Engines
• Customizing Signatures
• Advanced Cisco IPS Configuration
• Performing Advanced Tuning of Cisco IPS Sensors
• Monitoring and Managing Alarms
• Configuring a Virtual Sensor
• Configuring Advanced Features
• Configuring Blocking
• Additional Cisco IPS Devices
• Installing the Cisco Catalyst 6500 Series IDSM-2
• Initializing the Cisco ASA AIP-SSM
• Cisco IPS Sensor Maintenance
• Maintaining Cisco IPS Sensors
• Managing Cisco IPS Sensors

Hands-on Lab Exercises

Lab 2-1: Install and Configure a Cisco IPS Sensor from the CLI
Lab 2-2: Use the Cisco IDM to Perform a Basic Sensor Configuration
Lab 3-1: Working with Signatures and Alerts
Lab 3-2: Customizing Signatures
Lab 4-1: Tune a Cisco IPS Sensor Using the Cisco IDM
Lab 4-2: Monitor and Manage Alarms
Lab 4-3: Configure a Virtual Sensor (Optional)
Lab 4-4: Configure Anomaly Detection and POSFP
Lab 6-1: Maintain Sensors and Verify System Configuration

CTE Solutions provides authorized Cisco training as a Reseller of Tech 2000, Inc., a Cisco Learning Solutions Partner.

CCDA, CCDP, CCENT, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, PIX, Cisco, Cisco IOS, Cisco Systems, the Cisco Systems logo, and Networking Academy are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this document or Web site are the property of their respective owners.