IBM Network Intrusion Prevention Appliance

Prerequisites:

A working knowledge of TCP/IP and Windows platforms is required.

Either one of the following two situations applies:

- The training is NOT attended together with the ?¢‚Äöá®?¨Introduction to SiteProtector training: the attendees must have a valid Introduction to SiteProtector certification.
- The training is attended together with the ?¢‚Äöá®?¨Introduction to SiteProtector training: no further prerequisite.

Course Description:

Internet Security Systems' Proventía intrusion prevention appliances deliver preemptive protection for networks. These devices stop malicious Internet attacks before they impact your organization—the only effective way to preserve network availability, reduce the burden on your IT resources and prevent security breaches.

The Network Intrusion Prevention Appliance course provides concepts, methods and practices necessary to successfully manage the Proventía G400/G2000. The course focuses on hands-on exercises supported by demonstrations, presentations and lecture. Starting with an introduction to intrusion protection, students learn about the appliance's operational modes and how to properly deploy the appliance in a high availability environment. Students also learn how to install, manage and configure G400/G2000 appliances, and how to monitor and analyze security events using both the SiteProtector Console and Proventía Manager.

Who Should Attend

Network and security professionals evaluating, implementing, managing, or monitoring an environment that includes Proventía intrusion prevention appliances (G400/2000).

This course is in preparaton for the Network Intrusion Prevention System (IPS) exam.

This course includes the following modules:

Course Content

• Introducing intrusion protection concepts and the Provent?â¨?a G appliance.
• Connecting the Provent?â¨?a G appliance to your network
• Defining the operation modes available to the appliance along with the networking considerations associated with each mode
• Configuring the Provent?â¨?a G appliance in a high availability environment
• Restoring the Provent?â¨?a G appliance and configure the initial appliance settings
• Using Provent?â¨?a Manager to configure the Provent?â¨?a G appliance to communicate with and be managed by SiteProtector
• Managing Provent?â¨?a G appliances
• Describing predefined Provent?â¨?a G responses
• Configuring response objects
• Configuring Provent?â¨?a G policies, including various types of security events
• Using Provent?â¨?a Manager to manage and monitor a Provent?â¨?a G appliance
• Restoring the Provent?â¨?a G appliance (Lab)
• Configuring passwords and initial appliance settings (Lab)
• Registering Provent?â¨?a G appliances in SiteProtector (Lab)
• Updating the Provent?â¨?a G appliance (Lab)
• Tuning advanced parameters at the device level (Lab)
• Configuring response objects (Lab)
• Creating firewall rules, connection events, and protection domains (Lab)