IPS: Implementing Cisco Intrusion Provention Systems v7

Prerequisites:

Delegates are required to meet the following prerequisites:

# Cisco Certified Network Associate (CCNA) certification: Interconnecting Cisco Network Devices 1 (ICND1) and Interconnecting Cisco Network Devices 2 (ICND2)
# Cisco Certified Network Associate Security (CCNA Security) certification: Implementing Cisco IOS Network Security (IINS)
# Working knowledge of the Microsoft Windows operating system

Course Description:

This course aims to provide delegates with the knowledge and skills needed to design, install, configure, and maintain a Cisco IPS sensor for small, medium, and enterprise networks. The course also describes the procedures for managing intrusion prevention system (IPS) alarms.

On completion of this course, delegates will be able to:

• Evaluate products and deployment architectures for the Cisco IPS product line
• Perform an initial implementation of a Cisco IPS sensor
• Implement an initial security policy using a Cisco IPS sensor according to local policies and environmental requirements
• Deploy customized policies to adapt Cisco IPS traffic analysis and response to the tar-get environment
• Implement a basic Cisco IPS data management and analysis solution
• Implement complex Cisco IPS policy virtualization, high availability, and high perfor-mance solutions according to policy and environmental requirements
• Perform the initial setup of, and maintain specific Cisco IPS hardware

This course is associated with the CCNP Security Specializations.

This course includes the following modules:

Intrusion Prevention Overview

• Explaining Intrusion Prevention
• Examining Cisco IPS Products
• Examining Cisco IPS Sensor Software Solutions
• Examining Evasive Techniques

Installation of a Cisco IPS 4200 Series Sensor

• Installing a Cisco IPS Sensor Using the CLI
• Using the Cisco IDM
• Configuring Basic Sensor Settings

Cisco IPS Signatures

• Configuring Cisco IPS Signatures and Alerts
• Examining the Signature Engines
• Customizing Signatures

Advanced Cisco IPS Configuration

• Performing Advanced Tuning of Cisco IPS Sensors
• Monitoring and Managing Alarms
• Configuring a Virtual Sensor
• Configuring Advanced
• Features Configuring Blocking

Additional Cisco IPS Devices

• Installing the Cisco Catalyst 6500 Series IDSM-2
• Initializing the Cisco ASA AIP-SSM

Cisco IPS Sensor Maintenance

• Maintaining Cisco IPS Sensors Managing Cisco IPS Sensors