Implementing Intrusion Detection and Prevention

Overview

Network engineers, support personnel, reseller support, and others responsible for implementing Juniper IDP products should attend this course.

This three-day course discusses the configuration of Juniper Intrusion Detection and Prevention (IDP) sensors in a typical network environment. Key topics include: sensor configuration, creating and fine-tuning security policies, managing attack objects, creating custom signatures, and troubleshooting. This course is based upon IDP software version 4.0, and Security Manager 2006.1. Through demonstrations and hands on labs, students will gain experience in configuring, testing, and troubleshooting the IDP sensor.

Prerequisites

This course assumes that students have basic knowledge and experience in the following areas:

• Internetworking basics
• TCP/IP Operations
• Network security concepts
• Network administration
• Application support

Delegates should also have attended the Security Manager Fundamentals course (SMF)

Course Outline.

Objectives

• Intrusion Detection Concepts
• Initial Configuration of IDP Sensor
• Policy Basics
• Fine-tuning Security Policies
• Configuring Other Rulebases
• Profiler
• Sensor Operation and Command-line Utilities
• Managing Attack Objects
• Creating Custom Signatures
• Maintenance and Troubleshooting
• High-Availability

Certification

This course prepares delegates for the Juniper Networks Certified Internet Associate (JNCIA-IDP) certification.

A separate examination (not part of the course) is available for those wishing to obtain formal certification.