Implementing Cisco Intrusion Prevention System

The primary audience for this course is as follows: Network designers, Network security administrators, The secondary audience for this course is as follows: Network administrators, Network engineers, Systems engineers

At the end of the course delegates will be able to;-

• Explain how the Cisco IPS protects network devices from attacks
• Install and configure the basic settings on a Cisco IPS 4200 Series Sensor
• Use the Cisco IDM to configure built-in signatures to meet the requirements of a given security policy
• Configure some of the more advanced features of the Cisco IPS product line
• Initialize and install into your environment the rest of the Cisco IPS family of products
• Use the CLI and the Cisco IDM to obtain system information, and configure the Cisco IPS sensor to allow an SNMP NMS to monitor the Cisco IPS sensor

Intrusion Prevention Overview

• Explaining Intrusion Prevention
• Examining Cisco IPS Products
• Examining Cisco IPS Sensor Software Solutions
• Examining Evasive Techniques

Installation of a Cisco IPS 4200 Series Sensor

• Installing a Cisco IPS Sensor Using the CLI
• Using the Cisco IDM
• Configuring Basic Sensor Settings

Cisco IPS Signatures

• Configuring Cisco IPS Signatures and Alerts
• Examining the Signature Engines
• Customizing Signatures

Advanced Cisco IPS Configuration

• Performing Advanced Tuning of Cisco IPS Sensors
• Monitoring and Managing Alarms
  Configuring a Virtual Sensor
• Configuring Advanced
• Features Configuring Blocking

Additional Cisco IPS Devices

• Installing the Cisco Catalyst 6500 Series IDSM-2
• Initializing the Cisco ASA AIP-SSM

Cisco IPS Sensor Maintenance

• Maintaining Cisco IPS Sensors Managing Cisco IPS Sensors

The following courses are recommended for further study

• CSVPN – Cisco Secure VPN
• SNRS – Securing Networks with Cisco Routers and Switches
• SNPA –Securing Networks with PIX and ASA
• HIPS- Securing Hosts Using Cisco Security Agent.
• CANAC – Implementing Cisco NAC
• MARS – Implementing Cisco Security Monitoring , Analysis and Response time
• SND – Securing Cisco Network Devices