CCSP: Implementing Cisco Intrusion Prevention System (5 day)

Course Overview

Given an example of Cisco's defence in depth, the learner will explain how Cisco IPS protects network devices from attacks. Given an IPS sensor appliance, the learner will install the appliance in the network and initialize it. Use IDM to configure basic sensor settings. The learner will use IDM to configure built-in signatures to meet the requirements of a given security policy. The learner will describe the functions of signature engines and their parameters. The learner will use IDM to tune and create signatures to meet the requirements of a given security policy. Given a scenario, the learner will use IDM to tune a sensor to work optimally in the network. Given a scenario, the learner will use the Monitoring Center for Security and Cisco Threat Response to maximize alarm management efficiency.

The learner will explain blocking concepts and use IDM to configure blocking for a given scenario.The learner will install the NM-CIDS in a router and initialize it. The learner will install the module in a Cisco Catalyst 6500 Switch and initialize it. The learner will use a Cisco Catalyst 6500 Switch to capture network traffic for intrusion prevention analysis. The learner will install and recover the sensor software image and perform service pack and signature updates. The learner will use the CLI and IDM to verify system configuration.

Skills Gained

• Explain how Cisco IPS protects network devices from attacks
• Install an IPS sensor appliance in the network and initialize it
• Configure basic sensor settings using IDM
• Configure built-in signatures to meet the requirements of a given security policy using IDM
• Describe the functions of signature engines and their parameters
• Tune and create signatures to meet the requirements of a given security policy using IDM
• Tune a sensor to work optimally in the network using IDM
• Maximize alarm management efficiency by using the Monitoring Center for Security and Cisco Threat Response
• Explain blocking concepts and use IDM to configure blocking
• Install the NM-CIDS in a router and initialize it
• Install the module in a Cisco Catalyst 6500 Switch and initialize it
• Use a Cisco Catalyst 6500 Switch to capture network traffic for intrusion prevention analysis
• Install and recover the sensor software image and perform service pack and signature updates
• Use the CLI and IDM to verify system configuration

Prerequisites

CCNA Certification or the equivalent knowledge. The CCNA can be achieved by either attending the Interconnecting Cisco Network Devices (ICND) and the Introduction to Cisco Networking Technologies (INTRO) courses, or the CCNA Fast Track Programme

Basic knowledge of the Windows operating system

Familiarity with networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)