spacer.png, 0 kB

          This e-mail address is being protected from spam bots, you need JavaScript enabled to view it





Lost your Password?
No account yet? Register

spacer.png, 0 kB
spacer.png, 0 kB
 
IBM Proventia Network Intrusion Prevention System with SiteProtector

 

Boot Camp Schedule

 

Boot Camps include experienced certified instruction, professional courseware, corresponding  practice exams, all certification exam vouchers (extra available).  Exclusive attention and open lab time.  Pass guarantee.  Fine catered breakfast and lunch daily, refreshments and snacks.  Quality travel and lodging arranged, if needed.

______________________________________________________________________________________

The Proventia Network Intrusion Prevention System with SiteProtector Fast Track course combines the Introduction and Advanced course with a bundled price. This course provides concepts, methods, and practices necessary to successfully use Proventia Network IPS with the SiteProtector management tool.

Starting with an introduction to the SiteProtector, the first two days focus on developing your knowledge around the SiteProtector architecture, mastering the application and understanding the different components. Through hands-on labs, you will learn the role of each component and how the components act in concert to monitor and protect a real-world network. Learn how to install and configure SiteProtector, as well as how to monitor network assets in the SiteProtector environment.

The third day focuses on providing in-depth practices necessary to successfully manage Proventia Network IPS appliances. You will get in-depth hands-on lab exercises to learn about the appliance's operational modes and how to properly deploy the appliance in any environment. You will also master managing and configuring a Proventia Network IPS appliance.

During the fourth and fifth day, you will increase your knowledge around the SiteProtector architecture, mastering the application and understanding the advanced functions. In hands-on labs, you'll examine functionality such as component communications, Event Archiver, Central Response, and SecurityFusion.

What You'll Learn

  • Proventia SiteProtector Architecture Overview

  • Installing and configuring SiteProtector components: Deployment Manager, Application Server, Site Database, Event Collector, Agent Manager, X-Press Update Server

  • Deploying SiteProtector components on a network

  • SiteProtector user groups and permissions

  • SiteProtector console to monitor security events, and to manage SiteProtector components

  • SiteProtector Web portal to monitor security events and run reports

  • SiteProtector and network assets to facilitate effective management and analysis

  • Best practices user events, analysis views, guided analysis tools, data filters, incidents/exceptions, and baselining

  • SiteProtector reporting module to schedule and run reports

  • Configuring SiteProtector components and X-Press Updates to SiteProtector

  • Manage the Proventia Network IPS, including configuring Proventia Network IPS to communicate with and be managed by SiteProtector

  • Describe predefined appliance responses and configure response objects

  • Configure protection domains and various types of security events for Proventia Network IPS

  • Configure connection events, firewall settings, and user-defined events in the appliance policy

  • Tune advanced parameters for Proventia Network IPS

  • Use Proventia Manager to manage and monitor Proventia Network IPS

  • Identify the communication channels used by SiteProtector agents

  • Install SiteProtector in a clustered SQL environment

  • Configure SiteProtector user groups and assign permissions to users

  • Install and configure the SiteProtector SecurityFusion Module

  • Prepare for fail over and fail back between sites and use SecureSync to facilitate these processes

  • Capture packets using SiteProtector agents and examine these packets using popular packet capture tools

  • Configure response objects and network objects used by various agents

  • Describe the Central Responses architecture

  • Configure and manage Response Rules

  • Integrate SiteProtector with the Remedy Action Request System

  • Use the Event Archiver to archive events

  • Use SiteProtector's database maintenance functions to help manage the SiteProtector database

  • Use the Sensor Controller diagnostic utility

  • Filter and view events using the RealSecure SiteProtector event viewer

  • Configure SiteProtector permissions for new users

  • Install and configure the SiteProtector SecurityFusion module

  • Examine SiteProtector packet capture files

  • Create network and response objects

  • Create response rules and manage Central Responses settings

  • Install Event Archiver

Course Outline

1. Introduction and Installation of Proventia Management SiteProtector

2. Configuring and Using SiteProtector Console

3. Updating Components and Agents

4. Organizing Network Assets

5. Managing SiteProtector Components

6. Monitoring Events in SiteProtector

7. Advanced Analysis and Reporting and Ticketing

8. Managing Policies

9. Connecting the Proventia Network Intrusion Prevention System (Proventia Gx)

10. Installation, Configuration, and Management

11. Working with Responses

12. Configuring Security Events

13. Configuring User Specified Policy

14. Configuring Tuning Parameters

15. Navigating Proventia Manager

16. Introduction to Advanced SiteProtector

17. SiteProtector Communication

18. Installing SiteProtector on a SQL Cluster

19. Assigning SiteProtector Permissions

20. Using the SecurityFusion Module

21. Using SecureSync

22. Examining SiteProtector Logs and Packets

23. Confiquring Response and Network Objects

24. Configuring Central Responses

25. Integrating SiteProtector with Remedy

26. Database Management

 
 
spacer.png, 0 kB
spacer.png, 0 kB
spacer.png, 0 kB