Cisco IPS Training Securing Networks Using Intrusion Prevention Systems CCSP Certification Training
- Monday, June 2, 2008, 1:37
- Exam Topics
- 7 views
- Add a comment
The Securing Networks using Intrusion Prevention Systems IPS Certification exam is one of the exams associated with the Cisco Certified Security Professional CCSP Certification and the Cisco IPS Specialist certifications. Candidates can prepare for this exam by taking the IPS 5.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco Intrusion Prevention System appliance products.
Certification Course Overview
IPS training course teaches the knowledge and skills needed to design install and configure a Cisco Intrusion Prevention solution for small medium and enterprise networks. The course covers several platforms including the Cisco 4200 series sensors the Catalyst 6500 series Intrusion Detection System Module 2 (IDSM2) and the Network Module for Cisco 2600/3600/3700 Routers and Cisco 2800/3800 Integrated Services Routers. The Device Manager is used to configure and manage Cisco Intrusion Prevention System sensor platforms and view and respond to the alarms.
Audience
This course is a necessity for any student tasked with implementing or maintaining a secure network. IPS is also important for candidates seeking Cisco security certifications. The primary audience for this course is as follows: Engineers and technicians who implement and maintain Intrusion Protection System solutions and Technicians and Engineers who support sales of Cisco Intrusion Protection System and security product solutions
Participants will learn
Use the IDM to configure automatic software updates.
Recover the sensor image.
CLI to back up and restore a sensor configuration.
CLI and the IDM to monitor the sensor.
Use preventive maintenance and general troubleshooting commands.
IDM to configure blocking for a given scenario.
Install the NM-CIDS in a router and initialize it.
Configure communications between the router and the NM-CIDS and initialize the NM-CIDS.
Install an IDSM-2 in a Cisco Catalyst 6500 Switch and initialize it.
IDM to upgrade the sensor image.
Use the IDM to install signature and service pack updates.
Use the IDM to tune the sensor to work optimally in a network.
Explain blocking concepts.
Describe the functions of signature engines and their parameters.
To tune and create signatures to meet the requirements of a given security policy.
Configure software bypass mode.
Configure sensor interfaces and interface pairs.
Create user accounts.
Set the sensor’s time.
Use the IDM to configure allowed hosts.
Use the IDM to configure the sensor’s communication parameters.
Describe the management and monitoring capabilities of the IPS Device Manager.
The sensor CLI to perform basic sensor configuration.
Install a sensor appliance in the network and initialize it.
Explain how Cisco IPS protects network devices from attacks.
IPS Training Course Outline
Implementing Intrusion Prevention Systems (version 5.0)
Security Fundamentals
Need for Network Security
Network Security Policy
Primary Network Threats and Attacks
Reconnaissance Attacks and Mitigation Access Attacks and Mitigation Denial of Service Attacks and Mitigation Worm Virus and Trojan Horse Attacks and Mitigation Management Protocols and Functions
Intrusion Prevention Overview
Intrusion Detection Versus Intrusion Prevention Intrusion Detection Technologies Cisco Network Sensors Sensor Appliances Cisco Defense-in-Depth Sensor Deployment IPS Terminology Cisco IPS Software Architecture
Getting Started with the IPS Command Line Interface
Command Line Overview Sensor Software Installation Sensor Initialization Administrative Tasks Basic Troubleshooting Commands
Using the Intrusion Prevention System Device Manager
Introduction to the IPS Device Manager Getting Started with the IDM Configuring Certificates Configuring SSH Rebooting and Shutting Down the Sensor Viewing Events in the IDM Basic Sensor Configuration
Configuring Allowed Hosts Setting the Time Configuring User Accounts Configuring the Interfaces Configuring Software Bypass
Cisco Intrusion Prevention System Signatures and Alerts
Cisco IPS Signatures Engines and Alerts Locating Signature Information Basic Signature Configuration Special Considerations for Signature Actions Configuring SNMP Signature Engines
Cisco IPS Signature Engines Atomic Signature Engines Flood Signature Engines Meta Signature Engine Multi String Signature Engine Normalizer Engine OTHER Signature Engine Service Signature Engines State Signature Engines String Signature Engines Sweep Signature Engines Traffic Signature Engine Trojan Signature Engine AIC Signature Engines
Signature Configuration
Parameters Common to All Signature Engines Signature Tuning Custom Signatures
Sensor Tuning
Intrusion Detection Evasive Techniques Tuning the Sensor Logging Reassembly Options Event Action Rules Event Variables Target Value Ratings Event Action Overrides Event Action Filters General Settings
Blocking
Introduction ACL Considerations Automatic Blocks Manual Blocks Master Blocking Sensors
Sensor Maintenance
Upgrading and Recovering the Sensor Image Service Pack and Signature Updates Resetting Powering Down and Restoring the Default Configuration Monitoring the Sensor Using the CLI to Monitor the Sensor Using the IDM to Monitor the Sensor Cisco Intrusion Detection System Network Module NM-CIDS Overview How the NM-CIDS Works Design Considerations Installation and Configuration Tasks Image Upgrade and Recovery Maintenance Tasks Unique to the NM-CIDS
Cisco Intrusion Detection System Module
Introduction Ports Traffic and Time Installation and Configuration Tasks Verifying IDSM-2 Status Upgrade and Recovery
|
Type |
Exam Bible | New Questions & Answers |
Latest Updated |
Download link |
| All Certbible 's Exam Dumps |
597 |
1 days ago | Available |
PassGuide Training Materials & Practice Tests
About the Author
Write a Comment
Gravatars are small images that can show your personality. You can get your gravatar for free today!

