SSFIPS - Securing Networks with Cisco Firepower Next-Generation IPS v4.0

Overview

Duration: 5.0 days

The Securing Networks with Cisco Firepower Next-Generation IPS (SSFIPS) v4.0 certification & training course shows you how to deploy and use Cisco Firepower® Next-Generation Intrusion Prevention System (NGIPS). This hands-on course gives you the knowledge and skills to use the platform features and includes firewall security concepts, platform architecture and key features; in-depth event analysis including detection of network-based malware and file type, NGIPS tuning and configuration including application control, security intelligence, firewall, and network-based malware and file controls; Snort® rules language; file and malware inspection, security intelligence, and network analysis policy configuration designed to detect traffic patterns; configuration and deployment of correlation policies to take action based on events detected; troubleshooting; system and user administration tasks, and more

Objectives

After taking this course, you should be able to:

Describe the components of Cisco Firepower Threat Defense and the managed device registration process
Detail Next-Generation Firewalls (NGFW) traffic control and configure the Cisco Firepower system for network discovery
Implement access control policies and describe access control policy advanced features
Configure security intelligences features and the Advanced Malware Protection (AMP) for Networks implementation procedure for file control and advanced malware protection
Implement and manage intrusion and network analysis policies for NGIPS inspection
Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
Integrate the Cisco Firepower Management Center with an external logging destination
Describe and demonstrate the external alerting options available to Cisco Firepower Management Center and configure a correlation policy
Describe key Cisco Firepower Management Center software update and user account management features
Identify commonly misconfigured settings within the Cisco Firepower Management Center and use basic commands to troubleshoot a Cisco Firepower Threat Defense device

Content

Cisco Firepower Threat Defense Overview
Cisco Firepower NGFW Device Configuration
Cisco Firepower NGFW Traffic Control
Cisco Firepower Discovery
Implementing Access Control Policies
Security Intelligence
File Control and Advanced Malware Protection
Next-Generation Intrusion Prevention Systems
Network Analysis Policies
Detailed Analysis Techniques
Cisco Firepower Platform Integration
Alerting and Correlation Policies
Performing System Administration
Troubleshooting Cisco Firepower

Lab Outline

Initial Device Setup
Device Management
Implementing Network Discovery
Implementing an Access Control Policy
Implementing Security Intelligence
File Control and Advanced Malware Protection
Implementing NGIPS
Customizing a Network Analysis Policy
Detailed Analysis
Configuring Cisco Firepower Platform Integration with Splunk
Configuring Alerting and Event Correlation
Performing System Administration
Troubleshooting Cisco Firepower

Audience

Security administrators
Security consultants
Network administrators
System engineers
Technical support personnel
Channel partners and resellers

Prerequisites

To fully benefit from this course, you should have the following knowledge and skills:

Technical understanding of TCP/IP networking and network architecture
Basic familiarity with the concepts of Intrusion Detection Systems (IDS) and IPS

Certification

CCNP Security and Cisco Certified Specialist – Network Security Firepower

Lịch khai giảng

Tên khóa học

Thời gian

Lịch dự kiến

Địa điểm

Học phí

ĐĂNG KÝ

Form đăng ký

Bằng cách nhấn nút "ĐĂNG KÝ", tôi hoàn toàn đồng ý với Chính sách quyền riêng tư

Các khóa đào tạo Cisco khác

DTCSM - Cisco Customer Success Manager v2.1

The Cisco Customer Success Manager (DTCSM) v2.1 course gives you the confidence and competence to fulfill the Customer Success Manager (CSM) role successfully, helping your customers realize value from their solutions and achieve their business outcomes. The course offers experiential learning through practical exercises using situations based on real-life use cases and case studies. In this highly interactive course, you can practice and gain confidence in fulfilling core tasks using best-practice tools and methodologies while receiving feedback from the facilitator and your peers.

3.0 ngày

SPVI - Implementing Cisco Service Provider VPN Services v1.0

The Implementing Cisco Service Provider VPN Services (SPVI) v1.0 course prepares you to manage end-customer Virtual Private Network (VPN) environments built over a common service provider Multiprotocol Label Switching (MPLS) backbone. You will complete hands-on labs to reinforce MPLS VPN fundamental concepts, benefits, and classification, MPLS components, MPLS control plane and data plane operations, MPLS VPN routing using Virtual Routing and Forwarding (VRF), Layer 2 and Layer 3 MPLS VPNs, IPv6 MPLS VPN implementations, IP Multicast VPNs, and shared services VPNs. The course also covers solutions for deploying MPLS VPN crossing multiple Service Provider domains that improve the use of network bandwidth.