Implementing Cisco® Intrusion Prevention System (IPS)

Length: 5-day Workshop

IPS is a five-days, leader-led, lab-intensive course, which will be delivered by Cisco Learning Partners (CLPs). This task-oriented course teaches the knowledge and skills needed to design, install, and configure a Cisco® Intrusion Prevention solution for small, medium, and enterprise networks. The course covers Cisco® IPS sensor platforms, including the 4200 series Sensors and the Catalyst® 6000 series Intrusion Detection Module 2 (IDSM-2 ). The IPS Device Manager is used to configure and manage Cisco® IPS Sensors. The Security Monitor is used to view and respond to IPS alarms.

You will learn to:

• Given an example of Cisco's® defense in depth, the learner will explain how Cisco® IPS protects network devices from attacks
• Given an IPS sensor appliance, the learner will install the appliance in the network and initialize it
• Use IDM to configure basic sensor settings
• Use IDM to configure built-in signatures to meet the requirements of a given security policy
• Describe the functions of signature engines and their parameters
• Use IDM to tune and create signatures to meet the requirements of a given security policy
• Given a scenario, the learner will use IDM to tune a sensor to work optimally in the network
• Given a scenario, the learner will use the Monitoring Center for Security and Cisco® Threat Response to maximize alarm management efficiency
• Explain blocking concepts and use IDM to configure blocking for a given scenario
• Install the NM-CIDS in a router and initialize it
• Install the module in a Cisco Catalyst® 6500 Switch and initialize it
• Use a Cisco Catalyst® 6500 Switch to capture network traffic for intrusion prevention analysis
• Install and recover the sensor software image and perform service pack and signature updates
• Use the CLI and IDM to verify system configuration

Recommended for:

• Employee
• Customer
• Channel Partner
• Reseller

Prerequisites:

• Experience in configuring Cisco IOS® software
• Certification as a CCNA® or the equivalent knowledge
• Basic knowledge of the Windows operating system
• Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)

More Information

Training Policies • Classroom Environment • Training Locations