In this AcademyTech enhanced course, you will gain the skills required to deploy Cisco's recently updated version 6.0 network-based Intrusion Prevention System (IPS). New features added to version 6.0 include virtual sensor support, passive OS fingerprinting, and anomaly detection. The course introduces you to Cisco IPS platforms, including the 4200 Series Sensors, the Catalyst 6000 Series Intrusion Detection Module 2 (IDSM2), and the Advanced Inspection and Prevention Security Services Module (AIP-SSM). The command line and the IPS Device Manager GUI are used to configure the sensor.

• Course Outline

   

  1. Intrusion Prevention Overview

  • Explanation of Intrusion Prevention

  • Cisco IPS Products

  • Cisco IPS Sensor Software Solutions

  • Evasive Techniques

  2. Installation of a Cisco IPS 4200 Series Sensor

  • Installing an IPS Sensor Using the CLI

  • Using the Cisco IDM

  • Configuring Basic Sensor Settings

  3. Cisco IPS Signatures

  • Configuring Cisco IPS Signatures and Alarms

  • Signature Engines

  • Customizing Signatures

  4. Advanced Cisco IPS Configuration

  • Advanced Tuning of Cisco IPS Sensors

  • Monitoring and Managing Alarms

  • Configuring a Virtual Sensor

  • Configuring Advanced Features

  • Configuring Blocking

  5. Additional Cisco IPS Devices

  • Cisco IDS Module

  • Cisco ASA AIP-SSM

  6. Cisco IPS Sensor Maintenance

  • Maintaining Cisco IPS Sensors

  • Managing Cisco IPS Sensors