Cisco® Implementing Cisco® Intrusion Prevention System v7.0 (IPS)

This course provides network security engineers with the knowledge and skills needed to deploy Cisco IPS-based security solutions. Students will be able to reduce risk to the IT infrastructure and applications using Cisco IPS features.

Lesson 1: Introduction to Intrusion Prevention and Detection, Cisco IPS Software, and Supporting Devices

• Evaluating Intrusion Prevention and Intrusion Detection Systems
• Choosing Cisco IPS Software, Hardware, and Supporting Applications
• Evaluating Network IPS Traffic Analysis Methods, Evasion Possibilities, and Anti-Evasive Countermeasures
• Choosing a Network IPS and IDS Deployment Architecture

Lesson 2: Installing and Maintaining Cisco IPS Sensors

• Integrating the Cisco IPS Sensor into a Network
• Performing the Cisco IPS Sensor Initial Setup
• Managing Cisco IPS Devices
• Lab 2-1: Performing the Cisco IPS Sensor Initial Setup
• Lab 2-2: Managing a Cisco IPS Sensor

Lesson 3: Applying Cisco IPS Security Policies

• Configuring Basic Traffic Analysis
• Implementing Cisco IPS Signatures and Responses
• Configuring Cisco IPS Signature Engines and the Signature Database
• Deploying Anomaly-Based Operation
• Lab 3-1: Configuring and Modifying Basic Cisco IPS Signatures and Responses
• Lab 3-2: Configuring Cisco IPS Anomaly-Based Operation

Lesson 4: Adapting Traffic Analysis and Response to the Environment

• Customizing Traffic Analysis
• Managing False Positives and False Negatives
• Improving Alarm and Response Quality
• Lab 4-1: Configuring Custom Cisco IPS Signatures
• Lab 4-2: Managing False Positives and False Negatives
• Lab 4-3: Improving Alarm and Response Quality

Lesson 5: Managing and Analyzing Events

• Installing and Integrating Cisco IPS Manager Express with Cisco IPS Sensors
• Managing and Investigating Events using Cisco IPS Manager Express
• Using Cisco IME Reporting and Notifications
• Integrating Cisco IPS with Cisco Security Manager and Cisco Security MARS
• Using the Cisco IntelliShield Database and Services
• Lab 5-1: Using the Cisco IME
• Lab 5-2: Using Cisco IPS and Security Intelligence Web Resources

Lesson 6: Deploying Virtualization, High Availability, and High Performance Solutions

• Using Cisco IPS Virtual Sensors
• Deploying Cisco IPS for High Availability and High Performance
• Lab 6-1: Configuring Policy Virtualization

Lesson 7: Configuring and Maintaining Specific Cisco IPS Hardware

• Configuring and Maintaining the Cisco ASA AIP SSM and AIP SSC Modules
• Configuring and Maintaining the Cisco ISR IPS AIM and IPS NME Modules
• Configuring and Maintaining the Cisco IDSM-2 Module

• Urbandale, IA - April 23, 2012
• West Valley City, UT - May 7, 2012
• Las Vegas, NV - May 14, 2012
• Sacramento, CA - May 14, 2012
• Reno, NV - May 14, 2012
• Sacramento, CA - May 21, 2012
• Las Vegas, NV - July 16, 2012
• Sacramento, CA - July 16, 2012
• Reno, NV - July 16, 2012
• Urbandale, IA - July 16, 2012
• Charlotte, NC - October 8, 2012
• Urbandale, IA - October 8, 2012