NGIPSV - Implementing and Configuring Next-Generation FirePOWER IPS v2.0 (NGIPSV)

Overview

Duration: 3 days

Multifaceted, highly dynamic applications and bring-your-own-device (BYOD) workplaces have become the norm. And with them comes the challenge to balance productivity with security Cisco has the industry’s first adaptive, threat-focused next-generation IPS (NGIPS) designed for a new era of threat and advanced malware protection.

This 3-days workshop is designed to help users understand the integration of the Cisco FirePOWER managed devices with the Cisco FireSIGHT Management Center for a new adaptive, threat-focused NGIPS solution. It delivers an integrated threat defense across the entire attack continuum — before, during, and after an attack. You should at the end of this workshop feel confident to go with Cisco FirePOWER NGIPS Solution to address all your network security requirements.

Objectives

After completing this course you should be able to:

Overview of Cisco FirePOWER NGIPS Solution
Understand the capabilities of the FirePOWER IPS
Describe how to deploy and manage Cisco FireSIGHT devices
Explore the FireSIGHT Management Center using the Context Explorer
Describe the various detection technologies used in the FirePOWER Solution
Navigate the user interface and administrative features of the FireSIGHT Management Center, including reporting functionality to properly assess threats
Use Access Control, File Policies and Intrusion Policies to control traffic within a network
Analyse files to determine their level of threat and trajectory within a network
Integrate Active Directory with FireSIGHT and User Agent for User based policies
Understand the Tuning capability
URL-based Security Intelligence
Application Detectors

Content

1. Cisco FirePOWER NGIPS Solution Overview

Benefits and Components
Licensing
Protection
Control
URL Filtering
Malware
Intrusion Prevention

2. Exploring and managing the FireSIGHT Management Centre

Implement FireSIGHT Management Center
Verify the licenses
Add the Cisco Virtual Next-Generation IPS (NGIPSv) for VMware
Edit and apply the initial system policy time synchronization settings NGIPSv
Apply the initial health policy
Configure Policy for a default Inline Intrusion Policy to use the Secure over Connectivity base IPS Policy
Configure File Polices to block malware
Attempt malware file transfers to trigger the malware blocking File Policy rule
Observe the IPS and Malware events in the FireSIGHT Management Center

3. IPS Policy Basics

4. Network Analysis Policy

5. Event Analysis

6. Correlation Policy

7. Creating and Managing User Accounts

8. Escalating Permissions

9. DNS Inspection and URL-based Security Intelligence

10. OpenAppID Application Detectors

11. Reporting

Audience

Presale consultants and engineers

Prerequisites

CCNA certified preferably CCNA Security Certified or equivalent experience.

Certification

This course is not associated with any Certification.

Schedule

Show Schedule for:

Enquiry Form