trainocate-cisco-training-b
Home > Vendors > Cisco > NGIPSV

NGIPSV - Implementing and Configuring Next-Generation FirePOWER IPS v2.0 (NGIPSV)

Overview

Duration: 3 days

Multifaceted, highly dynamic applications and bring-your-own-device (BYOD) workplaces have become the norm. And with them comes the challenge to balance productivity with security Cisco has the industry’s first adaptive, threat-focused next-generation IPS (NGIPS) designed for a new era of threat and advanced malware protection.

This 3-days workshop is designed to help users understand the integration of the Cisco FirePOWER managed devices with the Cisco FireSIGHT Management Center for a new adaptive, threat-focused NGIPS solution. It delivers an integrated threat defense across the entire attack continuum — before, during, and after an attack. You should at the end of this workshop feel confident to go with Cisco FirePOWER NGIPS Solution to address all your network security requirements. 

Objectives

After completing this course you should be able to:

  • Overview of Cisco FirePOWER NGIPS Solution
  • Understand the capabilities of the FirePOWER IPS
  • Describe how to deploy and manage Cisco FireSIGHT devices
  • Explore the FireSIGHT Management Center using the Context Explorer
  • Describe the various detection technologies used in the FirePOWER Solution
  • Navigate the user interface and administrative features of the FireSIGHT Management Center, including reporting functionality to properly assess threats
  • Use Access Control, File Policies and Intrusion Policies to control traffic within a network
  • Analyse files to determine their level of threat and trajectory within a network
  • Integrate Active Directory with FireSIGHT and User Agent for User based policies
  • Understand the Tuning capability
  • URL-based Security Intelligence
  • Application Detectors

Content

1. Cisco FirePOWER NGIPS Solution Overview

  • Benefits and Components
  • Licensing
  • Protection
  • Control
  • URL Filtering
  • Malware
  • Intrusion Prevention

2. Exploring and managing the FireSIGHT Management Centre

  • Implement FireSIGHT Management Center
  • Verify the licenses
  • Add the Cisco Virtual Next-Generation IPS (NGIPSv) for VMware
  • Edit and apply the initial system policy time synchronization settings NGIPSv
  • Apply the initial health policy
  • Configure Policy for a default Inline Intrusion Policy to use the Secure over Connectivity base IPS Policy
  • Configure File Polices to block malware
  • Attempt malware file transfers to trigger the malware blocking File Policy rule
  • Observe the IPS and Malware events in the FireSIGHT Management Center

3. IPS Policy Basics

4. Network Analysis Policy

5. Event Analysis

6. Correlation Policy

7. Creating and Managing User Accounts

8. Escalating Permissions

9. DNS Inspection and URL-based Security Intelligence

10. OpenAppID Application Detectors 

11. Reporting

Audience

Presale consultants and engineers

Prerequisites

CCNA certified preferably CCNA Security Certified or equivalent experience.

Certification

This course is not associated with any Certification.

Schedule

Show Schedule for:




➤