Proventia Network Intrusion Prevention System with SiteProtector Fast Track

start > courses and registration > training feature sheet

Proventia Network Intrusion Prevention System with SiteProtector Fast Track

course schedule			who can benefit
prerequisites			skills gained
other notes			course content
related solutions

code.

IS570

length.

5 days

type.

Instructor-Led

partner.

IBM

price.

$4,750

The Proventia Network Intrusion Prevention System with SiteProtector Fast Track course combines the Introduction and Advanced course with a bundled price. This course provides concepts, methods and practices necessary to successfully use Proventia Network IPS with the SiteProtector management tool.

Starting with an introduction to the SiteProtector, the first two days focus on developing the student's knowledge around the SiteProtector architecture, mastering the application and understanding the different components. Students will learn with hands on labs, the role of each component and how they act in concert to monitor and protect a real-world network. Students will learn how to install and configure SiteProtector, as well as how to monitor network assets in the SiteProtector environment.

The third day focuses on providing in-depth practices necessary to successfully manage Proventia Network IPS appliances. Students will get indepth hands-on lab exercises to learn about the appliance's operational modes and how to properly deploy the appliance in any environment. Students will also master managing and configuring a Proventia Network IPS appliance.

The fourth and fifth day Student's will increase their knowledge around the SiteProtector architecture, mastering the application and understanding the advanced functions. Students will learn with hands on labs functionality such as component communications, Event Archiver, Central Response, and SecurityFusion.

Combining both of these courses into one "track," you can easily register and save.

There are currently no scheduled dates for this course. If you are interested in this course, request a course date with the links below.

who can benefit

This is an advanced course for network and security professionals evaluating, implementing, managing, or monitoring ISS Proventia Intrusion Prevention System or Proventia Management SiteProtector.

prerequisites

You should have working knowledge of:

	TCP/IP
	Windows 2000/2003 Server

skills gained

	Proventia SiteProtector Architecture Overview
	Installing and configuring SiteProtector components: Deployment Manager, Application Server, Site Database, Event Collector, Agent Manager, X-Press Update Server
	Deploying SiteProtector components on a network
	SiteProtector user groups and permissions
	SiteProtector console to monitor security events, and to manage SiteProtector components
	SiteProtector Web portal to monitor security events and run reports
	SiteProtector and network assets to facilitate effective management and analysis
	Best practices user events, analysis views, guided analysis tools, data filters, incidents/exceptions, and baselining
	SiteProtector reporting module to schedule and run reports
	Configuring SiteProtector components and X-Press Updates to SiteProtector
	Manage the Proventia Network IPS, including configuring Proventia Network IPS to communicate with and be managed by SiteProtector
	Describe predefined appliance responses and configure response objects
	Configure protection domains and various types of security events for Proventia Network IPS
	Configure connection events, firewall settings, and user defined events in the appliance policy
	Tune advanced parameters for Proventia Network IPS
	Use Proventia Manager to manage and monitor Proventia Network IPS
	Identify the communication channels used by SiteProtector agents
	Install SiteProtector in a clustered SQL environment
	Configure SiteProtector user groups and assign permissions to users
	Install and configure the SiteProtector SecurityFusion Module
	Prepare for fail over and fail back between sites and use SecureSync to facilitate these processes
	Capture packets using SiteProtector agents and examine these packets using popular packet capture tools
	Configure response objects and network objects used by various agents
	Describe the Central Responses architecture
	Configure and manage Response Rules
	Integrate SiteProtector with the Remedy Action Request System
	Use the Event Archiver to archive events
	Use SiteProtector's database maintenance functions to help manage the SiteProtector database
	Use the Sensor Controller diagnostic utility
	Filter and view events using the RealSecure SiteProtector event viewer
	Configure SiteProtector permissions for new users
	Install and configure the SiteProtector SecurityFusion module
	Examine SiteProtector packet capture files
	Create network and response objects
	Create response rules and manage Central Responses settings
	Install Event Archiver

ibm education advantage program eligibility:

YES - IBM Education Pack - Online Account

course content details

	Course Topics

	Introduction and Installation of Proventia Management SiteProtector
	Configuring and Using SiteProtector Console
	Updating Components and Agents
	Organizing Network Assets
	Managing SiteProtector Components
	Monitoring Events in SiteProtector
	Advanced Analysis and Reporting, and Ticketing
	Managing Policies
	Connecting the Proventia Network Intrusion Prevention System (Proventia Gx)
	Installation, Configuration, and Management
	Working with Responses
	Configuring Security Events
	Configuring User Specified Policy
	Configuring Tuning Parameters
	Navigating Proventia Manager
	Introduction to Advanced SiteProtector
	SiteProtector Communication
	Installing SiteProtector on a SQL Cluster
	Assigning SiteProtector Permissions
	Using the SecurityFusion Module
	Using SecureSync
	Examining SiteProtector Logs and Packets
	Confiquring Response and Network Objects
	Configuring Central Responses
	Integrating SiteProtector with Remedy
	Database Management