Sourcefire 3D® v5 System

Überblick: This 4-day class covers the powerful features of the Sourcefire System, including FireSIGHT
technology, in-depth event analysis, IPS tuning and configuration, and the IPS rules language. You
will also learn how to use and configure next-generation Sourcefire® technology including application
control, firewall and routing/switching capabilities. Sourcefire users will learn to properly tune their
system for better performance and greater network intelligence, and leverage the powerful tools in
the Sourcefire System for more efficient event analysis including the new file-type and network-
based malware detection features.

Die Schulung erfolgt in Deutsch mit den originalen englischen Unterlagen.

Voraussetzungen: This course assumes that students have a technical understanding of TCP/IP networking and network architecture. Proficiency with command line text editing tools (vi editor) is suggested, not
required.



Inhalt:
* SSourcefire System overview and product installation
* Appliance configuration and management with the Sourcefire Defense Center
* Interface configuration for passive and inline deployments
* FireSIGHT technology including network awareness and user awareness
* Sourcefire IPS, FireSIGHT and Access Control policy configuration
* File policy
* Correlation policy, white lists, and host attributes
* Event analysis and reporting
* File-type and network-based malware event analysis
* Connection data analysis and network profiling
* IPS rule language syntax and usage
* Sourcefire Virtual Appliance and Sourcefire Virtual Defense Center
* Analysis techniques
* Case studies in rule writing techniques and event analysis
* Next-Generation Firewall technology usage and configuration including firewall, application
control and routing/switching capabilities



Dauer: 4 Tage

Ort: OpenSource Training Ralf Spenneberg - Am Bahnhof 3-5 - 48565 Steinfurt

 

Die nächsten Schulungstermine

25.11.2014 - 28.11.2014 Dieser Kurstermin ist leider schon ausgebucht oder findet nicht statt.
Dozent: Ralf Spenneberg

Das sagen unsere Kunden ...

Lehrreicher, interessanter & kurzweiliger Kurs! Vielen Dank!
Sourcefire 3d System
Markus Röthlisberger - Swiss Army

Sehr angenehme Umgebung, sehr kompetenter Trainer (Ralf Spenneberg).
SNORT IDS/IPS Technology
Martin Stegmeyer - Ineos Köln GmbH

Tolle Schulung/Workshop. Sehr gute Erklärungen. Vieles gut nachstellbar bzw. auf eigenen Maschinen nachvollzogen.
SNORT IDS/IPS Technology
Oliver Westerhoff - BTC IT Services GmbH