Securing Cisco Networks with Open Source Snort (SSFSNORT)

Kurskode SSFSNORT
Varighet 4
Leverandør Cisco
Neste kurs

Om kurset

The Securing Cisco Networks with Open Source Snort course shows you how to deploy a network intrusion detection system based on Snort. Through a combination of expert instruction and hands-on practice, you will learn how to install, configure, operate, and manage a Snort system, rules writing with an overview of basic options, advanced rules writing, how to configure PulledPork, and how to use OpenAppID to provide protection of your network from malware. You will learn techniques of tuning and performance monitoring, traffic flow through Snort rules, and more.

This course is worth 20 Continuing Education (CE) Credits

Dette lærer du

After completing this course, you should be able to:

  • • Describe Snort technology and identify the resources available for maintaining a Snort deployment 
  • • Install and configure a Snort deployment 
  • • Configure the command-line options for starting a Snort as a sniffer, a logger, and an intrusion detector, and create a script to start Snort automatically 
  • • Identify and configure available Snort intrusion detection outputs 
  • • Describe rule sources, updates, and utilities for managing rules and updates 
  • • Detail the components of the snort.lua file and determine how to configure it for your deployment 
  • • Configure Snort for inline operation using the inline-only features 
  • • Configure rules for Snort using basic rule syntax 
  • • Describe how traffic flows through Snort and how to optimize rules for better performance 
  • • Configure advanced-rule options for Snort rules 
  • • Configure OpenAppID features and functionality 
  • • Tune Snort for efficient operation and profile system performance 

Kursinnhold

Kurset dekker blant annet følgende temaer:

  • Snort Technology Introduction
  • Snort Installation
  • Snort Operation Introduction
  • Snort Intrusion Detection Output
  • Rule Management
  • Snort Configuration
  • Inline Operation and Configuration
  • Snort Rule Syntax and Usage
  • Snort Rule Traffic Processing Flow
  • Advanced Rule Options
  • OpenAppID Detection Configuration
  • Snort Tuning
  • Labs

Forkunnskaper

Attendees should meet the following prerequisites:

  • • Technical understanding of TCP/IP networking and network architecture
  • • Proficiency with Linux and UNIX text editing tools (vi editor is suggested but not required)

Hvem passer kurset for?

This course is designed for technical professionals who need to know how to deploy an open source intrusion detection system (IDS) based on Snort.

Videre kurs

Not available. Please contact.

Kommende kurs

Kursdatoer

Viser 5 av 7
Virtual
Kontakt oss
Kontakt oss
Kontakt oss
Kontakt oss
Kontakt oss
Kontakt oss
Kontakt oss
SG Partner

Hvorfor velge SG Partner?

Vi gjør det enkelt å finne riktig kurs og riktig gjennomføring for deg og din virksomhet.

Offisielle kurs

Kursinnhold fra anerkjente teknologileverandører og fagmiljøer.

Erfarne instruktører

Praktisk og faglig undervisning med fokus på kompetanse du kan bruke.

Fleksibel gjennomføring

Velg mellom tilgjengelige virtuelle, fysiske og bedriftsinterne kurs.

Personlig rådgivning

Vi hjelper deg med å finne kurs og kompetanseløp som passer behovet ditt.

FAQ

Ofte stilte spørsmål

Hvor lenge varer kurset?

Kursets oppgitte varighet er 4.

Kan jeg ta en sertifisering?

Kurset kan være relevant som forberedelse til sertifisering. Se kursbeskrivelsen for informasjon om aktuell sertifisering og eksamen.

Hvilke forkunnskaper trenger jeg?

Attendees should meet the following prerequisites: • Technical understanding of TCP/IP networking and network architecture • Proficiency with Linux and UNIX text editing tools (vi editor is suggested but not required)

Hvem passer kurset for?

This course is designed for technical professionals who need to know how to deploy an open source intrusion detection system (IDS) based on Snort.

Kan kurset leveres som bedriftsinternt kurs?

Ja.

Kan kurset tas virtuelt?

Ja. Det finnes kommende kursdatoer med Virtual gjennomføring.

Hvor kan kurset leveres?

Kurset kan leveres over hele Norge, blant annet i Oslo, Kristiansand, Stavanger, Bergen, Trondheim og Tromsø.