Training offering

IBM Security Network Intrusion Prevention System 4.6 Config and Deployment

Overview

This course provides concepts, methods, and practices necessary to successfully use IBM Security Network Intrusion Prevention System with a focus on providing in-depth practices necessary to successfully manage IBM Security Network Intrusion Prevention System appliances. Students get in-depth hands-on lab exercises to learn about the appliance's operational modes and how to properly deploy the appliance in any environment. Students also master managing and configuring the various policies that control the IBM Security Network Intrusion Prevention System appliance. As this course primarily leverages the IBM Security SiteProtector System, attendees of this class should have mastered that product prior to attending.

Public

This basic course is for Customers and Business Partners.

Prerequisits

Because this course uses the IBM Security SiteProtector System console, you should have mastered that product before attending. You should also have basic navigation knowledge of VMware Workstation.

Objective

• Describe intrusion prevention concepts and the IBM Security Network Intrusion Prevention System (IPS)
• Connect an IBM Security Network Intrusion Prevention Systemappliance to your network
• Configure the initial settings on the appliance and register it with SiteProtector
• Manage the IBM Security Network Intrusion Prevention Systemusing SiteProtector
• Configure firewall rules for IBM Security Network Intrusion Prevention System
• Configure protection domains, security events, and response filters
• Configure the X-Force Virtual Patch, data loss prevention, and web application protection policies
• Configure user-defined events, tuning parameters, OpenSignature events, and connection events
• Enable SNORT and configure SNORT rules for IBM Security Network Intrusion Prevention System
• Integrate the IBM Security Network Intrusion Prevention System with IBM QRadar SIEM

Topics

• Introduction to IBM Security Network Intrusion Prevention System
• Connecting the appliance
• Setting up the appliance
• Managing the appliance
• Configuring firewall
• Configuring security events
• Configuring protection policies
• Configuring user specified policies
• Configuring SNORT
• QRadar SIEM integration