SSFIPS 4.0

Kurs Securing Networks with Cisco Firepower Next-Generation IPS (SSFIPS) v4.0 pokazuje jak wdrożyć i używać Cisco Firepower® Next-Generation Intrusion Prevention System (NGIPS). Ten praktyczny kurs daje wiedzę i umiejętności do wykorzystania funkcji platformy i obejmuje koncepcje bezpieczeństwa zapory, architekturę platformy i kluczowe funkcje; dogłębną analizę zdarzeń, w tym wykrywanie sieciowego złośliwego oprogramowania i typu plików, dostrajanie i konfigurację NGIPS, w tym kontrolę aplikacji, inteligencję bezpieczeństwa, zaporę, oraz kontrolę sieciowego złośliwego oprogramowania i plików; język reguł Snort®; inspekcję plików i złośliwego oprogramowania, inteligencję bezpieczeństwa i konfigurację polityki analizy sieciowej zaprojektowanej w celu wykrywania wzorców ruchu; konfigurację i wdrożenie polityk korelacji w celu podjęcia działań w oparciu o wykryte zdarzenia; rozwiązywanie problemów; zadania administracyjne systemu i użytkownika oraz inne.

Kurs ten pomaga przygotować się do egzaminu Securing Networks with Cisco Firepower (300-710 SNCF), który prowadzi do uzyskania certyfikatów CCNP Security i Cisco Certified Specialist – Network Security Firepower. Egzamin 300-710 SNCF ma również drugi kurs przygotowawczy, Securing Networks with Cisco Firepower Next Generation Firewall (SSNGFW). Możesz wziąć udział w tych kursach w dowolnej kolejności.

Kurs ten pozwala również na zdobycie 32 punktów Continuing Education (CE) w celu uzyskania recertyfikacji.

How you’ll benefit

This course will help you:

• Implement Cisco Firepower Next-Generation IPS to stop threats, address attacks, increase vulnerability prevention against suspicious files, and analyze for not-yet-identified threats
• Gain leading-edge skills focused on security
• Earn 32 CE credits for recertification

What to expect in the exam

The 300-710 SNCF exam certifies your knowledge of Cisco Firepower^® Threat Defense and Firepower^®, including policy configurations, integrations, deployments, management, and troubleshooting.
After you pass 300-710 SNCF:

• You earn the Cisco Certified Specialist – Network Security Firepower certification.
• You will have satisfied the concentration exam requirement for new CCNP Security certification. To complete CCNP Security, you also need to pass the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) exam or its equivalent.

Who should enroll

This course is designed for technical professionals who need to know how to deploy and manage a Cisco Firepower NGIPS in their network environment.

• Security administrators
• Security consultants
• Network administrators
• System engineers
• Technical support personnel
• Channel partners and resellers

Course Objectives

After taking this course, you should be able to:

• Describe the components of Cisco Firepower Threat Defense and the managed device registration process
• Detail Next-Generation Firewalls (NGFW) traffic control and configure the Cisco Firepower system for network discovery
• Implement access control policies and describe access control policy advanced features
• Configure security intelligences features and the Advanced Malware Protection (AMP) for Networks implementation procedure for file control and advanced malware protection
• Implement and manage intrusion and network analysis policies for NGIPS inspection
• Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
• Integrate the Cisco Firepower Management Center with an external logging destination
• Describe and demonstrate the external alerting options available to Cisco Firepower Management Center and configure a correlation policy
• Describe key Cisco Firepower Management Center software update and user account management features
• Identify commonly misconfigured settings within the Cisco Firepower Management Center and use basic commands to troubleshoot a Cisco Firepower Threat Defense device

Course Prerequisites

To fully benefit from this course, you should have the following knowledge and skills:

• Technical understanding of TCP/IP networking and network architecture
• Basic familiarity with the concepts of Intrusion Detection Systems (IDS) and IPS

Course outline

• Cisco Firepower Threat Defense Overview
• Cisco Firepower NGFW Device Configuration
• Cisco Firepower NGFW Traffic Control
• Cisco Firepower Discovery
• Implementing Access Control Policies
• Security Intelligence
• File Control and Advanced Malware Protection
• Next-Generation Intrusion Prevention Systems
• Network Analysis Policies
• Detailed Analysis Techniques
• Cisco Firepower Platform Integration
• Alerting and Correlation Policies
• Performing System Administration
• Troubleshooting Cisco Firepower

Lab outline

• Initial Device Setup
• Device Management
• Implementing Network Discovery
• Implementing an Access Control Policy
• Implementing Security Intelligence
• File Control and Advanced Malware Protection
• Implementing NGIPS
• Customizing a Network Analysis Policy
• Detailed Analysis
• Configuring Cisco Firepower Platform Integration with Splunk
• Configuring Alerting and Event Correlation
• Performing System Administration
• Troubleshooting Cisco Firepower