Securing Cisco Networks with Open Source Snort (CLS-SSFSNORT)

1 800 U Learn (853 276)

DDLS - Securing Cisco Networks with Open Source Snort (CLS-SSFSNORT)

Length

4 days

Price

$6490.00 inc GST

Reserve Your Spot

Overview

Securing Cisco® Networks with Open Source SnortTM (SSFSNORT) is an instructor-led course offered by Cisco Learning Services High-Touch Delivery. It is a lab-intensive course that introduces students to the open source Snort technology as well as rule writing.

You will learn how to build and manage a Snort system using open source tools, plug-ins, and the Snort rule language to help manage, tune, and deliver feedback about suspicious network activity.

This course combines lecture materials and hands-on labs throughout to make sure that you are able to construct a solid, secure Snort installation and write Snort rules using proper syntax and structure. This course prepares you to take the Securing Cisco Networks with Open Source Snort exam (exam ID 500-280).

Key Topics

Detailed Info

Introduction to Snort Technology
Snort Installation
Operating Snort
Snort Configuration
Keeping Rules Up-to-date
Rule Optimization
Building a Snort IPS Installation
Basic Snort Tuning

Skills Gained

Key Topics

Target Audience

Prerequisites

Skills Gained

Upon completion of this course, you should be able to:

Describe what Snort is and its basic architectural components
Describe the Snort dynamic plug-in capabilities
Describe the different modes of Snort operation
Perform installation and configuration of the Snort system
Install and configure Snorby
Configure and tune the Snort preprocessors
Understand rule maintenance and techniques to keep rules current
Create Snort rules using both simple and advanced rule writing techniques
Monitor performance of a Snort deployment

Key Topics

Module 1: Intrusion Sensing technology, Challenges, and Sensor Deployment
Module 2: Introduction to Snort Technology
Module 3: Snort Installation
Module 4: Configuring Snort for Database Output and Graphical Analysis
Module 5: Operating Snort
Module 6: Snort Configuration
Module 7: Configuring Snort Preprocessors
Module 8: Keeping Rules Up-to-date
Module 9: Building a Distributed Snort Installation
Module 10: Basic Rule Syntax and Usage
Module 11: Building a Snort IPS Installation
Module 12: Rule Optimization
Module 13: Using Perl Compatible Regular Expressions (PCRE) in Rules
Module 14: Basic Snort Tuning
Module 15: Using Byte_Jump, Byte_Test and Byte_Extract Rule Options
Module 16: Protocol Modeling Concepts and Using Flowbits in Rule Writing
Module 17: Case Studies in Rule Writing and Packet Analysis

Target Audience

This course is designed for technical professionals who need to know how to deploy Open Source Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), as well as write Snort rules.

The primary audience for this course includes:

Security administrators
Security consultants
Network administrators
System engineers
Technical support personnel using open source IDS and IPS

Prerequisites

Technical understanding of TCP/IP networking and network architecture Proficiency with Linux and UNIX text editing tools (vi editor is suggested but not required)

Print course details

The supply of this course by DDLS is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.

Request Course Information

You don't appear to have Javascript enabled, our contact forms & booking process unfortunately requires it.

If you'd like more information, or to book a course please email us

Name*
First Last
Email*
Phone*
Organisation*
State*
Request further information for:
I’m booking for multiple attendees
- I’m booking for multiple attendees

Email Course Outline

Request a Callback

Enter your details below and we'll email you a pdf of the course outline.

Name*
First Last
Organisation
Email*
Course
Length
Price
Overview
Skills Gained
Key Topics
Target Audience
Prerequisites
FIfthTab
Course Meta

Enter your details below and one of our team will give you a call to answer any questions you may have.

Name*
First Last
Email*
Phone*
Organisation*
State*
Request further information for:

Pre-Course Requirements

This course has requirements which must be completed before commencing.
Please click here to view.

Testimonials

See what our clients have said about us