Certificate Course:Cisco IPS Specialist

Course content:

Describe how Cisco IPS sensors are used to mitigate network security threats

* List sensor requirements for inline operations
* Explain the difference between inline and promiscuous mode sensor operations
* Explain how Cisco IPS protects network devices from attacks (Describe signatures, alerts, and actions)
* Explain the evasive techniques used by hackers and how Cisco IPS defeats those techniques
* Describe the considerations necessary for selection, placement, and deployment of a network intrusion prevention system
* Explain the Cisco IPS signature features

Install Cisco IPS sensors/modules and configure essential system parameters

* Explain AIP-SSM functionalities
* Use the CLI to initialize the sensor
* Configure user accounts and explain the different user roles
* Configure management access to the sensor appliance
* Explain how allowed hosts are used and how they are configured
* Describe sensor interfaces, interface pairs, VLAN-pairs, and VLAN-groups
* Use the Cisco IDM to configure sensor interfaces (enable, create pairs, assign to virtual sensors)
* Describe and configure software bypass
* Describe sensor communications with external management and monitoring systems
* Launch, navigate, and use the Cisco IDM to manage and monitor the sensor
* Describe the various CLI configuration modes and sub modes and navigate between them
* List the tasks for installing and configuring the IDSM-2 and AIP-SSM

Describe Cisco IPS sensor advanced system parameters

* Plan the mitigation of specific network vulnerabilities and exploits
* Describe sensor tuning
* Explain IP fragment and TCP stream reassembly options
* Explain how IP logging should be used and how it is configured
* Explain the use of Event Variables
* Describe signature engines and their functionality
* Determine which response actions need to be configured for a given scenario.