Securing Hosts Using Cisco Security Agent v3.0 (HIPS)

2-day course - Cisco Course v3.0 | Cisco Security Agent v5.0 | Prepares you for Cisco Exam 642-513 HIPS

Course Description

This course takes a task-oriented approach to teaching the skills to deploy, configure, and administer CSA to protect server and workstation hosts. The HIPS 3.0 course provides training on Cisco Security Agent v5.0.

Course Objectives

Students will learn about:

• Platforms and infrastructure that support CSA and the CSA MC
• CSA architecture and the CSA MC
• Configure the way CSA protects a host system
• Install CSA with a default Agent kit
• Create host groups and build Agent kits
• Application classes and their appropriate security policies
• Use variables for granular control when creating rules
• Configure security policies and rules
• Configure system correlation rules for CSA
• Rules for Windows, UNIX, and both
• Perform data analysis and create policies with CSA Analysis
• Manage the Event Log and generate reports

Intended Audience

Cisco customers, employees, and channel partners/resellers.

Prerequisites

• Certification as a CCNA or equivalent knowledge
• At least six months of practical experience configuring Cisco IDS Sensors Competency in using the Windows NT operating system
• Familiarity with implementing network security policies Perimeter security system components: perimeter router, firewall, bastion host/Servers and Hosts

Course Outline

1. Security Fundamentals
2. Cisco Security Agent Overview
3. Cisco Security Agent Quick Start Installation
4. Cisco Security Agent Management Center Administration
5. Configuring Groups and Managing Hosts
6. Building Policies
7. Rule Basics
8. System Correlation Rules
9. Defining Application Classes
10. Working with Variables
11. Using Cisco Security Agent Analysis
12. Using Event Logs and Generating Reports