Training
Course Description
This Introductory to Intermediate level 3-day course is designed to give administrators, security professionals, and network engineers the skills and foundation necessary to administer the Nitro security products and fine tune its capabilities to fit their needs. This course will cover all administrative functions of the products (Nitro Components, ESM, Receiver, IPS, and using Views). This course will also include real world example exercises where the students will configure and utilize the Nitro components to identify and defend against recent attack techniques.
Prerequisites
- Basic Networking and working Knowledge of TCP/IP
- Basic Security Knowledge (including: Firewalls, IDS, IPS, Signatures)
- Basic Understanding of Security Logging and Auditing
This class is a pre-requisite to the NSE Course.
Course Materials
- Course Book
- Student Lab Manual
- Evaluation Software
- Reference Materials
NSA Training Programs
NitroSecurity Administration (3 Days)
Module 1: Introduction
- Introduction to course
- Class details
- Course materials
- Expectations
Module 2: Nitro Security Overview
- Product(s) Overview
- Nitro Specific advantages (Database)
- Product Components
- Initial Product Windows/Components
Module 3: ESM
- Install
- Setup
- Window Components
- Configuration
- Policies
- Views Overview, global properties
Module 4: IPS
- Install
- Setup/Keying
- Properties
- Policies
- Rules
- Views Overview
- Flows
Module 5: Receiver
- Install
- Setup/Keying
- Properties
- Data Sources
- Logs & Flows
- Policies
- Views Overview
Module 6: Views
- Types
- Customizing
- Analyzing
Module 7: Administration
- Real world examples of traffic analysis
- Real world exercises of attacks
