Training
Course Description
This Advanced level 2-day course is designed to give Nitro administrators, advanced security professionals, and network engineers the advanced skills necessary to fully administer the Nitro security products and fine tune it capabilities to fit their custom needs. This course will cover advanced techniques within views, data analysis and handling of attacks. This course will also include real world example exercises where the students will correlate events utilizing all of the components of the IPS and the ESM/Receiver products. There will also be an advanced section on the underlying rules and policies that the product uses.
Prerequisites
- Completed the NSA Course from Nitro Security
- Advanced Networking and TCP/IP Knowledge
- Working Knowledge of Writing and Configuring IDS/IPS Rules
- Understanding of Security Logging and Auditing from all types of systems (Routers, UNIX, Windows, Firewalls)
Course Materials
- Course Book
- Student Lab Manual
- Evaluation Software
- Reference Materials
NSE Training Programs
NitroSecurity Engineer (2 Days)
Module 1: Views
- Advanced views
- Data Analysis
- Attacks
Module 2: Event Correlation
- Event correlation of attacks with all components on the network (data sources)
Module 3: Advanced Policies & Rules
- Advanced Policies
- Advanced Rules
- Snort Rules
