Back to Search Results

Training Course Summary:

CSIDS 4.1 is a five-day leader-led, lab-intensive course delivered by Cisco Learning Partners (CLPs). This task-oriented course teaches the knowledge and skills needed to design, install, and configure a Cisco Intrusion Protection solution for small, medium, and enterprise networks. The course covers Cisco IDS platforms including the Cisco 4200 series Sensors, the Network Module for Cisco 2600/3600/3700 routers, and the Catalyst 6000 series Intrusion Detection Module 2 (IDSM2). The IDS Device Manager and the Management Center for IDS Sensors are used to configure and manage Cisco IDS Sensor platforms. The IDS Event Viewer and the Monitoring Center for Security are used to view IDS alarms


COURSE OBJECTIVES


After completing this course, the student should be able to:


Describe the basic intrusion detection terminology.
Explain the different intrusion detection technologies and evasive techniques.
Design a Cisco IDS protection solution for small, medium, and enterprise customers.
Identify the Cisco IDS Sensor platforms and describe their features.
Install and configure a Cisco IDS Sensor.
Install and configure a Cisco Intrusion Detection System Module 2.
Install and configure a Cisco Network Module for Cisco 2600, 3600, and 3700 routers.
Tune Cisco IDS signatures to work optimally in unique network environments.
Create and implement customized intrusion detection signatures.
Create alarm exceptions to reduce alarms and possible false positives.
Configure a Cisco IDS Sensor to perform device management of supported blocking devices.
Describe the Cisco IDS signatures and determine the immediate threat posed to the network.
Perform maintenance operations such as signature updates and software upgrades.
Describe the Cisco IDS architecture.
Manage a large scale deployment of Cisco IDS Sensors with Cisco IDS Management and Monitoring software

Pre-Requisites:

Students who attend this course must have experience with the Cisco IOS or IDS command line and must meet the following prerequisites:


Certification as a CCNA or the equivalent knowledge (optional)
Strong user level experience with Windows operating systems.
Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)

Who Should Attend:

Employees
Channel Partner/Reseller
Customers
System Engineers/Account Managers

Training Course Overview/Content:

Lesson 1 : Course Introduction

Lesson 2: Network Security and Cisco

Lesson 3: Intrusion Detection and Intrusion Protection Technologies

Lesson 4: Cisco Intrusion Detection System Architecture

Lesson 5: Getting Started with the IDS Command Line

Lesson 6: Cisco Intrusion Detection System Device Manager and Event Viewer

Lesson 7: Sensor Configuration

Lesson 8: Alarms and Signatures

Lesson 9 : Signature Configuration

Lesson 10: Sensor Tuning

Lesson 11: Blocking Configuration

Lesson 12: Sensor Maintenance

Lesson 13: Enterprise IDS Management

Lesson 14: Enterprise IDS Monitoring and Reporting

Lesson 15: IDS Network Module

Lesson 16: Intrusion Detection System Module

Lesson 17: Capturing Network Traffic for Intrusion Detection Systems