ISS trainings
Server Protection

Server Sensor provides automated, realtime intrusion detection and protection by analyzing events, operating system logs and inbound/outbound network traffic on enterprise servers, blocking malicious activity from damaging critical assets. The course provides concepts, methods and practices necessary to successfully manage the Server Sensor. The course focuses on hands-on exercises supported by demonstrations, presentations and lecture. Students learn how to properly deploy and install the sensor, create and manage policy, and how to monitor and analyze security events using SiteProtector Console.
1 day

1. Module 1: Preparing for Installation

• System Requirements

2. Module 2: Configuring Server Sensor

• Server Sensor Policies
• Server Sensor Events

3. Module 3: Automated Installation

• Automated Installation Options

4. Module 4: Managing Server Sensor Policies

• Working with Sensor Policies
• Migrating Custom Sensor Policies

5. Module 5: Working with Events and Responses

• Working with Event Responses
• Understanding Event Propagation
• Advanced Consolidation of Events

6. Module 6: Server Protection Under the Hood

• Working with Policy Files
• Sensor and Appliance Data Paths
• Protocol Analysis Module

7. Module 7: User Defined Events

• Server Sensor User Defined Events
• Regular Expressions
• Fusion Scripting and Tcl
• Tcl Scripting
• Fusion Scripting Implementation

8. Appendix A: Advanced Installation Options
9. Response File Parameters
10. Specifying Cryptographic Providers
11. XML File
12. Running Automated Install in Silent Mode
13. Appendix B: Windows Events
14. Appendix C: Object Access Command Codes
The participants will obtain certificates signed by Internet Security Systems.
Krakow - 5 Tatarska Street, II floor, hours: 9:00 am - 4:00 pm
Warsaw - 17 Bielska Street, hours: 9:00 am - 4:00 pm
Authorized Internet Security Systems Trainer
650 EUR

• Opening Extreme Networks Authorized Traininigs in Special Price
• ISS week with free accommodation!
• Check Point Advanced Specializations
• If Check Point ----- point Krakow!

• 2008-09-04: Kraków
  » Sign up at this date
• 2008-10-09: Kraków
  » Sign up at this date
• 2008-11-27: Kraków
  » Sign up at this date

• Introduction to SiteProtector™
• Advanced SiteProtector™
• Network Intrusion Prevention
• Integrated Security Appliance
• Desktop Protection™
• Server Protection
• Vulnerability Assessment
• Forensics Workshop
• Intrusion Detection, Prevention and Response
• Network Intrusion and Penetration Techniques

• BlueCoat: Blue Coat Director Course
• BlueCoat: Blue Coat WAN Acceleration Professional (BCWAP) Course
• Fortinet: FortiMail Email Filtering
•   New trainings: RSS Feed »