{"id":3405,"date":"2022-04-04T14:01:28","date_gmt":"2022-04-04T13:01:28","guid":{"rendered":"https:\/\/republify.se\/?post_type=product&p=3405"},"modified":"2022-04-04T14:01:30","modified_gmt":"2022-04-04T13:01:30","slug":"check-point-advanced-intrusion-prevention-systems-aips","status":"publish","type":"product","link":"https:\/\/republify.se\/index.php\/produkt\/check-point-advanced-intrusion-prevention-systems-aips\/","title":{"rendered":"Check Point Advanced Intrusion Prevention Systems (AIPS)"},"content":{"rendered":"

During this 2-day instructor-led course, you will learn advanced skills to configure and manage the Check Point IPS Software Blade. You will create, modify and monitor a client profile, monitor an attack, gather IPS statistics, customize a protection, and learn basic troubleshooting techniques.<\/strong><\/p>\n

Persons attending this course should have general knowledge of TCP\/IP, working knowledge of Windows and\/or Unix, network technology, the Internet and 6 months experience working in a Check Point security gateway environment.<\/p>\n

 <\/p>\n

\n
\n
Objectives<\/h5>\n<\/div>\n<\/div>\n
\n

\u2022 Understand how security policies affect network processes
\n\u2022 Learn how data is used to fine tune processes and reduce risk
\n\u2022 Incorporate 5 proven IT security best practices
\n\u2022 Discuss IPS deployment strategies
\n\u2022 Discuss the layers of the IPS engine
\n\u2022 Describe the unique capabilities of the Check Point IPS engine
\n\u2022 Create and apply profiles to groups of devices that need protection against certain attacks
\n\u2022 Discuss how IPS Mode determines detect or prevent default protections
\n\u2022 Describe how the severity of an attack is determined
\n\u2022 Learn how to schedule automatic updates for ongoing protection
\n\u2022 Use Geo Protection to control traffic by country
\n\u2022 Learn to discover abnormal events, attacks, viruses, or worms when raw data is analyzed
\n\u2022 Discuss the major components in IPS Event Analysis Architecture
\n\u2022 Describe what you can do with the IPS Event Analysis Client
\n\u2022 Describe why having signatures available that protect against known vulnerability attacks is essential
\n\u2022 Describe how a good IPS solution will have zero-day threat prevention to protect against attacks which exploit unknown or undisclosed vulnerabilities
\n\u2022 Be able to distinguish false positives
\n\u2022 Describe the benefits of SecureXL and CoreXL
\n\u2022 Describe the function of the Passive Streaming Library (PSL)
\n\u2022 Be able to configure how IPS is managed during a cluster failover
\n\u2022 Learn how to focus on high severity and high confidence level protections
\n\u2022 Properly configure hosts like DNS Servers, Web Servers and Mail Servers for IPS protections<\/p>\n<\/div>\n

 <\/p>\n

\n
\n
Audience<\/h5>\n<\/div>\n<\/div>\n
\n

Technical persons who support, install, deploy or administer Check Point security solutions should attend this course including:<\/p>\n

\u2022 System Administrators
\n\u2022 System Engineers
\n\u2022 Support Analysts
\n\u2022 Network Engineers
\n\u2022 Anyone seeking to extend a Check Point certification<\/p>\n<\/div>\n

 <\/p>\n

\n
\n
Programme<\/h5>\n<\/div>\n<\/div>\n
\n

\u2022 Configure the IPS Software Blade
\n\u2022 Test the Security Policy and Demonstration Tool
\n\u2022 Test the IPS Functionality
\n\u2022 Change IPS Policy Enforcement
\n\u2022 Deploy Geo Protection in IPS
\n\u2022 Modify Anti-Spoofing settings
\n\u2022 Test IPS Geo Protection features
\n\u2022 Test the Default_Protection profile
\n\u2022 Define a new Profile
\n\u2022 Identify attacks with SmartEvent Viewer
\n\u2022 Download and install IPS protections
\n\u2022 Use the IPS follow-up protection review process
\n\u2022 Manually update the IPS Protections on the gateway to the most current available
\n\u2022 Download and install IPS Protections
\n\u2022 Follow up with IPS Protections Review
\n\u2022 Configure, enable and test IPS Troubleshooting mode
\n\u2022 Modify and test the Bypass Under Load Settings
\n\u2022 Configure Protection Engine settings
\n\u2022 Identify Top Events and Protections
\n\u2022 Modify Protections to defend against common attacks
\n\u2022 Debug the logging mechanism
\n\u2022 Configuring Protection Engine Settings
\n\u2022 Use debug to gather IPS statistics
\n\u2022 Use tcpdump to identify the source of an attack
\n\u2022 Modify protections to prevent attack source
\n\u2022 View Security Gateway messages<\/p>\n

 <\/p>\n<\/div>\n

 <\/p>\n

Kursen levereras i samarbete med<\/h3>\n

\"\"<\/p>\n

Kontakta oss om denna kurs<\/h2>\n