Technologies / Infrastructure

IBM Network Protection Advanced Topics

Do you need to combat advanced threats? Do you need to protect web applications? This course focuses on advanced configuration and administration of the IBM Network Protection (XGS) appliance. Learn how XGS uses X-Force, PAM, Injection Logic Engine, and other tools to prevent attacks. You will also learn how to use APIs to interact with the appliance, implement SNMP, configure high availability configuration, and migrate policies from IBM Network IPS appliance to XGS. Troubleshooting techniques are also taught.

Required Participant Preparation

Before taking this course, ensure you have the following skills:

IT Infrastructure
IT Security Fundamentals
Linux
Windows
Basic experience with VMware environment
TCP/IP Networks
Experience navigating and using the Network Protection local management interface

Before taking the course you should be proficient with the Network Protection local management interface

Who is this training for?

This course is intended for security administrators, security analysts, technical security architects, crime managers, network administrators, professional services using IPS solutions, and IPS administrators

Training program

Ochrona przed various atakami — mechanizmy IBM X-Force, module analysis protocol (PAM), aktualizacje eXpress, zapobieganie atakom sieciowym
Ochrona applications internetowych at using PAM and Injection Logic Engine (ILE) — prevention SQL Injection, cross-site scripting (XSS), validation data input
Ochrona applications internetowych and OWASP Top 10 — mapping XGS security on kategorie OWASP, configuration polityk ochrony
Zwalczanie zaawansowanych attacks typu Advanced Persistent Threat (APT) — fazy ataku APT, methods detekcji, analysis cases medialnych
Zwalczanie attacks mutated — ochrona przed zmutowanymi wariantami znanych attacks, techniques detekcji polimorficznej
Exercises: configuration polityk ILE, analysis scenariuszy attacks OWASP Top 10, detekcja APT

Korzystanie with interfejsu API to interakcji with devices XGS — REST API, automation configuration, scripts management
Implementation protocol SNMP — configuration alerts SNMP generowanych przez objects responses and alerts system, monitoring events
Techniques solving problems — processes diagnostyczne, files logs, tools trace, identification and eliminacja problems sieciowych
Zaawansowana analysis ruchu — inspekcja packages, correlation events, reports security
Tuning performance XGS — optimization rules inspekcji, management throughput, reduction false positives
Exercises: configuration API, alerting SNMP, diagnostics problems with using logs and trace

Implementation wysokiej accessibility at using XGS — configuration HA, failover, redundancja devices in networks
Designing topologii HA — active/standby, inline vs passive, integration with infrastructure network
Migracja zasad IBM Network IPS (GX) do IBM Network Protection (XGS) — planowanie migracji, mapowanie polityk, walidacja
Management aktualizacjami and politykami security — wersjonowanie, testing zmian, rollback
Najlepsze praktyki administracji XGS — hardening, monitoring, documentation, procedures operacyjne
Exercises final: configuration HA, migration polityk, summary kursu

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Training Topics

Frequently asked questions

What are the prerequisites for this training?

The IBM Network Protection Advanced Topics training does not require specialized prior knowledge. Basic IT knowledge is sufficient.

What is the format and duration of this training?

The training lasts 3 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: This course is intended for security administrators, security analysts, technical security architects, crime managers, network administrators, professional services using IPS solutions, and IPS administrators.