Implementing Intrusion Prevention

Implementing Intrusion Prevention

1. IPS Technologies

   • IDS and IPS Characteristics
     • Zero-Day attacjks
     • Monitor for Attacks
     • Detect and Stop Attacks
     • Similarities
     • dventages and desaventaged
   • Network-Based IPS implementatios
     • Host-based
     • Network-Based
     • IPS solution
     • Modes of Deployment
   • Cisco Swtiched Port Analyzer
     • Port mirroring
     • Cisco SPAN
     • Configuring CISCO SPAN

2. Implementing IPS

   • Configure Cisco IOS IPS
     • Implementing
     • Download
     • Crypto Key
     • Enable
   • Modifying Cisco IOS IPS
     • Retire and Unretire Signatures
     • Change signatures Actions
   • Verify and MOnitos IPS
     • Verify IOS
     • Report IPS Alerts
     • Enable SDEE

3. IPS Signatures

   • IPS Signature Chracteristics
     • attributes
     • types
     • File
     • Micro-engine
     • Signature File
   • IPS Signature Alarms
     • Alarm
     • PAttern-based detection
     • Anomaly-based Detection
     • Honey pot
   • IPS Signature Actions
     • Manage Generated alerts
     • Log Activities
     • Deny the activity
     • Reset, block and Allow
   • Manage and MOnitor IPS
     • Monitoring
     • Secure Device Event
     • IPS configuration best practices
   • PS Global Correlation
     • Csico Sensor Base Network
     • Cisco Security Intelligence Operation
     • Reputations