COURSE OUTLINE

Module 1: History of Threat Prevention

·      Lab Tasks:

o  Verify the Security Environment

o  Verify Connectivity Between Systems

Module 2: IPS Protections

·      Lab Tasks:

o  Enable and Configure Custom Threat Prevention

o  Configure the Inspection Settings

o  Update IPS Protections

o  Configure General and Specific Protections

o  Configure and Test Core Protections

Module 3: Anti-Virus and Anti-Bot Protections

·      Lab Tasks:

o  Enable Anti-Bot and Anti-Virus

o  Configure Anti-Bot and Anti-Virus

Module 4: Threat Prevention Policy Profiles

·      Lab Tasks:

o  Create Custom Threat Prevention Profiles

o  Configure the Custom Profiles

o  Configure Anti-Bot and Anti-Virus in the Custom Profiles

Module 5: Threat Prevention Policy Layers

·      Lab Tasks:

o  Configure Gateway Interface Settings

o  Configure Threat Prevention Policy Layers

o  Configure Threat Prevention Rules with Custom Profiles

Module 6: Threat Prevention Logs and Traffic Analysis

·      Lab Tasks:

o  Modify Threat Prevention Logs and Configure SmartEvent Settings

o  Test Threat Prevention Protections

o  View Threat Prevention Logs and Events

o  Use Web SmartConsole to View Logs and Events.

Module 7: Threat Prevention Exceptions and Exclusions

·      Lab Tasks:

o  Use IPS and Threat Prevention Exceptions

o  Create an Inspection Settings Exception

o  Create a Core Activations Exception

Module 8: Correlated Threat Prevention Views and Reports

·      Lab Tasks:

o  Verify SmartEvent Activation

o  Generate and Verify Logs for Reporting

o  Configure SmartEvent Views and Reports

Module 9: Threat Prevention Updates

·      Lab Tasks:

o  Verify Recent Updates

o  Configure Update Settings

Module 10: Threat Prevention Performance Optimization

·      Lab Tasks:

o  Analyze Threat Prevention Performance

o  Create Penalty Box Exceptions and Null Profiles

o  Test the Panic Button Protocol

Module 11: Advanced Threat Prevention Features and Troubleshooting

·      Lab Tasks:

o  Add a Custom SNORT Rule

o  Create and Test a Custom Threat Indicator

o  Observe Traffic Drops in Real Time

o  Audit Configuration Changes