RealSecure Network and Server with SiteProtector Fast Track

start > courses and registration > training feature sheet

RealSecure Network and Server with SiteProtector Fast Track

course schedule			who can benefit
prerequisites			skills gained
other notes			course content
related solutions

code.

IS580

length.

5 days

type.

Instructor-Led

partner.

IBM

price.

$4,750

Skill level: Advanced

The Proventia RealSecure Network and Server with SiteProtector Fast Track course combines the Introduction and Advanced course with a bundled price. This course provides concepts, methods and practices necessary to successfully use Proventia Network RealSecure and Server with the SiteProtector management tool.

Starting with an introduction to the SiteProtector, the first two days focus on developing the student's knowledge around the SiteProtector architecture, mastering the application and understanding the different components. Students will learn with hands on labs, the role of each component and how they act in concert to monitor and protect a real-world network. Students will learn how to install and configure SiteProtector, as well as how to monitor network assets in the SiteProtector environment.

The third day focuses on providing in-depth practices necessary to successfully manage RealSecure Network and Server agents. Students will get indepth hands-on lab exercises to learn about the agents operational modes and how to properly deploy the appliance in any environment. Students will also master managing and configuring a RealSecure Network and Server Agents.

The fourth and fifth day Student's will increase their knowledge around the SiteProtector architecture, mastering the application and understanding the advanced functions. Students will learn with hands on labs functionality such as component communications, Event Archiver, Central Response, and SecurityFusion.

Combining both of these courses into one "track," you can easily register and save.

There are currently no scheduled dates for this course. If you are interested in this course, request a course date with the links below.

who can benefit

This is an advanced course for network and security professionals evaluating, implementing, managing, or monitoring RealSecure Network and Server Agents.

prerequisites

You should have working knowledge of:

	TCP/IP
	Windows 2000/2003 Server

skills gained

	Proventia SiteProtector Architecture Overview
	Installing and configuring SiteProtector components: Deployment Manager, Application Server, Site Database, Event Collector, Agent Manager, X-Press Update Server
	Deploying SiteProtector components on a network
	SiteProtector user groups and permissions
	SiteProtector console to monitor security events, and to manage SiteProtector components
	SiteProtector Web portal to monitor security events and run reports
	SiteProtector and network assets to facilitate effective management and analysis
	Best practices user events, analysis views, guided analysis tools, data filters, incidents/exceptions, and baselining
	SiteProtector reporting module to schedule and run reports
	Configuring SiteProtector components and X-Press Updates to SiteProtector
	Describe the functions of the RealSecure network and server agents and explain how they work together to monitor the network
	Install the RealSecure network and server agents and their corresponding updates
	Configure RealSecure network and server agent policies and properties
	Create Trons Rules for the RealSecure Network agent
	Create user defined events for the RealSecure network and server agents
	Incorporate regular expressions into RealSecure Network and Server agent user defined events
	Use advanced parameters with the RealSecure network and server agents
	Configure event propagation settings for RealSecure Network and Server agents
	Identify the communication channels used by SiteProtector agents
	Install SiteProtector in a clustered SQL environment
	Configure SiteProtector user groups and assign permissions to users
	Install and configure the SiteProtector SecurityFusion Module
	Prepare for fail over and fail back between sites and use SecureSync to facilitate these processes
	Capture packets using SiteProtector agents and examine these packets using popular packet capture tools
	Configure response objects and network objects used by various agents
	Describe the Central Responses architecture
	Configure and manage Response Rules
	Integrate SiteProtector with the Remedy Action Request System
	Use the Event Archiver to archive events
	Use SiteProtector's database maintenance functions to help manage the SiteProtector database
	Use the Sensor Controller diagnostic utility
	Filter and view events using the RealSecure SiteProtector event viewer
	Configure SiteProtector permissions for new users
	Install and configure the SiteProtector SecurityFusion module
	Examine SiteProtector packet capture files
	Create network and response objects
	Create response rules and manage Central Responses settings
	Install Event Archiver

course content details

	Course Topics

	Introduction and Installation of Proventia Management SiteProtector
	Configuring and Using SiteProtector Console
	Updating Components and Agents
	Organizing Network Assets
	Managing SiteProtector Components
	Monitoring Events in SiteProtector
	Advanced Analysis and Reporting, and Ticketing
	Managing Policies
	Introduction RealSecure Agents
	Installing and Updating Agents
	Configuring RealSecure Network Agents and Trons Rules
	Configuring RealSecure Server Agents and User Defined Events
	Using Regex in User Defined Events
	Using Advanced Parameters and configuring Event Propagation Settings
	Introduction to Advanced SiteProtector
	SiteProtector Communication
	Installing SiteProtector on a SQL Cluster
	Assigning SiteProtector Permissions
	Using the SecurityFusion Module
	Using SecureSync
	Examining SiteProtector Logs and Packets
	Confiquring Response and Network Objects
	Configuring Central Responses
	Integrating SiteProtector with Remedy
	Database Management