Introduction:

Securing Hosts Using Cisco Security Agent (HIPS) takes a task-oriented approach to teaching the skills to deploy, configure, and administer CSA to protect server and workstation hosts

Audience:

Students who require the knowledge and skills needed to implement end-to-end security solutions using the SAFE Small, Midsize, and Remote-User blueprint. The target audience for this course is as follows: System Engineers Engineers who support sales of Cisco security product solutions. Cisco Channel Partners, who sell, implement and maintain secure networks. Cisco Customers who implement and maintain secure networks.

Prerequisites:

Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites: Certification as a CCNA or the equivalent knowledge. At least six months practical experience configuring Cisco IDS Sensors. Competency in using the Windows NT operating system. Familiarity with implementing network security policies and the following networking concepts: Perimeter security system components: perimeter router, firewall, bastion host / Servers and Hosts

Objectives:

After completing this course the student should be able to: Identify the platforms and infrastructure that support CSA and the CSA MC Describe the CSA architecture and the CSA MC Configure the way CSA protects a host system Install CSA with a default Agent kit Create host groups and build Agent kits Define application classes and associate them with the appropriate security policies Use variables for granular control when creating rules Configure security policies and rules Configure system correlation rules for CSA Identify which rules are for Windows, UNIX, and both platforms Perform data analysis and create policies with CSA Analysis Manage the Event Log and generate reports

Course Outline

Security Fundamentals Cisco Security Agent Overview Cisco Security Agent Quick Start Installation Cisco Security Agent Management Center Administration Configuring Groups and Managing Hosts Building Policies Rule Basics System Correlation Rules Defining Application Classes Working with Variables Using Cisco Security Agent Analysis Using Event Logs and Generating Reports