Training/cursus: Implementing Cisco Security Monitoring Analysis and Response System (MARS) (MARS)
Doel
The Cisco Security Monitoring Analysis and Response System (CS-MARS) is part of the Cisco Security Management Suite which provides security monitoring for network security devices and host application made by Cisco or non-Cisco providers. In addition to event correlation and data reduction features found in SIM products, CS-MARS also provides topology awareness and automatic mitigation features. In knowing the topology of a network, CS-MARS can determine where the attack is originating and apply the appropriate remediation. CS-MARS is a key component in the Cisco Self Defending Network strategy. CS-MARS exchanges information with CS-Manager to provide a unified security management solution. For example, an administrator can view IPS signatures or will communicate with CS-Manager and display the IPS signature table or firewall rule table. From there the IPS signature or firewall rule can be modified as necessary. Together CS-MARS and CS-Manager provide a unified management solution for monitoring and provisioning.
Doelgroep
This course is intended for channel partners / resellers, customers, employees.
Inhoud
- Introducing Cisco Security Monitoring Analysis and Response System.
- Understanding the System Architecture.
- Configuring a Cisco Security MARS Appliance.
- Adding Reporting and Mitigation Devices.
- Viewing the Summary Page.
- Managing Rules.
- Understanding Queries and Reports.
- Investigating and Mitigating Incidents.
- Working with User-Defined Log Parser Templates.
- Integrating with Cisco Security Manager.
- Managing and Administering the System.
- Troubleshooting and Optimizing Cisco Security MARS.
- Using the Cisco Security MARS Global Controller.
- Course Review.
Vereiste voorkennis
- CCNA Security is a prerequisite
- Implementing Cisco IOS Network Security (IINS).
- This course/exam is an elective for the CCSP certification. It is recommended that the learner also take SNRS v3.0, SNAF v1.0 and IPS v6.0 prior to this course/exam.
Inschrijven
Wilt u zich inschrijven? Kies een datum uit de rechterkolom en klik op 'inschrijven'. Of vraag vrijblijvend een offerte aan.
