In this four-day course, Securing Cisco Networks with Open Source Snort®, students will learn how to build and manage a Snort® system using open source tools, plug-ins, as well as the Snort® rule language to help manage, tune, and deliver feedback on suspicious network activity.
This lab-intensive course introduces you to the open source Snort® technology, as well as rule writing. Among other powerful features, you become familiar with:
The course begins by introducing the Snort® technology and progresses through the installation and operation of Snort®. You will discover the various output types that Snort® provides and learn about automated rule management including how to deploy and configure Pulled Pork, inline operations, and how to create custom Snort® rules, including advanced rule-writing techniques and OpenAppID.
This course combines lecture materials and hands-on labs that give you practice in deploying and managing Snort®.
Upon completing this course, the learner will be able to meet these overall objectives:
The primary audience for this course is as follows:
The knowledge and skills that the learner should have before attending this course are as follows:
|Learning Style||Virtual Classroom|
|Course Duration||4 Days|