Implementing Cisco Security Monitoring, Analysis, and Response System MARS

    

Summary:
This course is part of the Cisco Security Management Suite which provides security monitoring for network security devices and host applications made by Cisco or non-Cisco providers. Areas of study include event correlation, data reduction features, topology awareness, and automatic mitigation features. Network topology knowledge allows for determination of attack origin as well as application of appropriate remedy. This course is a key component in the Cisco Self Defending Network strategy. Together with CS-Manager, CS-Mars provides a unified security management solution for monitoring and provisioning. It is strongly suggested that candidates successfully complete CCNA Security prior to enrollment. This course is designed for network professionals wanting to guarantee the security of their networks.

Duration:
4 Days/Lecture & Lab

Audience:
-Technicians requiring CCSP Certification-Technicians using or designing networks with Cisco Security products

Topics:

• Introducing Cisco Security Monitoring, Analysis, and Response System
• Understanding the System Architecture
• Configuring a Cisco Security MARS Appliance
• Adding Reporting and Mitigation Devices
• Viewing the Summary Page
• Managing Rules
• Understanding Queries and Reports
• Investigating and Mitigating Incidents
• Working with User-Defined Log Parser Templates
• Integrating with Cisco Security Manager
• Managing and Administering the System
• Troubleshooting and Optimizing Cisco Security MARS
• Using the Cisco Security MARS Global Controller
• Course Review

Prerequisites:
Students attending this class should have the following:-Fundamental knowledge of implementing network security -CCNA Security-SNRS, SNAF, and IPS

Last Update: May 22, 2012