Securing Cisco Networks with Snort Rule Writing Best Practices v2.1
Schedule
Start | End | Duration | Location | Details |
---|
Course Details
Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRules) v2.1
Course code: SSFRULES
Duration: 3 Days
Prerequisite:
To fully benefit from this course, you should have:
• Basic understanding of networking and network protocols
• Basic knowledge of Linux command-line utilities
• Basic knowledge of text editing utilities commonly found in Linux
• Basic knowledge of network security concepts
• Basic knowledge of a Snort-based IDS/IPS system
Course Description:
The Securing Cisco Networks with Snort Rule Writing Best Practices (SSF Rules) v2.1 course shows you how to write rules for Snort, an open-source intrusion detection and prevention system. Through a combination of expert-instruction and hands-on practice, this course provides you with the knowledge and skills to develop and test custom rules, standard and advanced rules-writing techniques, how to integrate OpenAppID into rules, rules filtering, rules tuning, and more. The hands-on labs give you practice in creating and testing Snort rules.
Course Objectives:
After taking this course, you should be able to:
• Describe the Snort rule development process
• Describe the Snort basic rule syntax and usage
• Describe how traffic is processed by Snort
• Describe several advanced rule options used by Snort
• Describe OpenAppID features and functionality
• Describe how to monitor the performance of Snort and how to tune rules
Intended Audience:
This course is designed for technical professionals who need to know how to deploy and manage a Cisco Firepower NGIPS in their network environment.
• Security administrators
• Security consultants
• Network administrators
• System engineers
• Technical support personnel
• Channel partners and resellers
Course Outlines:
• Introduction to Snort Rule Development
• Snort Rule Syntax and Usage
• Traffic Flow Through Snort Rules
• Advanced Rule Options
• OpenAppID Detection
• Tuning Snort
Lab Outlines:
• Connecting to the Lab Environment
• Introducing Snort Rule Development
• Basic Rule Syntax and Usage
• Advanced Rule Options
• Open AppID
• Tuning Snort