-
The Securing Cisco Networks with Open Source Snort (SSFSNORT) version 2.0 Cisco Training on Demand course provides you with technical training to successfully deploy open-source Snort technology and rule writing. Among other powerful features, you’ll learn how to build and manage a Snort system and how to update and manage rules efficiently. You’ll also learn about the Snort rules language and the capabilities of Snort when it is deployed passively and inline. In addition, you’ll learn the requirements for installing, correctly configuring, and operating Snort. You’ll gain knowledge of the history, features, and uses of Snort, together with the public resources that are available to Snort users. Finally, the course will teach you the various output types that Snort provides, automated rule management (including how to deploy and configure Pulled Pork), inline operations, and how to create custom Snort rules, including advanced rule-writing techniques and OpenAppID.
-
Course Contents
-
- Describe Snort technology and identify the resources that are available for maintaining a Snort deployment
- Install Snort on a Linux - based operating system
- Describe the Snort operation modes and their command - line options
- Describe the Snort intrusion detection output options
- Download and deploy a new rule set to Snort
- Describe and configure the snort.conf file
- Configure Snort for inline operation and configure the inline - only features
- Describe the Snort basic rule syntax and usage
- Describe how the Snort engine processes traffic
- Describe several advanced rule options used by Snort
- Describe OpenAppID features and functionality
- Describe how to monitor Snort performance and how to tune rules
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
This course is designed for security administrators and consultants, network administrators, systems engineers, and technical support personnel who need to know how to deploy open-source intrusion detection systems (IDS) and intrusion prevention systems (IPS), and how to write Snort rules.
-
Knowledge Prerequisites
-
The knowledge and skills necessary before attending this course are:
• Basic understandin g of networking and network protocols
• Basic knowledge of Linux command - line utilities and text - editing utilities commonly found in Linux
• Basic knowledge of network security concepts
| Course Outline |
| Module 1: Introduction to Snort Technology |
| Module 2: Snort Installation |
| Module 3: Snort Operation |
| Module 4: Snort Intrusion Detection Output |
| Module 5: Rule Management |
| Module 6: Snort Configuration |
| Module 7: Inline Operation and Configuration |
| Module 8: Snort Rule Syntax and Usage |
| Module 9: Traffic Flow Through Snor t Rules |
| Module 10: Advanced Rule Options |
| Module 11: OpenAppID Detection |
| Module 12: Tuning Snort |
| Labs Outline |
| This course contains 12 hands-on virtual lab exercises, powered by Cisco Learning Labs and Cisco IOL (Cisco IOS on Linux). |
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
Request for customized courses
You can find the complete description of this course with dates and prices ready for download at as PDF.-
The Securing Cisco Networks with Open Source Snort (SSFSNORT) version 2.0 Cisco Training on Demand course provides you with technical training to successfully deploy open-source Snort technology and rule writing. Among other powerful features, you’ll learn how to build and manage a Snort system and how to update and manage rules efficiently. You’ll also learn about the Snort rules language and the capabilities of Snort when it is deployed passively and inline. In addition, you’ll learn the requirements for installing, correctly configuring, and operating Snort. You’ll gain knowledge of the history, features, and uses of Snort, together with the public resources that are available to Snort users. Finally, the course will teach you the various output types that Snort provides, automated rule management (including how to deploy and configure Pulled Pork), inline operations, and how to create custom Snort rules, including advanced rule-writing techniques and OpenAppID.
-
Course Contents
-
- Describe Snort technology and identify the resources that are available for maintaining a Snort deployment
- Install Snort on a Linux - based operating system
- Describe the Snort operation modes and their command - line options
- Describe the Snort intrusion detection output options
- Download and deploy a new rule set to Snort
- Describe and configure the snort.conf file
- Configure Snort for inline operation and configure the inline - only features
- Describe the Snort basic rule syntax and usage
- Describe how the Snort engine processes traffic
- Describe several advanced rule options used by Snort
- Describe OpenAppID features and functionality
- Describe how to monitor Snort performance and how to tune rules
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
This course is designed for security administrators and consultants, network administrators, systems engineers, and technical support personnel who need to know how to deploy open-source intrusion detection systems (IDS) and intrusion prevention systems (IPS), and how to write Snort rules.
-
Knowledge Prerequisites
-
The knowledge and skills necessary before attending this course are:
• Basic understandin g of networking and network protocols
• Basic knowledge of Linux command - line utilities and text - editing utilities commonly found in Linux
• Basic knowledge of network security concepts
| Course Outline |
| Module 1: Introduction to Snort Technology |
| Module 2: Snort Installation |
| Module 3: Snort Operation |
| Module 4: Snort Intrusion Detection Output |
| Module 5: Rule Management |
| Module 6: Snort Configuration |
| Module 7: Inline Operation and Configuration |
| Module 8: Snort Rule Syntax and Usage |
| Module 9: Traffic Flow Through Snor t Rules |
| Module 10: Advanced Rule Options |
| Module 11: OpenAppID Detection |
| Module 12: Tuning Snort |
| Labs Outline |
| This course contains 12 hands-on virtual lab exercises, powered by Cisco Learning Labs and Cisco IOL (Cisco IOS on Linux). |
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
Request for customized courses
You can find the complete description of this course with dates and prices ready for download at as PDF.
Online Training
Trainer language English