Course Overview

The Securing Networks with Cisco Firepower Next-Generation IPS course shows you how to deploy and use Cisco Firepower Next-Generation Intrusion Prevention System (NGIPS). This hands-on course gives you the knowledge and skills required to use the platform features and includes firewall security concepts, platform architecture and key features; in-depth event analysis including detection of network-based malware and file type, NGIPS tuning and configuration including application control, security intelligence, firewall, and network-based malware and file controls; Snort® rules language; file and malware inspection, security intelligence, and network analysis policy configuration designed to detect traffic patterns; configuration and deploypment of correleation policies to take action based on events detected; troubleshooting; system and user administration tasks, and more.

Course Objective

After completing this course, you should be able to:

  • Describe the components of Cisco Firepower Threat Defense and the managed device registration process
  • Detail Next-Generation Firewalls (NGFW) traffic control and configure the Cisco Firepower system for network discovery
  • Implement access control policies and describe access control policy advanced features
  • Configure security intelligences features and the Advanced Malware Protection (AMP) for Networks implementation procedure for file control and advanced malware protection
  • Implement and manage intrusion and network analysis policies for NGIPS inspection
  • Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco Firepower Management Center
  • Integrate the Cisco Firepower Management Center with an external logging destination
  • Describe and demonstrate the external alerting options available to Cisco Firepower Management Center and configure a correlation policy
  • Describe key Cisco Firepower Management Center software update and user account management features
  • Identify commonly misconfigured settings within the Cisco Firepower Management Center and use basic commands to troubleshoot a Cisco Firepower Threat Defense device

 

Course content

  • Cisco Firepower Threat Defense Overview
  • Cisco Firepower NGFW Device Configuration
  • Cisco Firepower NGFW Traffic Control
  • Cisco Firepower Discovery
  • Implementing Access Control Policies
  • Security Intelligence
  • File Control and Advanced Malware Protection
  • Next-Generation Intrusion Prevention Systems
  • Network Analysis Policies
  • Detailed Analysis Techniques
  • Cisco Firepower Platform Integration
  • Alerting and Correlation Policies
  • System Administration
  • Cisco Firepower Troubleshooting

 

Labs

  • Lab1: Initial Device Setup
  • Lab 2: Device Management
  • Lab 3: Configuring Network Discovery
  • Lab 4: Implementing and Access Control Policy
  • Lab 5: Implementing Security Intelligence
  • Lab 6: File Control and Advanced Malware Protection
  • Lab 7: Implementing NGIPS
  • Lab 8: Customizing a Network Analysis Policy
  • Lab 9: Detailed Analysis
  • Lab 10: Configuring Cisco Firepower Platform Integration with Splunk
  • Lab 11: Configuring Alerting and Event Correlation
  • Lab 12: System Administration
  • Lab 13: Cisco Firepower Troubleshooting
  • Merges
  • Perform Slow-Drain Analysis with Cisco DCNM

 

Test certification

This course is currently not aligned to an exam.

Target Audience

Technical professionals who need to know how to deploy and manage a Cisco FirePower NGIPS in their network environment.

Prerequisites

Attendees should meet the following prerequisites:

  • Technical understanding of TCP/IP networking and network architecture
  • Basic familiarity with the concepts of intrusion detection systems (IDS) and IPS
  • CCNA Security (ICND1 and IINS) recommended.

 

Recommended prerequisites:

  • CCNA – Implementing and Administering Cisco Solutions
  • SCOR – Implementing and Operating Cisco Security Core Technologies
DatesDurationLocation
23 - 27 Jan 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
6 - 10 Mar 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
29 May - 2 June 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
3 - 7 July 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
14 - 18 Aug 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
4 - 8 Sep 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
27 Nov - 1 Dec 20235 DaysPublic classroom (Dubai-Knowledge Village) or virtual trainings
Captcha
Checkboxes