Securing Hosts Using Cisco Security Agent

Security Fundamentals

• Need for Network Security
• Network Security Policy
• Network Attack Taxonomy

Cisco Security Agent Overview

• Defense in Depth
• Cisco Security Agent Architecture
• Anatomy of an Attack and Response
• Key Features of Cisco Security Agent

Cisco Security Agent Quick Start Installation

• CSAMC System Requirements
• CSA System Requirements
• Installing the CSAMC
• Configuring the CSAMC
• Installing the CSA

Cisco Security Agent Management Center Administration

• Using Cisco Securinty Agent Management Center

Using Event Logs and Generating Reports

• The Event Log and Event Monitor
• Configuring Event Sets
• Configuring Alerts
• Generating Reports

Configuring Groups and Managing Hosts

• Configuring Groups
• Building and Agent Kit
• Managing Hosts
• Deploying Scheduled Software Updates

Building Policies

• Developing a Security Policy
• Rule Basics
• Policy Components
• Configuring and Managing Policies
• Rules common to Windows and Unix
• Windows-Only Rules
• Unix-only Rules

Defining Application Classes

• About Application Classes
• Configuring Static Application Classes
• Dynamic Application Classes

Working with Variables

• Data Sets
• File Sets
• Network Address & Services Sets
• Registry Sets
• COM Component Sets

Using Cisco Security Agent Profiler

· Basics of Profiler

· Configuring an Analysis Job

· Starting Analysis

· The profiler Policy

· Profiler Reports

· Profiler Reports

Delegates are required to meet the following prerequisites:

• CCNA or equivalent knowledge
• 6 months practical experience of configuring Cisco IDS Routers
• Competency in using the Windows NT Operating system
• Familiarity with implementing network security policies and the following networking concepts:
• Perimeter Security System Components
• Perimeter Router
• Firewall
• Bastion Host/Servers and Hosts