IBM Security Network Protection XGS Configuration and Deployment

Course details

This course provides processes, procedures, and practice necessary to configure the Network Protection appliance to protect your network.

The following topics are included in this course:

• Create objects used to configure appliance policies
• Configure network access policy rules
• Create intrusion prevention policy objects
• Capture packets
• Use event filters and advanced tuning parameters to tune events
• Use IP data to monitor the network
• Use authentication to control network access
• Configure SSL decryption on inbound and outbound network traffic
• Implement quarantine rules
• Send events to IBM Security QRadar SIEM

Students also learn through hands-on labs how to configure the appliance, configure policies, and block a variety of common attacks

Target Audience:

This basic course is designed for network and security professionals who evaluate, implement, manage, or monitor the IBM Security Network Protection appliance.

Prerequisites:

You should attend IBM Security SiteProtector System: Basic Implementation and Administration (IS603) or an equivalent course

Content:

• Introduction to IBM Security Network Protection
• Setting up the appliance
• Configuring the network access policy
• Configuring the intrusion prevention policy
• Tuning network access policy rules and intrusion prevention behavior
• Using identity objects to control network access
• Inspecting SSL encrypted traffic
• Configuring advanced threat protection
• Integrating with QRadar SIEM
• Monitoring event data