Cisco Secure Intrusion Detection System

Prerequisites:
Students who attend this course must have experience with the Cisco IOS or IDS command line and must meet the following prerequisites:
· Certification as a CCNA or the equivalent knowledge (optional)
· Strong user level experience with Windows operating systems
· Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)

Course Content:
CSIDS 4.1 is a five-day leader-led, lab-intensive course delivered by Cisco Learning Partners (CLPs). This task-oriented course teaches the knowledge and skills needed to design, install, and configure a Cisco Intrusion Protection solution for small, medium, and enterprise networks. The course covers Cisco IDS platforms including the Cisco 4200 series Sensors, the Network Module for Cisco 2600/3600/3700 routers, and the Catalyst 6000 series Intrusion Detection Module 2 (IDSM2). The IDS Device Manager and the Management Center for IDS Sensors are used to configure and manage Cisco IDS Sensor platforms. The IDS Event Viewer and the Monitoring Center for Security are used to view IDS alarms.

Course Objectives:
After completing this course, the student should be able to:
· Describe the basic intrusion detection terminology.
· Explain the different intrusion detection technologies and evasive techniques.
· Design a Cisco IDS protection solution for small, medium, and enterprise customers.
· Identify the Cisco IDS Sensor platforms and describe their features.
· Install and configure a Cisco IDS Sensor.
· Install and configure a Cisco Intrusion Detection System Module 2.
· Install and configure a Cisco Network Module for Cisco 2600, 3600, and 3700 routers.
· Tune Cisco IDS signatures to work optimally in unique network environments.
· Create and implement customized intrusion detection signatures.
· Create alarm exceptions to reduce alarms and possible false positives.
· Configure a Cisco IDS Sensor to perform device management of supported blocking devices.
· Describe the Cisco IDS signatures and determine the immediate threat posed to the network.
· Perform maintenance operations such as signature updates and software upgrades.
· Describe the Cisco IDS architecture.
· Manage a large scale deployment of Cisco IDS Sensors with Cisco IDS Management and Monitoring software

Course Outline:
· Lesson 1 : Course Introduction
· Lesson 2: Network Security and Cisco
· Lesson 3: Intrusion Detection and Intrusion Protection Technologies
· Lesson 4: Cisco Intrusion Detection System Architecture
· Lesson 5: Getting Started with the IDS Command Line
· Lesson 6: Cisco Intrusion Detection System Device Manager and Event Viewer
· Lesson 7: Sensor Configuration
· Lesson 8: Alarms and Signatures
· Lesson 9 : Signature Configuration
· Lesson 10: Sensor Tuning
· Lesson 11: Blocking Configuration
· Lesson 12: Sensor Maintenance
· Lesson 13: Enterprise IDS Management
· Lesson 14: Enterprise IDS Monitoring and Reporting
· Lesson 15: IDS Network Module
· Lesson 16: Intrusion Detection System Module
· Lesson 17: Capturing Network Traffic for Intrusion Detection Systems

Exams: CSIDS 642-531