Sourcefire Classroom Training
SNORT® II
Overview
This one-day class covers Snort® deployment strategies, architectural options and information on how to leverage other Snort® rule options for writing high-performance rules. It is designed to further extend the student’s knowledge of this industry leading technology. Security professionals benefit themselves and the organizations they work for by learning how to roll out more sophisticated Snort® security solutions
Target Audience
This is a must course for Network Administrators, security administrators, security consultants and other security professionals that are responsible for deploying open source IDS/IPS sensors in their organizations
Prerequisites
This course assumes that students have a technical understanding of TCP/IP networking and network architecture. Proficiency with Linux and UNIX text editing tools (vi editor) is suggested, not required.
Course Outline
- Configuring a Distributed Snort® Sensor Installation
- Database Maintenance
- Configuring Snort® In-Line
- Using High-Performance Packet Capture Drivers
- Creating High-Precision Rules with the Flowbits Rule Opt
|
