• Describe Snort technology and identify the resources available for maintaining a Snort deployment
• Install and configure a Snort deployment
• Configure the command-line options for starting a Snort as a sniffer, a logger, and an intrusion detector, and create a script to start Snort automatically
• Identify and configure available Snort intrusion detection outputs
• Describe rule sources, updates, and utilities for managing rules and updates
• Detail the components of the snort.lua file and determine how to configure it for your deployment
• Configure Snort for inline operation using the inline-only features
• Configure rules for Snort using basic rule syntax
• Describe how traffic flows through Snort and how to optimize rules for better performance
• Configure advanced-rule options for Snort rules
• Configure OpenAppID features and functionality
• Tune Snort for efficient operation and profile system performance

• Security Administrators
• Security Consultants
• Network Administrators
• System Engineers
• Technical Support Personnel
• Channel Partners and Resellers

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

• Technical understanding of transmission control protocol/internet protocol (TCP/IP) networking and network architecture
• Proficiency with Linux and UNIX text editing tools, such as vi editor

These skills can be found in the following Cisco Learning Offering:

• Implementing and Administering Cisco Solutions (CCNA)

Associated Certification: None

Associated Exam: None