Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRules) v2.1

Access Duration: 180 days

null image

Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRules) v2.1

Continuing Education Credits: 24

Learn more about the Cisco Continuing Education program.

Labs

Self-Paced Training

Video Training

Access Duration: 180 days

$1,000.00

Overview

The Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRules) v2.1 course shows you how to write rules for Snort, an open-source intrusion detection and prevention system.

Read more

Through a combination of expert-instruction and hands-on practice, this course provides you with the knowledge and skills to develop and test custom rules, standard and advanced rule-writing techniques, how to integrate OpenAppID into rules, rules filtering, rules tuning, and more. The hands-on labs give you practice in creating and testing Snort rules.

Read less

Course Objectives

After taking this course, you should be able to:

  • Describe the Snort rule development process
  • Describe the Snort basic rule syntax and usage
  • Describe how traffic is processed by Snort
  • Describe several advanced rule options used by Snort
  • Describe OpenAppID features and functionality
  • Describe how to monitor the performance of Snort and how to tune rules

Target Audience

This course is for technical professionals to gain skills in writing rules for Snort-based Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). The primary audience includes:

  • Security administrators
  • Security consultants
  • Network administrators
  • System engineers
  • Technical support personnel using open source IDS and IPS
  • Channel partners and resellers

Course Prerequisites

To fully benefit from this course, you should have:

  • Basic understanding of networking and network protocols
  • Basic knowledge of Linux command-line utilities
  • Basic knowledge of text editing utilities commonly found in Linux
  • Basic knowledge of network security concepts
  • Basic knowledge of a Snort-based IDS/IPS system

Certification

Associated Certification: None

Associated Exam: None

Other Info

Part Number:
CSCU-LP-SSFRULES-V2-028100
Product Line:
Cisco On Demand E-Learning