Securing Cisco® Networks with Open Source Snort (SSFSNORT) is an instructor-led, lab-based, hands-on course offered by Cisco Learning Services High-Touch Delivery. This course is part of a portfolio of security courses designed to help businesses support and maintain their Snort systems.
This lab-intensive course introduces you to the open source Snort technology, as well as rule writing. Among other powerful features, you become familiar with:
- How to build and manage a Snort system
- How to update rules
- Snort rules language
- The capabilities of Snort when deployed passively and inline
The course begins by introducing the Snort technology and progresses through the installation and operation of Snort. You discover the various output types that Snort provides, automated rule management including how to deploy and configure Pulled Pork, inline operations, and how to create custom Snort rules, including advanced rule-writing techniques and OpenAppID.