Cisco® Securing Cisco Networks with Open Source Snort v2.0 (SSFSNORT)

The Securing Cisco® Networks with Open Source Snort® (SSFSNORT) version 2.0 Cisco Training on Demand course provides you with technical training to successfully deploy open-source Snort technology and rule writing. Among other powerful features, you’ll learn how to build and manage a Snort system and how to update and manage rules efficiently. You’ll also learn about the Snort rules language and the capabilities of Snort when it is deployed passively and inline.

After completing this course, you should be able to:

Describe Snort technology and identify the resources that are available for maintaining a Snort deployment
Install Snort on a Linux-based operating system
Describe the Snort operation modes and their command-line options
Describe the Snort intrusion detection output options
Download and deploy a new rule set to Snort
Describe and configure the snort.conf file
Configure Snort for inline operation and configure the inline-only features
Describe the Snort basic rule syntax and usage
Describe how the Snort engine processes traffic
Describe several advanced rule options used by Snort
Describe OpenAppID features and functionality
Describe how to monitor Snort performance and how to tune rules

Course Outline

1 - COURSE OUTLINE

Introduction To Snort Technology
Snort Installation
Snort Operation
Snort Intrusion Detection Output
Rule Management
Snort Configuration
Inline Operation And Configuration
Snort Rule Syntax And Usage
Traffic Flow Through Snort Rules
Advanced Rule Options
Openappid Detection
Tuning Snort

Actual course outline may vary depending on offering center. Contact your sales representative for more information.

Contact Us For Price

Course Length: 4 Days

1. Choose a Date | 2. Click Enroll Now

Need Help Picking the Right Course? Give us a call! 781-388-0026