Cisco Network Security: Intrusion Detection and Prevention

A network must be able to quickly recognize threats. Intrusion detection and intrusion prevention systems (IDS/IPS) provide organizations with a proactive approach to monitoring their network, enabling them to take action against possible threats. In this course, join security ambassador Lisa Bock as she provides an overview of intrusion detection and intrusion prevention systems and explains how they detect and mitigate common attacks. She covers detection and signature engines, triggering actions and responses, and deploying an IOS-based IPS. In addition, she goes over some practical applications of these systems, including honeypot-based intrusion detection and the EINSTEIN system from the Department of Homeland Security..

Learning objectives
Managing the threat landscape
IPS versus IDS
Detection and signature engines
IDS signature files
Blacklists and whitelists
Managing IPS alarms
Deploying IOS-based IPS
Using IDS and honeypots