Symantec Data Center Security: Server Advanced 6.0

Price : IDR.8,700,000

COURSE DESCRIPTION
The Symantec Data Center Security: Server Advanced 6.0 course is an introduction to implementing and managing a Symantec Data Center Security: Server Advanced 6.0 deployment. The architecture and components of the SDCS:SA 6.0 solution are detailed and explained. Agent installation and configuration are taught along with deployment and management of SDCS:SA agents and policies across the enterprise.

The course also covers SDCS:SA Policy creation and modification in detail.

Delivery Method :  Instructor-led training (ILT)
Duration             :  Three days

Course Objectives
By the completion of this course, you will be able to:
• Describe the major components of Symantec Data Center Security: Server Advanced and how they operate.
• Install the management server, console, and agent.
• Define, manage, and create assets, policies, events, and configurations.
• Understand policy creation and editing in depth.

Who Should Attend
This course is for information technology professionals, security professionals, network and system managers, and administrators tasked with installing, configuring, and maintaining Symantec Data Center Security: Server Advanced v. 6.0.

Prerequisites
You should have working knowledge of TCP/IP protocols and communications concepts.
You must have experience with the Windows and UNIX operating systems in general.
A basic understanding of key security disciplines (firewalls, intrusion detection and prevention, policy management, vulnerability assessment, antivirus protection, and so on) is required.

Hands-On
This course includes practical hands-on exercises that enable you to test your new skills and begin to use those skills in a working environment.

COURSE OUTLINE
Introduction
• Course overview
• The classroom lab environment Introduction to Security Risks and Risk
• Security Risks • Security Risk Management
• Managing and Protecting Systems
• Corporate Security Policies and Security Assessments
• Host-Based Computer Security Issues

SDCS:Server Advanced Overview
• SDCS: Server Advanced Component Overview
• Policy Types and Platforms
• Management Console Overview
• Agent User Interface Overview Demonstration of Management Console

Installation and Deployment
• Planning the Installation
• Deploying SDCS:SA for High Availabilty
• Scalabilty • Installing the Management Server
• Installing the Management Console
• Installing a Windows Agent
• Installing a UNIX Agent LAB: Install Manager and agents

Configuring Assets
• Asset and Agent Overview
• Viewing Agents and Assets
• Managing Agents
• Managing Agents on Assets LAB:
- Create Asset Groups
- Examine agent Interface

Policy Overview
• Policies defined
• Prevention Policy overview
• Process sets
• Resource access
• Policy options
• Detection Policy Overview
• IDS capabilities • Rules
• Collectors
• Policy Management Workspace
• User Interface on Agent
• Example Use Cases LAB:
– Real world scenarios
– what type of security strategy should be used ?

Detailed Prevention Policies
• Policy Editor
• Policy Structure
• Global policy options
• Service Options
• Program Options
• Policy Processing Order
• Network Rules
• File Rules
• Registry Rules
• Process Sets
• Predefined Policies LAB:
- Deploy Strict policy - Examine Functionality

Advanced Prevention
• Profiling Applications
• Customising Predefined Policies LAB: - Modify Policy previously deployed - Re-examine Functionality
• Preparing for Policy deployment LAB: - Best practice - Covering Basics - Further Enhance Strict Policy
• Create Custom Process set LAB:
- Secure an FTP Server
- Troubleshoot policy/pset assignment using CLI

Detection Policies
• Detection Policies Structure
• Collectors • Rules • Predefined Detection Policies
• Creating a detection Policy using the Template policy LAB:
- Deploy Baseline Policy
- Create Custom Policy

Event Management
• Events Defined
• Viewing Events
• Reports and Queries Overview
• Creating Queries and Reports
• Creating Alerts LAB:
- View Monitor Types and Search Events
- Create Real Time Monitor
- Create queries and reports
- Create Alerts

Agent Management and Troubleshooting
• Configurations Defined
• Creating and Editing Configurations
• Common Parameters
• Prevention Settins • Detection Settings
• Analyzing Agent Log Files
• Diagnostic Policies
• Local Agent tool – sisipsconfig LAB:
- Create Custom Configurations
- Implement Bulk Logging
- Disable Prevention on agent using CLI
- Use Diagnostic policy to gather logs
- Troubleshoot a Policy
System Management
• Managing Users and Roles
• Server Security
• Viewing and Managing Server Settings
• Viewing and Managing Database Settings
• Viewing and Managing Tomcat Settings LAB:
- Create a new User
- View System Settings