Configuring Sensing and Blocking

Overview/Description
To perform basic Sensor configuration and to configure and implement blocking on Sensors

Target Audience
Enterprise network engineers; network system analysts; Cisco partners who implement Cisco IDS on networks; systems engineers who support the sales of Cisco IDS

Prerequisites
Experience in configuring Cisco IOS software; certification as a CCNA or the equivalent knowledge; a basic knowledge of the Windows operating system; familiarity with the networking and security terms and concepts

Expected Duration
160 Minutes

Objectives:

Configuring Sensing and Blocking

  • configure a Sensor's sensing parameters and configure a signature's enable status, severity level, and action.
  • create IDS signature filters and tune a signature.
  • configure an IP protocol custom signature and a string pattern custom signature for specific IDS scenarios.
  • edit the global sensing parameters, create and tune signatures, and configure signature filters.
  • identify the features of Cisco IDS blocking and the issues to consider before applying Sensor-generated ACLs.
  • configure a Sensor to perform blocking.
  • configure a Master Blocking Sensor.
  • create, deploy, and test a Sensor blocking configuration.


    • Course Number: 204624_eng