1 © 2005 Cisco Systems, Inc. All rights reserved. Implementing Intrusion Prevention Systems. - презентация

1 1 © 2005 Cisco Systems, Inc. All rights reserved. Implementing Intrusion Prevention Systems

2 © 2005 Cisco Systems, Inc. All rights reserved. Course Administration Guide IPS v5.0CAG-2

3 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-3 IPS Lab Topology Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 router e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ nm-cidsQ prP nm-cidsP

4 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-4 Visual Objective for Lab 3: Getting Started with the IPS Command Line Interface Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

5 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-5 Visual Objective for Lab 4: Using the IDM Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

6 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-6 Visual Objective for Lab 5: Basic Sensor Configuration Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

7 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-7 Visual Objective for Lab 6: Signatures and Alerts Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

8 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-8 Visual Objective for Lab 8: Signature Configuration Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

9 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-9 Visual Objective for Lab 9: Sensor Tuning Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

10 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-10 Visual Objective for Lab 10: Blocking Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

11 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-11 Visual Objective for Lab 11: Sensor Maintenance Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

12 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-12 Visual Objective for Lab 12: Monitoring the Sensor Q Q Web FTP RBB Q P.0.4 sensorQ Student PC 10.0.Q.12 RTS sensorP Student PC 10.0.P.12 RTS P.0 routerProuterQ e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ prP

13 © 2005 Cisco Systems, Inc. All rights reserved. IPS v5.0CAG-13 Visual Objective for Lab 13: Cisco Intrusion Detection System Network Module Q Q Web FTP RBB Q P.0 Student PC 10.0.Q.12 RTS Student PC 10.0.P.12 RTS P.0 router e0/0 e0/1 e0/0 e0/1 e0/0 e0/1 e0/ P.0 prQ nm-cidsQ prP nm-cidsP

14