Content

McAfee Entercept Training

McAfee Product Education

McAfee offers a structured educational program that delivers in-depth training on how to better prevent attacks with McAfee® Entercept® intrusion prevention technology. This two-day instructor-led course uses a carefully balanced combination of classroom and lab work to teach you how to deploy and configure McAfee Entercept and offers proven strategies for effective management of your intrusion prevention solution.

Tab Navigation

Course Details

Course Code

TRN-ENT-101-TCL

Duration

2 days

Objectives

  • Understand the value of intrusion prevention solutions versus intrusion detection solutions
  • Install, configure and deploy McAfee Entercept
  • Create policies and alarm exceptions
  • Perform security maintenance operations and administration tasks and troubleshoot a network security system

Prerequisites

  • Working knowledge of Microsoft® Windows® NT/2000
  • Working knowledge of system addministration concepts
  • Basic understanding of computer security concepts

Course Agenda

Day 1

Overview

This in-depth two-day program combines classroom and lab work, teaching you how to deploy and configure McAfee® Entercept® for effective intrusion prevention.

Information Security

  • Information threats
  • Hacking techniques
  • Buffer overflow
  • Denial of Service (DoS)
  • Network-level security
  • Host-level security
  • Intrusion detection
  • Intrusion prevention
  • Entercept architecture
  • Entercept products

McAfee Entercept Installation

  • Management server and database
  • Lab: Installing the management server for Microsoft® Windows®
  • Management console
  • Lab: Installing the console
  • Entercept agents
  • Lab: Installing the agent
  • Licenses

Console Functionality

  • Console login
  • Navigating the console views
  • Security events
  • Managing event views
  • Search capabilities
  • Lab: Console functionality
  • Agent states and modes
  • Agent versions
  • Agent groups
  • Lab: Managing agents
  • Exceptions
  • Lab: Creating exceptions
  • Policies
  • Lab: Policy implementation
  • Signatures
  • Lab: Signature configuration
  • Notifications
  • Lab: Creating notifications
  • Reports
  • Lab: Creating reports

Day 2

Overview

This in-depth two-day program combines classroom and lab work, teaching you how to deploy and configure McAfee® Entercept® for effective intrusion prevention.

Advanced Concepts

  • Import and export baskets
  • Lab: Import and export baskets
  • Advanced preferences
  • Server directory structure
  • Config.exe
  • Custom signatures
  • Rules
  • Lab: Custom signatures
  • Entercept user accounts
  • Lab: Console management
  • Manual uninstall

Deployment Considerations

  • Environment
  • Partitioning agents
  • Management server
  • Network connectivity
  • Console location
  • Agent considerations
  • Testing environment
  • Rollout methodology
  • False positive tendencies
  • System commissioning
  • Baselining
  • Fine tuning
  • Creating exceptions
  • Server maintenance