Technologies / Infrastructure

IBM Network Protection Advanced Topics

Do you need to combat advanced threats? Do you need to protect web applications? This course focuses on advanced configuration and administration of the IBM Network Protection (XGS) appliance. Learn how XGS uses X-Force, PAM, Injection Logic Engine, and other tools to prevent attacks. You will also learn how to use APIs to interact with the appliance, implement SNMP, configure high availability configuration, and migrate policies from IBM Network IPS appliance to XGS. Troubleshooting techniques are also taught.

Required Participant Preparation

Before taking this course, ensure you have the following skills:

IT Infrastructure
IT Security Fundamentals
Linux
Windows
Basic experience with VMware environment
TCP/IP Networks
Experience navigating and using the Network Protection local management interface

Before taking the course you should be proficient with the Network Protection local management interface

Who is this training for?

This course is intended for security administrators, security analysts, technical security architects, incident managers, network administrators, professional services using IPS solutions, and IPS administrators

Training program

Protection against various attacks — IBM X-Force mechanisms, protocol analysis module (PAM), eXpress updates, network attack prevention
Protecting web applications with PAM and the Injection Logic Engine (ILE) — countering SQL injection and cross-site scripting (XSS), input data validation
Web application protection and the OWASP Top 10 — mapping XGS protections to OWASP categories, configuring protection policies
Combating Advanced Persistent Threat (APT) attacks — APT attack phases, detection methods, analysis of media-reported cases
Combating mutated attacks — protection against mutated variants of known attacks, polymorphic detection techniques
Exercises: configuring ILE policies, analyzing OWASP Top 10 attack scenarios, APT detection

Using the API to interact with XGS appliances — REST API, configuration automation, management scripts
Implementing the SNMP protocol — configuring SNMP alerts generated by response objects and system alerts, event monitoring
Troubleshooting techniques — diagnostic processes, log files, trace tools, identifying and eliminating network problems
Advanced traffic analysis — packet inspection, event correlation, security reports
XGS performance tuning — optimizing inspection rules, throughput management, reducing false positives
Exercises: API configuration, SNMP alerting, troubleshooting with logs and trace

Implementing high availability with XGS — HA configuration, failover, appliance redundancy in the network
Designing HA topologies — active/standby, inline vs passive, integration with the network infrastructure
Migrating IBM Network IPS (GX) policies to IBM Network Protection (XGS) — migration planning, policy mapping, validation
Managing updates and security policies — versioning, change testing, rollback
XGS administration best practices — hardening, monitoring, documentation, operational procedures
Final exercises: HA configuration, policy migration, course summary

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Training Topics

Frequently asked questions

What are the prerequisites for this training?

The IBM Network Protection Advanced Topics training does not require specialized prior knowledge. Basic IT knowledge is sufficient.

What is the format and duration of this training?

The training lasts 3 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: This course is intended for security administrators, security analysts, technical security architects, incident managers, network administrators, professional services using IPS solutions, and IPS administrators.