ISS: Server Protection

About this class

RealSecure Server Sensor performs real-time protection against malicious activity by analyzing application and network behavior on servers. With firewall and intrusion protection Server Sensor intelligently and unobtrusively blocks improper activity and reports to SiteProtector for centralized management and analysis.

Who will the lesson benefit?

Security professionals and system administrators engaged in assessing security and securing their server systems.

What delegates will learn

• Understanding the methodology and functionality of Server Sensor.
• Identifying the elements of Policies.
• Using the Policy Editor to configure sensor policies and responses.
• Automated installation of RealSecure Server Sensor
• Managing Server Sensor Policies.
• Server Sensor data paths
• Protocol Analysis Module
• Advanced features used to create user defined event signatures
• Regular expressions used to enhance SiteProtector signatures
• Tcl scripts used with Server Sensor
• Enable Dynamic Blocking
• Control Web Server Access
• Detect Unusual Administrator Activity
• Create and Apply policies
• Customize Responses
• Configure Event Propagation
• Work with Fusion Scripting

What prerequisites are required

• Working knowledge of TCP/IP and Windows platforms.
• Either one of the following two situations applies:

The training is NOT attended together with the "Introduction to SiteProtector" training: the attendees must have a valid Introduction to SiteProtector certification

The training is attended together with the Introduction to SiteProtector" training: no further prerequisite.