ArcSight ESM Advance Administrator - CSE

Popis kurzu

This course provides you with techniques to proactively analyze and troubleshoot the ESM CORR-engine database and ArcSight ESM Manager to provide efficient services to your organization. This course teaches you to design and deploy hierarchical, fault tolerant manager implementations as well integration strategies between ArcSight ESM and other ArcSight appliances such as Logger, Connector Appliance, and the ArcSight Management Center products.

This course provides you with techniques to proactively analyze and troubleshoot the ESM CORR-engine database and ArcSight ESM Manager to provide efficient services to your organization. This course teaches you to design and deploy hierarchical, fault tolerant manager implementations as well integration strategies between ArcSight ESM and other ArcSight appliances such as Logger, Connector Appliance, and the ArcSight Management Center products.

Určeno pro

This course is intended for any system administrators who need to:

• Install, administer, maintain and troubleshoot ArcSight ESM components


• Design and implement integrations between ArcSight ESM and other ArcSight appliances


• Proactively investigate the health of the ArcSight ESM CORRE environment

Obsah kurzu

Upon successful completion of this course, you should be able to:

• Design, deploy and configure an ArcSight ESM multi-manager layout for high-availability and fail-over


• Assess and implement integration strategies for ArcSight ESM and ArcSight appliances


• Provide credentials for ArcSight ESM including RADIUS and LDAP/AD


• Use available ArcSight and Oracle tools to investigate the health of your installation


• Implement ArcSight best practices for backup and recovery for an Oracle 10g database

Předpoklady

To be successful in this course, you will have:

• Common security devices such as IDS and firewalls


• Common network device functions, such as routers, switches, and hubs


• TCP/IP functions such as CIDR blocks, subnets, addressing, and communications


• Basic Windows operating system tasks and functions


• Possible attack activities, such as scans, man in the middle, sniffing, DoS, and possible abnormal activities, such as worms, Trojans, and viruses


• SIEM terminology, such as threat, vulnerability, risk, asset, exposure, and safeguards


• Completed the ArcSight ESM Administrator and Analyst ATP course or 6 months experience administering ArcSight ESM

Studijní materiály