Service Protector

Welcome & Agenda

 Introduction

 Service Protector training comprises of two main courses

Courses Dur. Description

Operators training focuses on managing the day to day operation
Operators 1 day of the system. Specifically, how to identify network based
anomalies and how to identify and mitigate host based anomalies.
Administrators training focuses on the tasks necessary for the
installation, setup and configuration of the system. In addition, this
Administrators 2 days course deals with system maintenance and troubleshooting.
Administrators training requires that participants have successfully
completed the Operators training
Operators Training

 Topics
 Overview of the Service Protector
 NBAD Detection
 HBAD Detection and Mitigation
 Audience
 Network engineers, network security analysts, network
systems administrators, security engineers, pre and post sales
engineers, sales engineers, system installers
 Prerequisites
 Confidence in IP networking, IP security and TCP/IP
 Day 1 - Operators Training

Time Module Content

 Service Protector Technology
09:00 – 10:00 Introduction
 Architecture of the Solution
Network Based  What is NBAD?
10:00 – 11:30
Anomaly Detection  Detecting Network-based attacks in the SP GUI
11:45 - 12:30 Exercise #1  Hands-on practice detecting NBAD attacks
12.30 – 13.30 Lunch Break

Host Based  What is HBAD?

13:30 – 14:30
Anomaly Detection
14.30 – 15.15 Exercise #2
15.15 – 16.00 HBAD Mitigation
 Detecting Host-based attacks in the SP GUI
 Hands-on practice detecting HBAD events
 Using Allot’s SMP to mitigate host based
attacks from within the Provider’s network

16.00 – 17.30 Exercise #3  Hands-on practice mitigating HBAD events

Administrators Training

 Topics
 System installation
 Command line interface
 Troubleshooting and maintenance
 Audience
 Network engineers, network security analysts, network
systems administrators, security engineers, pre and post sales
engineers, system installers
 Prerequisites
 Confidence in IP networking, IP security and TCP/IP
 Service Protector – Operators training
 Day 2 – Administrators Training

Time Module Content

 Navigating the CLI
 System configuration
09:00 – 10:30 Installation
 Re-installing software
 User Management
 Installing Sensors
11.00 – 12:30 Sensors
 IPSec
12.30 – 13.30 Lunch Break
13.30 – 15.00 Groups  Configuring prefixes and groups
 Hands-on installation and group
15.00 – 17.00 Exercise #4
configuration
 Day 3 – Administrators Training
Time Module
09:00 – 10:30 Notifications
10.30 – 12:00 Exercise #5
12.00 – 13.00 Thresholds
13.00 – 14.00 Lunch Break
14.00 – 15.00 System Maintenance
15.00 – 16.15 Troubleshooting
16.15 – 17.15 Exercise #6
17.15 – 17.30 Summary & Feedback
Content
 Notification types
 Filters
 Automated HBAD mitigation
 Hands-on practice with notifications & filters
 Basic thresholds & sliding windows
 Advanced controls
 Relocation & Replacement
 Typical network problems
 Hands-on troubleshooting practice
Review Questions & Exercises

Review
Questions

Exercises
Course Logistics