|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/stealthwatch/
课程评论：没有评论
课程名称：Cisco Stealthwatch：深度洞察网络 课程概述： 本课程旨在教授如何利用Cisco Stealthwatch技术，深入察看动态网络中的攻击。学员将学习如何通过高保真警报检测攻击，这些警报包含了用户、设备、位置、时间戳和应用程序等上下文信息。课程内容包括无解密情况下分析加密流量以识别威胁与合规性，以及快速发现未知恶意软件、内部威胁（如数据外泄）、政策违规及其他复杂攻击。学员还将了解如何存储遥测数据用于长期的取证分析，定义更智能的分段政策而不干扰业务，创建自定义警报以检测未授权访问并确保合规。此外，课程还介绍如何结合身份服务引擎（ISE）与安全网络分析强化政策执行和威胁控制。 挑战： - 保护多种敏感会员数据和金融资产 - 确保满足审计要求并执行内部业务与安全政策 - 监控分散在22个分支机构和多个ATM位置的网络 - 在精简团队情况下维护一流的安全策略和基础设施 解决方案： - 安全网络分析（Stealthwatch） - 身份服务引擎（ISE） - 安全防火墙（Firepower） - 安全端点（AMP for Endpoints） - Umbrella - 安全电子邮件（云电子邮件安全） - AnyConnect - 安全恶意软件分析（Threat Grid） 成果： - 前所未有的威胁可见性，提供具上下文信息的可操作警报 - 能够轻松证明审计需求，如加密合规性，并监控任何业务或安全政策违规情况 - 在网络、端点和网页上实现自动检测与响应，拓展集成安全架构的投资 - 在不降低安全性和基础设施正常运行时间的情况下，成功过渡至远程工作模式 这门课程为网络安全专业人士提供了进行全面安全监控与响应的实用技能和知识。
Detect attacks across the dynamic network with high-fidelity alerts enriched with context such as user, device, location, timestamp, and application. Analyze encrypted traffic for threats and compliance, without decryption. Quickly detect unknown malware, insider threats like data exfiltration, policy violations, and other sophisticated attacks using advanced analytics. Store telemetry data for long periods for forensic analysis. Define smarter segmentation policies without disrupting the business. Create custom alerts to detect any unauthorized access and ensure compliance. Use Secure Network Analytics with Identity Services Engine (ISE) to enforce policies and contain threats.Challenges:Protecting a variety of sensitive member data and financial assetsBeing able to prove audit requirements and ensure other internal business and security policies are being enforcedMonitor a distributed network spread across 22 branches and multiple ATM locationsMaintaining a first-class security strategy and infrastructure with a lean teamSolutions:● Secure Network Analytics (Stealthwatch)● Identity Services Engine (ISE)● Secure Firewall (Firepower)● Secure Endpoint (AMP for Endpoints)● Umbrella● Secure Email (Cloud Email Security)● AnyConnect● Secure Malware Analytics (Threat Grid)Results● Unprecedented threat visibility with actionable alerts infused with context● Ability to easily prove audit requirements like cryptographic compliance, and to monitor for any business or security policy violations with custom alerts● Achieved automated detection and response across the network, endpoints and web, and extended investments with an integrated security architecture● Transitioned to a remote workforce without compromising on security and infrastructure uptime
