Course Overview
Cisco StealthWatch Solution Install Workshop is designed to provide knowledge to Field Engineers with Cisco partners and customers who are responsible for detecting advanced and persistent security threats in order to combat cyberattacks. This workshop takes partner and customer Field Engineers through deploying their first Stealthwatch deployment in a controlled dCloud lab environment.
Who should attend
Cisco customers and partners planning to implement and use Cisco StealthWatch for network data collection and analysis to deliver comprehensive visibility and protection for any type of the network.
Prerequisites
- Student should be familiar with Stealthwatch and has completed the prerequisite training material.
- Review of the 7/27, 8/3, and 8/10 Stealthwatch Tech Talks: https://communities.cisco.com/docs/DOC-30977
Course Content
DAY 1:
- Stealthwatch: Brief Review
- Course Installation Training Scenario
- Stealthwatch Installation Prerequisite Data Gathering and Planning
- Stealthwatch Architecture Planning
- NetFlow Configuration Planning and Review
- Understanding Multiple Collector Deployment
- Flow Security
- Stealthwatch Optional Components
- Network Connectivity: Planning and Review
- Stealthwatch Appliance Installation
- Stealthwatch Appliance Initial Configuration
- License Planning and Review
- Field Engineer Onsite Arrival: Prerequisites Completed
- Appliance Configuration
- Stealthwatch: Interface Review
- User Authentication and Point of View
- SMC Configuration
- SMC Configuration: Optional Features
- NetFlow Validation Using Live NetFlow
- Review: Stealthwatch Data Organization, (Domains and Host Groups)
- dCloud Session Lab: Lab Scenarios 1 - 8 via dCloud Lab Environment
DAY 2:
- Optimizing Stealthwatch Configuration
- Understanding the Stealthwatch Alarm Model
- Policy and Tuning
- Viewing and Tuning Stealthwatch Alarms
- Operationalizing Stealthwatch
- Customizing Documents
- Additional Stealthwatch Appliance Configuration Settings
- Stealthwatch Upgrades and Patches
- dCloud Session Lab: Lab Scenarios 9 - 14 via dCloud Lab Environment