CS-402Expert
Advanced Security: Firepower & SecureX
Formation experte sur les solutions de sécurité avancées Cisco avec Firepower NGFW, SecureX platform et threat intelligence pour la protection moderne.
Durée : 5 jours
Modalité : Distanciel ou Présentiel
Niveau : Expert
Certification incluse
3 890€
Formation complète 5 jours
Programme détaillé
Module 1 : Cisco Firepower NGFW avancé
- Architecture Firepower et deployment modes
- Advanced malware protection (AMP)
- Application visibility and control (AVC)
- Intrusion prevention system (IPS) tuning
- URL filtering et reputation services
Module 2 : Firepower Management Center (FMC)
- FMC deployment et high availability
- Policy management et inheritance
- Object management et reusability
- Deployment et device management
- Backup et disaster recovery
Module 3 : Advanced threat detection
- Behavioral analysis et anomaly detection
- Machine learning pour threat detection
- Sandboxing et dynamic analysis
- File trajectory et retrospective analysis
- Custom detection rules development
Module 4 : Cisco SecureX platform
- SecureX architecture et integration
- Threat response et investigation
- Security orchestration et automation
- Threat intelligence aggregation
- Custom integrations et APIs
Module 5 : Threat intelligence et hunting
- Threat intelligence feeds integration
- Indicators of compromise (IoC) management
- Threat hunting methodologies
- MITRE ATT&CK framework utilization
- Threat landscape analysis
Module 6 : Security orchestration et automation
- SOAR platform capabilities
- Playbook development et automation
- Incident response automation
- Integration avec SIEM et ticketing
- Workflow optimization
Module 7 : Advanced analytics et reporting
- Security analytics et dashboards
- Custom reporting et KPIs
- Compliance reporting automation
- Executive et technical reporting
- Data visualization best practices
Module 8 : Integration écosystème sécurité
- Multi-vendor security integration
- SIEM integration (Splunk, QRadar)
- Cloud security posture management
- Identity et access management
- Network segmentation integration
Module 9 : Performance et optimization
- Performance tuning et optimization
- Capacity planning et scaling
- High availability et load balancing
- Monitoring et health assessment
- Troubleshooting advanced issues
Module 10 : SOC operations et best practices
- SOC workflow optimization
- Analyst training et skill development
- Metrics et continuous improvement
- Incident classification et prioritization
- Knowledge management et documentation
Informations formation
Référence :CS-402
Durée :5 jours
Niveau :Expert
Prix :3 890€
Modalité :Distanciel ou Présentiel