DSS – Forcepoint Triton AP Data Administrator

Contact Us

We would love to hear from you. Please complete this form to pre-book or request further information about our delivery options.

DSS – Forcepoint Triton AP Data Administrator

Enroll Now

Duration
3 Days

Delivery
(Online and onsite)

Price
Price Upon Request

In this course, you will develop skills in creating data policies, building custom classifiers and using predefined policies, incident management, reporting, and system architecture and maintenance.

See other courses available

Upon successful completion of this Triton AP Data training, delegates will be able to:

Understand the deployment
Create and use custom classifiers
Use predefined classifiers, rules and policies
Control various channels – network, file discovery and endpoint agents
Review Incidents and Reports
Perform the backup and restore for logs and other data
Perform semi-automatic failover
Archive incidents and forensics

Day 1

1) Intercepting with AP-WEB and AP-EMAIL
a) Checking the WCG configuration
b) Checking the AP-EMAIL configuration
c) Monitoring vs. blocking mode
d) Intercepting TLS traffic
2) Intercepting traffic with Protector
a) Protector deployment types
b) ICAP mode
3) Discovery with AP-DATA Servers
a) Classical discovery with crawler
b) Discovery with FCI Agent
c) OCR for image analysis
4) Transaction Lifecycle
a) Processing order
b) Custom extractors and steganography
c) Traffic logs
5) The methodology of DLP policy creation
a) Building AUP (Acceptable Use Policy)
b) Monitoring vs blocking
c) Classifiers, rules, c-logic, exception rules
6) Simple classifiers
a) Keywords and phrases, dictionaries
b) Regular expressions
c) File properties

Day 2

1) Scripts and predefined classifiers
a) Region-specific classifiers
b) Industry-specific classifiers
c) Data theft
2) Fingerprinting and ML
a) Unstructured fingerprinting
b) Structured fingerprinting
c) Machine Learning
3) Data Endpoint
a) Endpoints controlling applications and file discovery
b) Endpoint profiles, policies and alerts
4) Incidents and reporting
a) Incident lifecycle
b) Incident reports
5) Advanced incident workflow
a) Force-release feature
b) Email-based incident workflow
6) Delegated Admins
a) Notifications data owners
b) Tiered Incident Management
c) Pseudonymization of source and destination data
d) Setting up incident response teams

Day 3

1) Custom action plans
a) Deploying simple remediation scripts
b) SIEM Integration
2) High Availability of AP-DATA Manager
a) Database partitions and file shares
b) Full backup and restore of an AP-DATA configuration
c) Semi-automatic failover
3) Resource Management
a) Archiving old incidents and forensics
b) Distributing fingerprints, policies and AP-DATA resources
c) System health logs and dashboards
4) Alerts, System Events
a) Configuring system alerts
b) Scheduling reporting and maintenance
5) Upgrades
a) AP-DATA Manager and AP-DATA Server upgrades
b) Protector and Endpoint upgrades

End-User/Customers: System administrators, network security administrators, IT staff
Channel Partners: Sales Engineers, consultants, implementation specialists

None

Overview

The Forcepoint Triton AP Data Administrator (DSS) is a three-day training course, where you will learn how to test existing deployment, how to administer policies and reports, handle incidents and endpoints, upgrade and manage the AP-DATA system. In this course, you will develop skills in creating data policies, building custom classifiers and using predefined policies, incident management, reporting, and system architecture and maintenance. See other courses available

Objectives

Upon successful completion of this Triton AP Data training, delegates will be able to:

Understand the deployment
Create and use custom classifiers
Use predefined classifiers, rules and policies
Control various channels – network, file discovery and endpoint agents
Review Incidents and Reports
Perform the backup and restore for logs and other data
Perform semi-automatic failover
Archive incidents and forensics

Outline

Day 1

1) Intercepting with AP-WEB and AP-EMAIL
a) Checking the WCG configuration
b) Checking the AP-EMAIL configuration
c) Monitoring vs. blocking mode
d) Intercepting TLS traffic
2) Intercepting traffic with Protector
a) Protector deployment types
b) ICAP mode
3) Discovery with AP-DATA Servers
a) Classical discovery with crawler
b) Discovery with FCI Agent
c) OCR for image analysis
4) Transaction Lifecycle
a) Processing order
b) Custom extractors and steganography
c) Traffic logs
5) The methodology of DLP policy creation
a) Building AUP (Acceptable Use Policy)
b) Monitoring vs blocking
c) Classifiers, rules, c-logic, exception rules
6) Simple classifiers
a) Keywords and phrases, dictionaries
b) Regular expressions
c) File properties

Day 2

1) Scripts and predefined classifiers
a) Region-specific classifiers
b) Industry-specific classifiers
c) Data theft
2) Fingerprinting and ML
a) Unstructured fingerprinting
b) Structured fingerprinting
c) Machine Learning
3) Data Endpoint
a) Endpoints controlling applications and file discovery
b) Endpoint profiles, policies and alerts
4) Incidents and reporting
a) Incident lifecycle
b) Incident reports
5) Advanced incident workflow
a) Force-release feature
b) Email-based incident workflow
6) Delegated Admins
a) Notifications data owners
b) Tiered Incident Management
c) Pseudonymization of source and destination data
d) Setting up incident response teams

Day 3

1) Custom action plans
a) Deploying simple remediation scripts
b) SIEM Integration
2) High Availability of AP-DATA Manager
a) Database partitions and file shares
b) Full backup and restore of an AP-DATA configuration
c) Semi-automatic failover
3) Resource Management
a) Archiving old incidents and forensics
b) Distributing fingerprints, policies and AP-DATA resources
c) System health logs and dashboards
4) Alerts, System Events
a) Configuring system alerts
b) Scheduling reporting and maintenance
5) Upgrades
a) AP-DATA Manager and AP-DATA Server upgrades
b) Protector and Endpoint upgrades

Target Audience

End-User/Customers: System administrators, network security administrators, IT staff
Channel Partners: Sales Engineers, consultants, implementation specialists

Pre-requisites

None

Upcoming Dates

` Jun 26 - Jun 28, 2023
` Jul 24 - Jul 26, 2023
` Aug 21 - Aug 23, 2023
` Sep 18 - Sep 20, 2023
` Oct 16 - Oct 18, 2023
` Nov 13 - Nov 15, 2023

Cisco Training Courses

Cisco Certifications

Cisco Learning Credits

Cisco Continuing Education

Cisco Business Enablement

Fortinet Technical Certifications

Fortinet Technical Courses

ATC Status

Fortinet Services Packages

Prepforce Bootcamp

Microsoft Training

Technical Training

ATP Accreditation

What we do

About Us

DSS – Forcepoint Triton AP Data Administrator

Contact Us

Data Protection & Privacy

DSS – Forcepoint Triton AP Data Administrator

Overview

Objectives

Outline

Target Audience

Pre-requisites

Upcoming Dates

Follow Up Courses

Category

Address

Contact

Connect with us

Newsletter Sign up