Cisco Training Courses

Cisco Training Courses

Insoft has been serving IT industry with authorized Cisco courses training, since 2010. Find all the relevant information on Cisco training on this page.

View More

Cisco Certifications

Experience a blended learning approach that combines the best of instructor-led training and self-paced e-learning to help you prepare for your certification exam.

View More

Cisco Learning Credits

Cisco Learning Credits (CLCs) are prepaid training vouchers redeemed directly with Cisco that make planning for your success easier when purchasing Cisco products and services.

Have CLCs and want to redeem them?

Cisco Continuing Education

The Cisco Continuing Education Program offers all active certification holders flexible options to recertify by completing a variety of eligible training items.

View More

Cisco U

Cisco U. is customized to achieve your learning needs as this provides learning paths that includes wide range of topics, including CCNA, Cloud and Network Automation Essentials.

Browse Catalogue

Cisco Business Enablement

The Cisco Business Enablement Partner Program focuses on sharpening the business skills of Cisco Channel Partners and customers.

View More

Fortinet Technical Certifications

Insoft Services´ training capabilities rely on the excellence of our exclusive Fortinet Certified Trainers (FCT). We are dedicated to providing high-quality training to Fortinet Customers and Partners.

View More

Fortinet Technical Courses

Insoft is recognised as Fortinet Authorized Training Center in selected locations across EMEA.

View More

ATC Status

Check our ATC Status across selected countries in Europe.

View More

Fortinet Services Packages

Insoft Services has developed a specific solution to streamline and simplify the process of installing or migrating to Fortinet Products.

Browse Packages

Prepforce Bootcamp

The only comprehensive source available today to prepare for Fortinet NSE 8 certification globally.

View More

Microsoft Training

Insoft Services provides Microsoft training in EMEAR. We provide Microsoft technical training and certification courses that are led by world-class instructors.

View More

Technical Training

The evolution of Extreme Networks Technical Training provides a comprehensive progressive pathway from Associate to Professional accreditation.

View More

ATP Accreditation

As an authorised training partner (ATP), Insoft Services ensures that you receive the highest standards of education available.

View More

What we do

Through our global presence and partner ecosystem, we provide strategic IT consulting services to align IT services with customers' business goals.

View More

 

We are pleased to launch pre-scoped Enterprise Networking Consulting Packages, our ready-made solutions, tailored to ensure efficiency and cost containment.

 

View More

 

We specialize in the deployment of vendor-specific automation tools as well as open-source and vendor-independent solutions, that can be tuned in accordance with the business needs of a specific organization.

 

View More

 

We provide comprehensive IoT consultancy, deployment and support solutions for businesses that want to launch or improve their use of connected technologies.

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

 

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

 

View More
Cisco Training Courses

 

We provide the highest level of expertise on Cisco consultancy services, that target audits of your current network and implementing updates for improved operational performance, secure data and compliant systems.

View More

 

We provide the highest level of expertise on Fortinet consultancy services that target audits of your current network and implementing updates for improved operational performance, secure data and compliant systems.

View More

 

Our team can help enterprises, get the most value from Extreme products and services following our predefined value-added packages or custom ones that fits business needs.

 

View More

 

TXOne Networks provides cybersecurity solutions that ensure the reliability and safety of ICS and OT environments through the OT zero trust methodology protecting assets for their entire life cycle.

 

View More

About Us

Our training portfolio includes a wide range of IT training from IP providers, including Cisco, Extreme Networks, Fortinet, Microsoft, to name a few, in EMEA.

View More

Enterprise Security Manager Advanced Topics

Contact Us

We would love to hear from you. Please complete this form to pre-book or request further information about our delivery options.

Data Protection & Privacy

I consent to receive emails and/or calls from Insoft Services related to the Insoft Services´ products and services.
I acknowledge that my data will be collected and processed as described in the Insoft Services privacy policy.

Close

Enterprise Security Manager Advanced Topics

Enroll Now
Enterprise Security Manager Advanced Topics
Duration
4 Days
Delivery
(Online and onsite)
Price
Price Upon Request

This course prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Trellix Enterprise Security Manager. Through demonstration, explanation, and hands-on lab exercises, you will learn how to utilize the Enterprise Security Manager by using Trellix-recommended best practices and methodologies.

  • Review the ESM solution’s abilities and configuration options
  • Define and configure advanced data sources topics such as Asset Manager, Data Enrichment, Auto Learn, SIEM Collector, and Vulnerability Assessment
  • Configure custom parsing rules
  • Implement best practice recommendations in tuning ESM to enhance performance and events visibility
  • Configure Deviation based correlation rules and utilize techniques for both Event and Risk-Based Correlation
  • Make tuning recommendations according to your analysis and identify events for immediate action, delayed action, or no action
  • Perform actions to maximize the usefulness of Enterprise Security Manager
  • Create well-defined use cases and follow a process to implement them

Day 1:

  • Welcome
  • Contextual Configurations
  • Advanced Data Source Options
  • Alarms, Actions, Notifications, and Reports

Day 2:

  • Data Streaming Bus
  • Advanced Syslog Parser
  • ESM Tuning and Best Practices
  • Performance Troubleshooting

Day 3:

  • Advanced Correlation
  • Analysts Tasks
  • Use Case Overview
  • Management Directives Use Cases

Day 4:

  • Organizational Policies Use Cases
  • Compliance Use Cases
  • Current Threats and Vulnerabilities Use Cases
  • Incident Identification Use Cases

This course is intended for Enterprise Security Manager users responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security Manager solution.

Students taking this course should have a working knowledge of networking and system administration concepts, a good understanding of computer security concepts, and a general understanding of networking and application software.

This course prepares Trellix SIEM engineers and analysts to understand, communicate, and use the features provided by Trellix Enterprise Security Manager. Through demonstration, explanation, and hands-on lab exercises, you will learn how to utilize the Enterprise Security Manager by using Trellix-recommended best practices and methodologies.
  • Review the ESM solution’s abilities and configuration options
  • Define and configure advanced data sources topics such as Asset Manager, Data Enrichment, Auto Learn, SIEM Collector, and Vulnerability Assessment
  • Configure custom parsing rules
  • Implement best practice recommendations in tuning ESM to enhance performance and events visibility
  • Configure Deviation based correlation rules and utilize techniques for both Event and Risk-Based Correlation
  • Make tuning recommendations according to your analysis and identify events for immediate action, delayed action, or no action
  • Perform actions to maximize the usefulness of Enterprise Security Manager
  • Create well-defined use cases and follow a process to implement them

Day 1:

  • Welcome
  • Contextual Configurations
  • Advanced Data Source Options
  • Alarms, Actions, Notifications, and Reports

Day 2:

  • Data Streaming Bus
  • Advanced Syslog Parser
  • ESM Tuning and Best Practices
  • Performance Troubleshooting

Day 3:

  • Advanced Correlation
  • Analysts Tasks
  • Use Case Overview
  • Management Directives Use Cases

Day 4:

  • Organizational Policies Use Cases
  • Compliance Use Cases
  • Current Threats and Vulnerabilities Use Cases
  • Incident Identification Use Cases

This course is intended for Enterprise Security Manager users responsible for monitoring activity on systems, networks, databases, applications, and for configuration and management of the Enterprise Security Manager solution.

Students taking this course should have a working knowledge of networking and system administration concepts, a good understanding of computer security concepts, and a general understanding of networking and application software.