In the Forcepoint Insider Threat System Engineer 5 days course, students will gain an understanding of the key core competencies and skills needed to practice as a System Engineer handling Forcepoint Insider Threat. The core competencies are design, deployment, integration, maintenance, and troubleshooting. This course prepares engineers or other professionals who are about to manage or lead system engineering development of Forcepoint Insider Threat from concept creation to production.

• Understand key deployment types.
• Learn about sizing and performance considerations.
• Understand how Insider Threat integrates with other Forcepoint products and third-party products.
• Perform common maintenance activities to keep system performance high in fast-evolving real-world environments.
• Troubleshoot and debug each major component.

Day 1&2–Design and Deployment

1. Components and communication

• Describe the responsibilities of each component
• Understand protocols and ports used for communication between components

2. Planning

• Identify and confirm key System Requirements
• Provide sizing guidelines based on number of agents and policy weight
• Accommodate for growth and redundancy specifications

3. Installation

• Perform demos, POCs, and simple deployments
• Perform intermediate appliance-based deployments
• Perform advanced clustered deployments for large enterprises

4. Initial configuration

• Complete global setup checklist
• Complete Administration Workbench agent setup checklist
• Complete Policy Workbench checklist

5. Phased rollout deployments

• Implement best practices for initial rollout
• Configure and Install Windows Agent
• Configure and Install Mac OS X Agent

6. Tuning

• Create, test, and tune advanced level policies to address a variety of customer’s insider threat concerns

7. Advanced Agent deployment

• Complete roll out using remote Agent deployment solutions

8. Backup and Disaster Recovery

• Set up backups and confirm them with a test recovery

9. Monitoring

• Track deployed Agents using Administration Workbench
• Run and review reports to preempt potential performance issues

Day 3–Integrations

1. Perform AP-DATA integration

• Test and tune AP-DATA triggered policies

2. Set up group mapping via LDAP integration

3. Understand the capabilities of Convergence and Spotlight APIs

Day 4–Upgrades and Hotfixes

1. Server upgrades

• Prepare deployment and database for hotfix
• Install Hotfix
• Reinitialize database and test deployment

2. Agent Bundle upgrades and compatibility packs

• Upgrade using agent commands
• Upgrade using remote install utility

3. Verification

• Confirm HF and Agent Bundles perform as expected

Day 5–Troubleshooting and Debugging

1. Troubleshooting methodology

• Correctly identify the root cause
• Apply and confirm a solution

2. Perform critical server diagnostics

• Enable and review verbose logging
• Access appliance using debug account

3. Database diagnostics and maintenance

• Administer Oracle databases using sqlplus
• Manage database using Oracle Enterprise Manager (OEM)

4. Agent monitoring and troubleshooting

• Run Agent Tool diagnostics locally and remotely
• Use Agent Tool to test for configuration issues
• Manage Agents remotely
• Enable and view verbose logging

• Channel Partners: Sales Engineers, Implementation Specialists, Deployment Specialists, Network Architects, Technical Support
• Forcepoint: Sales Engineers, Professional Services, Technical Support

• Completion of the Forcepoint Insider ThreatAdministrator Course(Previously “SVIT Administrator”)
• Basic understanding of computer systems and networking