The Trellix Intelligent Sandbox with DXL and TIE Administration course provides an in-depth look at each of the products and how they integrate.

You will learn the tasks crucial to set up, administer, and manage Trellix Intelligent Sandbox (TIS), Data Exchange Layer (DXL), and Threat Intelligence Exchange (TIE) solutions.

This combined solution enables you to gain better visibility of your environment, protecting and limiting exposure to threats and vulnerabilities. This course combines lectures and practical lab exercises with significant time allocated for hands-on interaction with the TIS, DXL, and TIE user interfaces, as well as detailed instructions for the integration of this solution.

• Describe the features and functionalities of TIS, TIE, and DXL solutions.
• Describe the installation process for the TIS appliance, TIE server, and DXL broker.
• Configure settings to create Virtual Machines (VMs), and Analyzer Profiles, conduct malware analysis, and generate reports within TIS.
• Describe content management, including basic troubleshooting in TIS.
• Demonstrate the integration of TIS with Trellix solutions, including DXL and TIE, as well as ePO, AR, EDR, SWG, IPS, and ESM for malware analysis.
• Configure policies for DXL brokers and clients and perform basic troubleshooting tasks.

Day 1

• Welcome
• Products Integration
• Trellix Intelligent Sandbox Solution Overview
• TIS Installation and Setup
• Configuring TIS Appliance Settings
• Creating Virtual Machines in TIS

Day 2

• Malware Analysis in TIS
• Configuring TIS Cluster
• Managing Content and Basic Troubleshooting in TIS
• Data Exchange Layer Overview
• Threat Intelligence Exchange Overview
• Endpoint Detection and Response Overview

Day 3

• DXL and TIE Installation
• Managing, Configuring, and Troubleshooting DXL
• Configuring and Using TIE

Day 4

• TIS Integration with ePO, DXL, TIE, AR, and EDR
• TIS Integration with SWG and NSP
• TIS Integration with Email Connector and ESM

This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with network and system security.

Students taking this course should have a basic knowledge of network concepts and protocols (TCP/IP), a basic understanding of routing and connecting flow (LAN, WAN, Internet), basic knowledge of Operating Systems (Windows/Linux), and a working knowledge of ePolicy Orchestrator (ePO).