Cisco Training Courses

Cisco Training Courses

Insoft has been serving IT industry with authorized Cisco courses training, since 2010. Find all the relevant information on Cisco training on this page.

View More

Cisco Certifications

Experience a blended learning approach that combines the best of instructor-led training and self-paced e-learning to help you prepare for your certification exam.

View More

Cisco Learning Credits

Cisco Learning Credits (CLCs) are prepaid training vouchers redeemed directly with Cisco that make planning for your success easier when purchasing Cisco products and services.

Have CLCs and want to redeem them?

Cisco Continuing Education

The Cisco Continuing Education Program offers all active certification holders flexible options to recertify by completing a variety of eligible training items.

View More

Cisco U

Cisco U. is customized to achieve your learning needs as this provides learning paths that includes wide range of topics, including CCNA, Cloud and Network Automation Essentials.

Browse Catalogue

Cisco Business Enablement

The Cisco Business Enablement Partner Program focuses on sharpening the business skills of Cisco Channel Partners and customers.

View More

Fortinet Technical Certifications

Insoft Services´ training capabilities rely on the excellence of our exclusive Fortinet Certified Trainers (FCT). We are dedicated to providing high-quality training to Fortinet Customers and Partners.

View More

Fortinet Technical Courses

Insoft is recognised as Fortinet Authorized Training Center in selected locations across EMEA.

View More

ATC Status

Check our ATC Status across selected countries in Europe.

View More

Fortinet Services Packages

Insoft Services has developed a specific solution to streamline and simplify the process of installing or migrating to Fortinet Products.

Browse Packages

Prepforce Bootcamp

The only comprehensive source available today to prepare for Fortinet NSE 8 certification globally.

View More

Microsoft Training

Insoft Services provides Microsoft training in EMEAR. We provide Microsoft technical training and certification courses that are led by world-class instructors.

View More

Technical Training

The evolution of Extreme Networks Technical Training provides a comprehensive progressive pathway from Associate to Professional accreditation.

View More

ATP Accreditation

As an authorised training partner (ATP), Insoft Services ensures that you receive the highest standards of education available.

View More

What we do

Through our global presence and partner ecosystem, we provide strategic IT consulting services to align IT services with customers' business goals.

View More

 

We are pleased to launch pre-scoped Enterprise Networking Consulting Packages, our ready-made solutions, tailored to ensure efficiency and cost containment.

 

View More

 

We specialize in the deployment of vendor-specific automation tools as well as open-source and vendor-independent solutions, that can be tuned in accordance with the business needs of a specific organization.

 

View More

 

We provide comprehensive IoT consultancy, deployment and support solutions for businesses that want to launch or improve their use of connected technologies.

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

 

View More

 

In a world where technologies are evolving rapidly, every company - business needs a partner to rely on and trust for the smooth and secure operation of its network infrastructure.

 

View More
Cisco Training Courses

 

We provide the highest level of expertise on Cisco consultancy services, that target audits of your current network and implementing updates for improved operational performance, secure data and compliant systems.

View More

 

We provide the highest level of expertise on Fortinet consultancy services that target audits of your current network and implementing updates for improved operational performance, secure data and compliant systems.

View More

 

Our team can help enterprises, get the most value from Extreme products and services following our predefined value-added packages or custom ones that fits business needs.

 

View More

 

TXOne Networks provides cybersecurity solutions that ensure the reliability and safety of ICS and OT environments through the OT zero trust methodology protecting assets for their entire life cycle.

 

View More

About Us

Our training portfolio includes a wide range of IT training from IP providers, including Cisco, Extreme Networks, Fortinet, Microsoft, to name a few, in EMEA.

View More

XDROPS – Cisco XDR Security Operations

Contact Us

We would love to hear from you. Please complete this form to pre-book or request further information about our delivery options.

Data Protection & Privacy

I consent to receive emails and/or calls from Insoft Services related to the Insoft Services´ products and services.
I acknowledge that my data will be collected and processed as described in the Insoft Services privacy policy.

Close

XDROPS – Cisco XDR Security Operations

Enroll Now
Duration
3 Days
Delivery
(Online and onsite)
Price
Price Upon Request

Cisco XDR Security Operations (XDROPS) is a 3-day training guiding you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today’s hybrid, multi-vendor, multi-threat landscape. Overview of all the main integration possibilities and components, including APIs discovery, Endpoint and Network Telemetry and ITSM, SIEM systems, and Public Cloud. Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.

  • Understand the architecture of Cisco Secure Client/XDR.
  • Understand the Identification, Containment, Eradication, and Recovery Workflows.
  • Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
  • Learn how to create automation using Automation APIs.
  • Recognize the types and sequence of Orchestration Workflows.
  • Understand the fundamentals of working with Public Cloud through XDR Orchestration.
  • Explain how to initiate Cisco XDR investigations from Splunk.

Module 1: Evolution and Introduction to Cisco XDR

  • Lesson 1: Detection and Response and the challenges of traditional SOC
  • Lesson 2: What is the OODA loop?
  • Lesson 3: Overview of Cisco XDR
  • High-level Architecture
  • Associating SOC profiles to XDR
  • Integrations and Response
  • XDR/EDR/MDR/SOAR/SIEM – Shared Use cases
  • Analytics and Correlation Engine

Module 2: Threat Detection and Incident Response Workflow

  • Lesson 1: Understanding Threat Detections with Diverse Intelligence
  • Lesson 2: How to read components: Judgement / Indicators / Feeds / Events
  • Lesson 3: Cisco XDR: Incident Manager
  • Threat inspection captured Incidents
  • Infrastructure-based Incident Prioritization: Detection Risk and Asset Value
  • MITRE
  • Correlated pictorial representation of the threat summary
  • Severity Management based on Event types
  • Identification/Containment/Eradication and Recovery Workflows

Module 3: Enrichment from Third-Party Integrations

  • Lesson 1: Overview of the third-party security landscape
  • Lesson 2: Built-in Integrations
  • EDR: Crowdstrike, Sentinel One, MSFT Defender, and more…
  • NDR: Dark Trace, Extrahop, and more…
  • Lesson 3: What is a Relay Module?
  • Lesson 4: XDR: Remote Connector
  • Lesson 5: Accomplishing arbitrary integrations

Module 4: XDR APIs

  • Lesson 1: Northbound and Southbound APIs
  • Lesson 2: Threat Intelligence APIs: Private and public databases of threat intel
  • Lesson 3: Investigation APIs: Enrich data using your integrated products
  • Lesson 4: Response APIs
  • Lesson 5: OAuth APIs: Use credentials and get access tokens
  • Lesson 6: Automation APIs: Trigger workflows in XDR to do just about anything you want!

Module 5: XDR Automation and Orchestration

  • Lesson 1: Understanding Orchestration Workflows: Types and sequence
  • Lesson 2: Workflows Components: Targets, Account Keys, Triggers, Variables, Events, Schedules & Reports
  • Lesson 3: Constructing a basic workflow
  • Lesson 4: Exploring built in cisco and third-party service activities and logics
  • Lesson 5: Customizing out of the box workflows to fit the business use case
  • Lesson 6: Nesting workflows
  • Lesson 7: Using Microsoft APIs to investigate/detect suspicious email with Cisco Secure Email
  • Lesson 8: Enforcing DLP policy on outgoing email using Cisco XDR automation

Module 6: Endpoint and Network Telemetry

  • Lesson 1: Network and Endpoint Visibility Together: Telemetry + Device Insights
  • Lesson 2: Network Visibility Module
  • Lesson 3: Cisco Secure Client/XDR: Architecture
  • Lesson 4: Reports and Audit logs
  • Lesson 5: Asset Tag Device Management

Module 7: Cisco XDR with ITSM, SIEM systems and Public Cloud

  • Lesson 1: Overview translation of Splunk CIM to XDR CTIM
  • Lesson 2: Initiating Cisco XDR investigation from Splunk
  • Lesson 3: Splunk and Cisco XDR Webhooks or Atomic Actions
  • Lesson 4: Overview of Cisco XDR and Service Now Integration
  • Lesson 5: Adding Context to ServiceNow incident – Using XDR Automate
  • Lesson 6: Fundamentals of working with Public Cloud with XDR Orchestration

Lab Outline:

  • Labs are designed to assure learners a whole practical experience, through the following practical activities:
  • Accessing Cisco XDR
  • Overview of Cisco XDR
  • Validate an Attack and Determine the Incident Response
  • Perform Threat Hunting
  • Discover Third Party integrations
  • Query and Recognize XDR API
  • Explore Cisco XDR Orchestration
  • Evaluate Assets in a Typical Enterprise Environment
  • Work with Endpoint and Network Telemetry
  • Explain how to initiate Cisco XDR investigations from Splunk
  • Explore the integration of Splunk and Cisco XDR through Webhooks or Atomic Actions
  • Cisco integrators, resellers, and partners
  • Network administrators
  • Security administrators
  • Security consultants
  • Systems engineers
  • Cybersecurity engineers
  • Cybersecurity investigators
  • SOC analysts
  • Network design engineers
  • Solution architects

The knowledge and skills that the learner should have before attending this course are as follows:

Working knowledge of the Windows and Linux operating systems.
Familiarity with basics of networking security concepts.
Technical understanding of TCP/IP networking and network architecture.
Technical understanding of security concepts and protocols.
The recommended Cisco offering may help you meet these prerequisites:

Implementing and Administering Cisco Solutions (CCNA)

Cisco XDR Security Operations (XDROPS) is a 3-day training guiding you through the main aspects and challenges of traditional SOC. You will learn the Cisco XDR security platform and how it can simplify security operations in today's hybrid, multi-vendor, multi-threat landscape. Overview of all the main integration possibilities and components, including APIs discovery, Endpoint and Network Telemetry and ITSM, SIEM systems, and Public Cloud. Through expert instruction and hands-on lab exercises, you will learn how to read the components and work with Incident Manager for effective threat prioritization, streamlined investigations, and evidence-backed recommendations. In this training, you will discover how to elevate productivity with automation capabilities and boost your security resources for optimal value.
  • Understand the architecture of Cisco Secure Client/XDR.
  • Understand the Identification, Containment, Eradication, and Recovery Workflows.
  • Understand the XDR Remote Connector and how to accomplish arbitrary integrations.
  • Learn how to create automation using Automation APIs.
  • Recognize the types and sequence of Orchestration Workflows.
  • Understand the fundamentals of working with Public Cloud through XDR Orchestration.
  • Explain how to initiate Cisco XDR investigations from Splunk.

Module 1: Evolution and Introduction to Cisco XDR

  • Lesson 1: Detection and Response and the challenges of traditional SOC
  • Lesson 2: What is the OODA loop?
  • Lesson 3: Overview of Cisco XDR
  • High-level Architecture
  • Associating SOC profiles to XDR
  • Integrations and Response
  • XDR/EDR/MDR/SOAR/SIEM – Shared Use cases
  • Analytics and Correlation Engine

Module 2: Threat Detection and Incident Response Workflow

  • Lesson 1: Understanding Threat Detections with Diverse Intelligence
  • Lesson 2: How to read components: Judgement / Indicators / Feeds / Events
  • Lesson 3: Cisco XDR: Incident Manager
  • Threat inspection captured Incidents
  • Infrastructure-based Incident Prioritization: Detection Risk and Asset Value
  • MITRE
  • Correlated pictorial representation of the threat summary
  • Severity Management based on Event types
  • Identification/Containment/Eradication and Recovery Workflows

Module 3: Enrichment from Third-Party Integrations

  • Lesson 1: Overview of the third-party security landscape
  • Lesson 2: Built-in Integrations
  • EDR: Crowdstrike, Sentinel One, MSFT Defender, and more…
  • NDR: Dark Trace, Extrahop, and more…
  • Lesson 3: What is a Relay Module?
  • Lesson 4: XDR: Remote Connector
  • Lesson 5: Accomplishing arbitrary integrations

Module 4: XDR APIs

  • Lesson 1: Northbound and Southbound APIs
  • Lesson 2: Threat Intelligence APIs: Private and public databases of threat intel
  • Lesson 3: Investigation APIs: Enrich data using your integrated products
  • Lesson 4: Response APIs
  • Lesson 5: OAuth APIs: Use credentials and get access tokens
  • Lesson 6: Automation APIs: Trigger workflows in XDR to do just about anything you want!

Module 5: XDR Automation and Orchestration

  • Lesson 1: Understanding Orchestration Workflows: Types and sequence
  • Lesson 2: Workflows Components: Targets, Account Keys, Triggers, Variables, Events, Schedules & Reports
  • Lesson 3: Constructing a basic workflow
  • Lesson 4: Exploring built in cisco and third-party service activities and logics
  • Lesson 5: Customizing out of the box workflows to fit the business use case
  • Lesson 6: Nesting workflows
  • Lesson 7: Using Microsoft APIs to investigate/detect suspicious email with Cisco Secure Email
  • Lesson 8: Enforcing DLP policy on outgoing email using Cisco XDR automation

Module 6: Endpoint and Network Telemetry

  • Lesson 1: Network and Endpoint Visibility Together: Telemetry + Device Insights
  • Lesson 2: Network Visibility Module
  • Lesson 3: Cisco Secure Client/XDR: Architecture
  • Lesson 4: Reports and Audit logs
  • Lesson 5: Asset Tag Device Management

Module 7: Cisco XDR with ITSM, SIEM systems and Public Cloud

  • Lesson 1: Overview translation of Splunk CIM to XDR CTIM
  • Lesson 2: Initiating Cisco XDR investigation from Splunk
  • Lesson 3: Splunk and Cisco XDR Webhooks or Atomic Actions
  • Lesson 4: Overview of Cisco XDR and Service Now Integration
  • Lesson 5: Adding Context to ServiceNow incident – Using XDR Automate
  • Lesson 6: Fundamentals of working with Public Cloud with XDR Orchestration

Lab Outline:

  • Labs are designed to assure learners a whole practical experience, through the following practical activities:
  • Accessing Cisco XDR
  • Overview of Cisco XDR
  • Validate an Attack and Determine the Incident Response
  • Perform Threat Hunting
  • Discover Third Party integrations
  • Query and Recognize XDR API
  • Explore Cisco XDR Orchestration
  • Evaluate Assets in a Typical Enterprise Environment
  • Work with Endpoint and Network Telemetry
  • Explain how to initiate Cisco XDR investigations from Splunk
  • Explore the integration of Splunk and Cisco XDR through Webhooks or Atomic Actions
  • Cisco integrators, resellers, and partners
  • Network administrators
  • Security administrators
  • Security consultants
  • Systems engineers
  • Cybersecurity engineers
  • Cybersecurity investigators
  • SOC analysts
  • Network design engineers
  • Solution architects

The knowledge and skills that the learner should have before attending this course are as follows:

Working knowledge of the Windows and Linux operating systems.
Familiarity with basics of networking security concepts.
Technical understanding of TCP/IP networking and network architecture.
Technical understanding of security concepts and protocols.
The recommended Cisco offering may help you meet these prerequisites:

Implementing and Administering Cisco Solutions (CCNA)