Securing Your E-mail With Ironport

CISCO'nun E-mail güvenlik çözümü olarak sunduğu IronPort ürününe ait 3 günlük Securing Your Email with Cisco IronPort C-Series eğitiminde kurulum, konfigürasyon ve yönetim bilgisi aktarılmaktadır. Katılımcılar bu bilgi ile bir kurumsal networkte kullanılan e-mail trafiğinin yönetimini ve problem giderimini yapabileceklerdir. eğitim süresince E-mail standartları, gelebilecek tehlikeler, bunlara yönelik güvenlik önlemleri ve aşağıdaki ürün özellikleri anlatılmaktadır.

Kimler Katılabilir ?

Kurumsal mesajlaşma sistem yöneticileri, email sistem tasarımcıları ve mesajlaşma uygulamalarından sorumlu network yöneticileri bu eğitime katılabilirler. Katılımcıların orta seviye TCP/IP bilgisine, SMTP protokolü ve MIME mesaj bilgilerine sahip olmaları gerekmektedir.

Eğitim Nasıl Verilecek?

Securing Your Email with Cisco IronPort C-Series Part l-ll

Part l

Day One Agenda

Module 1

― Introduction & System Overview

•List Cisco IronPort Email Security Appliances

•Describe the ESA Hardware Options

•Describe the Email Pipeline Filters •List the ESA Feature Key Options

•Describe the Operation of a Listener

Module 2

―Tracking and Reporting Messages

 •Perform a system installation of an M-Series •Integrate the M-Series into the existing C-Series lab.

•Use local and Centralized Message Tracking

•Use Local and Centralized Reporting

Module 3

― Controlling Sender & Recipient Domains

· Configure public and private listeners

· Configure SMTP Routes

· Use SensorBase Reputation Scores (SBRS) to manage mail

· Use Mail Debugging Tools

Module 4

― Controlling Spam with SensorBase & Anti-Spam

· Adjust SBRS

· Configure Anti-Spam Settings

· Configure the Cisco IronPort Spam Quarantine

· Use the Security Management Appliance for Off Box Quarantining

Module 5

― Using Anti-Virus & Virus Outbreak Filters

•Enable one or both Anti-Virus Engines

•Use one or both AV Engines in Mail Policies

•Use Virus Outbreak Filters to preemptively drop traffic and provide zero-hour protection

•Identify best practices for managing Cisco IronPort Anti-Virus Day Two Agenda

Module 6

― Using Mail Policies to Direct Business Email

· Use Email Security Manager

· Create a User-Based Mail Policies

· Use Message Tracking to monitor message splintering

Module 7

― Using System Quarantines and Delivery Methods

· Describe, create and manage quarantines

· Perform searches quarantine contents

· Assign Bounce Profiles

· Create Virtual Gateways

Module 8

― Using Content Filters for Specific Business Needs

· Describe content scanning

· Detect password-protected / non-protected attachments

· Create weighted content matching

· Implement Matched Content Visibility

· Execute best practices when staging new filters

Module 9

― Preventing Data Loss

· Identify conditions of liability through data loss

· Select a Cisco IronPort DLP solution

· Implement the solution in an Outgoing Mail Policy

· Track DLP Policy usage

Module 10

― Encrypting Outbound Email

•Provision with the Cisco Registered Envelope Service

•Associate a content filtering rule with an “Encrypt” action

•Register a CRES Envelope Recipient

Module 11

― Troubleshooting

· Identify Issues

· Diagnose and Isolate Problems

· Troubleshooting tools and best practices

· Log file contents and log administration

Module 12

― System Administration

· Safely upgrade software on your Cisco IronPort

· Manage users and control alerting behavior

· Manage configurations and prepare for disaster recovery

· Access Customer Support Part ll Day One Agenda This full day class is presented composed of the following lectures and hands-on lab activities:

Module 1:

Configuring LDAP Queries This module focuses directly on common LDAP configurations and issues. A brief overview of the Lightweight Directory Access Protocol is provided to give those new to LDAP some familiarity, but the bulk of the module assumes a basic understanding of LDAP terms and concepts. Active Directory is emphasized in a number of case studies to highlight the various installation choices. These include addressing the use of the ESA against multiple directories in a heterogeneous enterprise.

Module 2:

Message Filters (Advanced Policy) This module focuses on advanced filter options with specific emphasis on creating, troubleshooting, simplification/streamlining and regular expressions. Helpful tips and tricks for both Message and Content filters are covered. Extensive hands-on exercises are designed to give the students practice working with the Command Line Interface (CLI), as well as practical experience troubleshooting and examining logs.

Module 3: Configuring TLS This module focuses on email encryption with TLS. We briefly introduce the TLS technology and then review configuration of the appliance as a STARTTLS Server and STARTTLS Client. We consider reporting and logging of TLS failures. Email envelope encryption is introduced as a failback mechanism for unsuccessful TLS connections. This mechanism is known as Guaranteed Secure Delivery

Module 4: Email Authentication This module focuses introducing Domain Keys Identified Mail and Sender Profile Framework, their role in Email Authentication and the issues of configuring it on the IronPort Appliance. Helpful examples and laboratories are provided to introduce the user to practical implementations.