1­-855­-778­-7246
> > > EDU-285

Traps: Deploy and Optimize (EDU-285)

 

Course Content

Palo Alto Networks® Traps™ Advanced Endpoint Protection prevents sophisticated vulnerability exploits and unknown malware-driven attacks. Successful completion of this two-day, instructor-led course should prepare the student to deploy on-premise Traps in large-scale or complex configurations and optimize its configuration.

Who should attend

Security Engineers, System Administrators, and Technical Support Engineers

Prerequisites

  • Traps: Install, Configure and Manage (EDU-281)
  • Students should have completed “Traps: Install, Configure, and Manage” or (for Palo Alto Networks employee and partner SEs) “PSE: Endpoint Associate” training. Windows system administration skills and familiarity with enterprise security concepts also are required. An elementary level of Linux shell experience is needed only for the Linux lab activity

Course Objectives

Students should learn how to design, build, implement, and optimize large-scale Traps deployments: those with multiple servers and/or thousands of endpoints. In hands-on lab exercises, students will distribute Traps endpoint software in an automated way, prepare master images for VDI deployment, create a Traps Linux installation package and install the agent onto a Linux endpoint, build multi-ESM deployments, design and implement customized policies, test Traps with exploits created using Metasploit, and examine prevention dumps with windbg.

Outline: Traps: Deploy and Optimize (EDU-285)

Module 1: Scaling Server Infrastructure

  • Small site architectures
  • Large site architectures
  • TLS/SSL deployment considerations
  • Installing and configuring the Linux agent

Module 2: Scaling Agent Deployment

  • Distributing Traps via GPO
  • Configuring Virtual Desktop Infrastructure with Traps

Module 3: ESM Tuning

  • Tuning ESM settings
  • External logging and SIEM integration
  • Role-based access control (RBAC)
  • Virtual groups
  • Defining conditions
  • Tuning policies
  • Implementing ongoing maintenance

Module 4: Windows Migrations for Traps

  • SQL database migration
  • SSL certificate migration

Module 5: Advanced Traps Forensics

  • Best practices for managing forensic data
  • Agent queries
  • Resources for malicious software testing
  • Exploit challenge testing with Metasploit
  • Exploit dump analysis with windbg

Module 6: Advanced Traps Troubleshooting

  • ESM and Traps architecture
  • Troubleshooting scenarios using dbconfig and cytool
  • Troubleshooting application compatibility and BITS connectivity
Classroom Training

Duration 2 days

Price
  • United States: US$ 1,995
Online Training

Duration 2 days

Price
  • United States: US$ 1,995
 
Click City Name To Book Schedule
This is an Instructor-Led Classroom course
This green checkmark in the Upcoming Schedule below indicates that this session is Guaranteed to Run.
This is an Instructor-Led Online (ILO) course. These sessions are conducted via WebEx in a VoIP environment and require an Internet Connection and headset with microphone connected to your computer or laptop.
This is a FLEX course, which is delivered simultaneously in two modalities. Choose to attend the Instructor-Led Online (ILO) virtual session or Instructor-Led Classroom (ILT) session.
  *   This class is delivered by a partner.
United States
Dec 19-20, 2019 Guaranteed to Run Online Training 09:00 US/Eastern * Enroll
Dec 26-27, 2019 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Jan 2-3, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Jan 16-17, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Jan 30-31, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Feb 13-14, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Feb 27-28, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Mar 12-13, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll
Mar 26-27, 2020 Guaranteed to Run Online Training 07:00 US/Pacific * Enroll

Fast Lane Flex™ Classroom If you can't find a suitable date, don't forget to check our world-wide FLEX™ training schedule.

Europe
Slovenia
Apr 1-2, 2020 Online Training Time zone: Europe/Ljubljana Course language: English Enroll
Jul 1-2, 2020 Online Training Time zone: Europe/Ljubljana Course language: English Enroll
Sep 10-11, 2020 Online Training Time zone: Europe/Ljubljana Course language: English Enroll
United Kingdom
Apr 1-2, 2020 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Jul 1-2, 2020 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Sep 10-11, 2020 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Dec 3-4, 2020 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Latin America
Brazil
Feb 5-6, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Apr 8-9, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Jun 10-11, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Aug 12-13, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Oct 21-22, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Dec 9-10, 2020 Online Training Time zone: America/Sao_Paulo Enroll
Mexico
Jan 29-30, 2020 This is a FLEX event Distrito Federal * Enroll
Online Training Time zone: America/Mexico_City Enroll
Mar 11-12, 2020 Online Training Time zone: America/Mexico_City Enroll
Mar 11-12, 2020 This is a FLEX event Distrito Federal * Enroll
Online Training Time zone: America/Mexico_City Enroll
May 6-7, 2020 This is a FLEX event Distrito Federal * Enroll
Online Training Time zone: America/Mexico_City Enroll
May 13-14, 2020 Online Training Time zone: America/Mexico_City Enroll
Jul 22-23, 2020 Online Training Time zone: America/Mexico_City Enroll
Sep 23-24, 2020 Online Training Time zone: America/Mexico_City Enroll
Nov 25-26, 2020 Online Training Time zone: America/Mexico_City Enroll
Africa
Egypt
Mar 10-11, 2020 This is a FLEX event Cairo Course language: English Enroll
Online Training Time zone: Africa/Cairo Enroll
Jun 16-17, 2020 This is a FLEX event Cairo Course language: English Enroll
Online Training Time zone: Africa/Cairo Enroll
Sep 8-9, 2020 This is a FLEX event Cairo Course language: English Enroll
Online Training Time zone: Africa/Cairo Enroll
Dec 15-16, 2020 This is a FLEX event Cairo Course language: English Enroll
Online Training Time zone: Africa/Cairo Enroll
South Africa
Mar 11-12, 2020 Johannesburg Enroll
Jun 10-11, 2020 Johannesburg Enroll
Sep 16-17, 2020 Johannesburg Enroll
Dec 9-10, 2020 Johannesburg Enroll
 
...