Course Overview
Use Case Workshops are hands-on, instructor-led courses focused on specific use case outcomes in Cisco Stealthwatch Enterprise. The workshops are designed to help you quickly identify and investigate common threats and to provide effective workflows so that you can fully understand Stealthwatch capabilities.
Who should attend
This course is intended for individuals who are responsible for using Stealthwatch to monitor security policy, provide feedback on the configuration, and initiate incident response investigations.
Prerequisites
To complete this workshop, the following components must be installed and configured on your network:
- Stealthwatch Release 7.0 or later
- Stealthwatch Flow Collector
- Integration with Firewall
- Integration with Proxy/Nat Device
- Integration with Proxy/Nat Device
Course Objectives
After taking this course you should be able to
- Explain how Customer Security Events (CSE) can be used.
- Demonstrate how to implement relationship alarms.
- Create, modify, and review host group and host group policies.
- Create and modify flow searches.
This is a Cisco Learning Services course and is delivered directly by Cisco.