CI-ECSS
CI-ECSS
Enhancing Cisco Security Solutions with Data Analytics
Price:
Duration:
Please Call
5 Days
CLC's:
CE
44
40 Credits
Who Should Attend
System Engineers
SOC Engineers
Network Architects
Prerequisites
There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:
Cisco CCNP Security or equivalent knowledge
What you will Learn
The Enhancing Cisco Security Solutions with Data Analytics (ECSS) training covers intermediate-level knowledge of Splunk, including its fundamentals, key components, and architecture so you can detect, investigate, and respond to security threats effectively. You’ll learn to utilize various Splunk components, including Splunk Enterprise, Splunk SIEM, and Splunk SOAR.
You’ll also discover how to use and troubleshoot the Cisco Security Cloud App, Cisco Legacy Apps, and technology add-ons (TAs) for integrating Cisco security solutions with Splunk for enhancing user, cloud, and breach protections.
This training also earns you 32 Continuing Education (CE) credits toward recertification.
Course Objectives
Explain the Splunk Enterprise/Cloud fundamentals
Explain the use of SIEM, SOAR as part of the modern SOC architecture to enhance the SOC’s ability to detect, investigate, and respond to security threats effectively
Implement Cisco Security Solutions to Splunk Integration using the Cisco Security Cloud App.
Implement Cisco Security Solutions to Splunk Integration using Cisco Legacy Apps and TAs
Illustrate the value of integrating Cisco security solutions with Splunk using real-world use cases
Troubleshoot the Cisco Security Cloud App and the Cisco Apps and TAs
Course Outline
Overview of Splunk Enterprise and Splunk Cloud
Splunk Enterprise and Splunk Cloud Components
Splunk Enterprise Data Ingestion
Splunk Search Programming Language
Splunk Dashboards and Reports
XDR, SIEM, and SOAR Platforms
Cisco XDR, Splunk SIEM, and Splunk SOAR
Cisco Security Cloud App
Cisco Secure Firewall Integration
Cisco Splunk Enterprise Integration
Cisco Secure Malware Analytics, Duo, Secure Network Analytics, Email Threat Defense, and Multicloud Defense Integrations
Cisco Security Legacy Apps and Technology Add-Ons
Cisco ISE Integration
Cisco NVM Integration
Cisco Security Solutions and Splunk Use Case
Cisco Splunk Use Case
Troubleshoot General Splunk Issues
Troubleshoot Cisco Security Cloud App
Troubleshoot Cisco Legacy Apps and Add-ons
Further information
If you would like to know more about this course please contact us
