RSA enVision Administration and Operation Training (ACBE-RSA-ENV)

Security professionals and administrators who want the capability to administer new device support, is involved in system monitoring and security compliance, or needs to produce reports and analysis of gathered system data.

A functional knowledge of computer operations and networking fundamentals.

This course provides a rigorous hands-on approach to the overall administrative and operation aspects of the RSA enVision product. Students learn the essentials of the product architecture, event capture, analysis environment, and the details involved in setting up system analysis, alerts and comprehensive reports. Students who successfully complete this course will be capable of administering their RSA enVision appliance and performing basic forensic analysis of the network, server, and security events collected by it.

Topics:

- RSA enVision Introduction and explanation/tour of the management GUI 
- RSA enVision Architecture, primary components, and multiple appliance configuration 
- Using RSA enVision to monitor and retrieve historical data for use in compliance and policy reporting 
- Use of the Query function to define and refine data retrieval parameters 
- Construction of comprehensive reports from system data
- Report scheduling and storage management 
- Creation of customized reports and graphical analyses 
- Real-Time Security Analysis and establishing alerts based on defined levels and specific events 
- Correlation of events or sequence of events to trigger alerts 
- The Enterprise Dashboard function and how to manage the dashboard layout for system monitoring

Training Part Number: ACBE-RSA-ENV