Sourcefire and SNORT training from Castleforce

Sourcefire educates security professionals around the world through a variety of different programs to meet your schedule and budget. Our education programs are a great way for companies to reduce the cost of deployment and maintenance while also encouraging employee development.

Sourcefire offers instructor-led classroom training and onsite training, as well as computer-based training. Each instructor-led class, which we offer globally, includes a reference manual, hands-on training, lecture, labs, continental breakfast, lunch, and beverages.

Sourcefire and SNORT training course overview

Sourcefire 3D System

This 4-day class covers the powerful features of the Sourcefire 3D® System including RNA® (Real-time Network Awareness), RUA® (Real-time User Awareness), 3D Sensors, Sourcefire Defense Center®, and an overview of the Snort® rules language. Sourcefire users will learn to properly tune their system for better performance and greater network intelligence.

Sourcefire 3D System + Rule Writing

This 5-day class consolidates the Sourcefire 3D System class and the Rule Writing Best Practices class and covers the powerful features of the Sourcefire 3D System, including RNA® (Real-time Network Awareness), RUA® (Real-time User Awareness), Sourcefire 3D Sensors, Sourcefire Defense Center® (Defense Center), and the Snort® rules language. Sourcefire® users will learn to properly tune their system for better performance and greater network intelligence.

Sourcefire 3D System Analyst

This 3-day class takes a focused look at the process of analyzing IPS events in the Sourcefire 3D® System. The course will prepare students to read, understand, and respond to IPS alerts as well as how to tune the system. This includes extensive hands-on examples, lab exercises, and case studies.

Sourcefire 3D System DVD QuickStart

This self-paced, 4-hour DVD training covers the Sourcefire 3D user interface and the initial setup of Sourcefire appliances. Customers will get their products up and running quickly by learning how to configure the Sourcefire 3D Sensors and the Defense Center. Students will also learn GUI navigation, policy setup, and system administration. Although instructor-led training is preferred, the QuickStart program is an efficient way for those needing a jumpstart or refresher course. In addition to the DVD, QuickStart includes the courseware manual from the 4-day Sourcefire 3D System.

Sourcefire Fundamentals of Exploit Development

This 3-day class takes beginners from zero knowledge to exploit development, explaining all the details along the way. Starting with the basics of assembly and computer architecture, this class demonstrates how to exploit real vulnerabilities. The end goal is that the student comes away with a comprehensive idea of how software works from the processor through to user applications with an eye for vulnerabilities and taking control of the process.

Sourcefire Rule Writing Best Practices

This 3-day class focuses exclusively on the Snort® rules language and rule writing. Starting from rule syntax and structure to advanced rule option usage, students will analyze exploit packet captures and put the rule writing theory they learn to work in labs by implementing rule language features to trigger alerts on the offending network traffic.

SNORT training course overview

Snort IDS/IPS Technology

This 4-day class is for those who want to learn how to build a Snort sensor from scratch using many of the open source tools and plug-ins available to help manage, tune and deliver feedback on suspicious activity on your network. Hands-on labs with fully documented instructions help students construct solid, secure Snort installations and understand the inner workings of the premier open source IDS/IPS available today.

Snort IDS/IPS Technology + Rule Writing

This 5-day class consolidates the Snort IDS/IPS Technology class and the Rule Writing Best Practices class. Students will learn how to build and manage a Snort sensor using open source tools, plug-ins, and the Snort rule language to help manage, tune, and deliver feedback on suspicious network activity. Hands-on labs help students construct solid, secure Snort installations and write Snort rules using proper syntax and structure. 

Sourcefire training dates

 

Snort training dates

 

Sourcefire Support

Castleforce can provide different grades of Sourcefire support depending on your requirement.  Please take a look at the following datasheet to see a breakdown on the Sourcefire service level agreements offered.

Sourcefirce Consultancy

All Sourcefire products need to be installed by Sourcefire certified engineers in order to use the support agreements correctly.  We can assist with Sourcefire designs, installations, policy creations, reviews and testing.

All consultancy work requires a scope of work to be created so we can sign off on the work completed.   Our engineers can attend your site to deliver professional service work or provide remote assistance if required and we can tailor our consultancy services to meet your requirements.

Simply contact us for more information and we will be happy to discuss more details in full.