HP ArcSight ESM Security Administrator

Duration : 5 days

Who should attend

This course is intended for any system administrators,
who need to:
-Install, administer, maintain and troubleshoot HP ArcSight ESM components
-Design and implement integrations between HP ArcSight ESM and other HP
ArcSight appliances
-Proactively investigate the health of the HP ArcSight ESM CORRE environment

Prerequisites
To be successful in this course, you will have an understanding of:
• Common security devices, such as IDS & firewalls
• Common network device functions, such as routers, switches, hubs, etc.
• TCP/IP functions, such as CIDR blocks, subnets, addressing, communications,
etc.
• Basic Windows operating system tasks & functions
• Possible attack activities, such as scans, man in the middle, sniffing, DoS, etc.,
and possible abnormal activities, such as worms, Trojans, viruses, etc.
• SIEM terminology, such as threat, vulnerability, risk, asset, exposure,
safeguards, etc.
• 6 months experience administering HP ArcSight ESM
• Completed HP ArcSight ESM Administrator

Topics
Module 1: ESM CORRE 6.5 Architecture
Module 2: Installing ESM CORRE 6.5
Module 3: Installing and Navigating the ESM Console
Module 4: Using CORRE with ArcSight Appliances
Module 5: Installing Connectors
Module 6: Managing ArcSight SmartConnectors
Module 7: Using the Management Console Browser Interface
Module 8: Real-time Event Flow Using the ESM Console
Module 9: Managing the Network Model
Module 10: Installing FlexConnectors
Module 11: ArcSight Forwarding Connectors
Module 12: Configuring Notifications
Module 13: Managing SSL Certificates
Module 14: Maintaining Lists and Trends
Module 15: ArcSight Web and the Command Center
Module 16: Event Management
Module 17: ArcSight ESM Admin Authentication
Module 18: Maintaining CORRE System Health
Module 19: Using ArcSight Packages
Module 20: Patching CORR-Engine
Module 21: ArcSight ESM CORRE Back Up and Restore
Module 22: Managing CORRE Daily Partitions
Module 23: Working with HP ArcSight Support