|
ArcSight Training
- Now available for Customers and
Partners
ArcSight's industry-leading services
organization offers professional training
classes intended to enhance and certify
the proficiency of customers and business
partners.
View the Training Schedule
The ArcSight instructor-led
training program offers beginning
and advanced course for both the Security
Analysts that use ArcSight on an
everyday basis and the Administrators
and Integrators that install, optimize
and administer ArcSight deployments:
Basic ArcSight Certification
|
ACSA
-
ArcSight
Certified Security Analyst |
|
ACSAs will be intimately familiar
with all aspects of ArcSight
Console usage as well as show
a basic level of proficiency
in ArcSight authoring environments
and interfaces.
Duration: 5 days
Specific items covered
include:
- Console Basics, Preference
Settings, Navigator Panel &
Resource Tree, Viewer Panel,
Inspector Panel
- Event Replay
- Zones, Filters &
Common Condition Editor
- Dashboards & Datamonitors
- Report Generation &
Report Authoring
- Cases Management
- Charts Usage and Authoring
- myArcSight Usage
- Rules Theory, Authoring,
& Operation
- Active Lists Definition
- Assets Active Lists
Definition & Management
- Vulnerability Definition
- Security Intelligence
Mapping & Dynamic Security Index
- Session Correlation
Download full course outlines:
|
|
ACIA
-
ArcSight
Certified Integrator/Administrator |
|
ACIAs will
be introduced to all aspects
of ArcSight Console administration
and achieve a basic level of
proficiency in installations
of the ArcSight Manager, ArcSight's
centralized database as well
as ArcSight SmartConnectors.
Duration:
4 days
Specific
items covered include:
- Administration of Users
- Administration of Access
Controls
- Administration of Notification
- Administration of Agents
- Overview of the Multi-Manager
Architecture
- Configuration of SNMP
capabilities
- Installers for Manager,
Database, and Agents
- Basic DBA Skills
- Basic flexAgent overview
- Basic 3rd party system
interfaces overview
Download full course outlines:
|
<back to top>
Advanced ArcSight Certification
| ACASA
-
ArcSight
Certified Advanced Security Analyst |
|
ACASAs are
proficient in all advanced aspects
of ArcSight security content,
correlation and analysis authoring
as well as with in designing
workflow for other security
analysts.
Duration
:
2 day rapid class; Extended exercises require
3 days
Specific
items covered include:
- Complete authoring of rules, datamonitors, dashboards, reports,
and charts
- Deeper rules theory
and best rules authoring/design
practices
- How to define and model
custom use-cases
|
| ACAIA
-
ArcSight
Certified Advanced Integrator/Admin |
|
ACAIAs are
proficient in all advanced aspects
of installation and configuration
of a complete ArcSight deployment.
Duration:
2 day rapid class; extended exercises require
3 days
Specific
items covered include:
- Deployment of advanced security
options (e.g., 2-factor authentication,
support of Radius/ACE servers)
- Integration with 3rd
party systems including network
management and trouble ticketing
applications
- Custom development of
Agents using the ArcSight FlexAgent
- Customization of security
mappings including signature
categorization, vulnerability
mapping, and knowledgebase linkages
- Ability to modify configuration
files (under the covers, not
exposed at Console level)
- Complete skills in distributed
Multi-Manager architecture and
deployment
- Complete DBA tuning,
configuration, sizing, and troubleshooting
|
<back
to top>
ArcSight
Workshops
ArcSight
3.5 to 4.0 Innovations and
Enhancements Workshop |
In this three day workshop, students will become familiar
with the current feature improvements of the ArcSight ESM 4.0 system. They will
become proficient with the new functionality, such as identity correlation and
the newly designed reporting features.
Duration:
3 daysSpecific
items covered include:
-
ArcSight ESM v4.0 Console
and Web interface
enhancements
-
Enhancements to ESM
resources including Assets,
Rules, Active Lists, the use
of variables and facilities
for SmartConnector upgrades
- New
features including Resource
Packages, File Resources,
Session Lists, the new
Reports architecture, along
with the benefits of the
Oracle 10g database and
optional iDefense threat
profile integration
-
Session Correlation to model
dynamic device and user
behaviors
Download full course outline:
|
<back
to top>
Prerequisites for ACSA/ACIA or
ArcSight 3.5 to 4.0 Innovations and
Enhancements: ArcSight product
license or reseller/partner agreement
in place. Prerequisites for the
Advanced Certification courses: Related basic certification(s)
and 3-6 months of hands-on experience
in actual ArcSight deployments
View the Training Schedule
|
