Part V: Managing and Analyzing Events

642-627 IPS v7.0 exam topics covered in this part:

• Configure and verify the IPS features to identify threats and dynamically block them from entering the network

• Maintain, update, and tune IPS signatures

• Use CSM and MARS for IPS management, deployment, and advanced event correlation

• Optimize security functions, rules, and configuration

Chapter 15: Installing and Integrating Cisco IPS Manager Express with Cisco IPS Sensors

Chapter 16: Managing and Investigating Events Using Cisco IPS Manager Express

Chapter 17: Using Cisco IPS Manager Express Correlation, Reporting, Notification, and Archiving

Chapter 18: Integrating Cisco IPS with CSM and Cisco Security MARS

Chapter 19: Using the Cisco IntelliShield ...

Get CCNP Security IPS 642-627 Official Cert Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.