SmartWall® Threat Defense Director (TDD)

Course Content

Course: SmartWall® Threat Defense Director (TDD) Basic Technical Training

Overview: This 2-day instructor led course, taught by Corero staff, will prepare the student to configure a Corero SmartWall TDD system. The class is structured around several practical labs that teach the student how to optimize the TDD system for their environment.

Target Audience: Security Engineers and Network Engineers

Class Time: Two days

Location: Due to Covid-19, classes are currently only being delivered remotely.

Equipment provided for each student:

• TDD System (Detection Engine, Defense Director and Management Server)
• Juniper MX Router
• Attacker Machine
• Victim Machine

Target Audience: Security Engineers and Network Engineers

Prerequisites: Students must have a basic knowledge of networking, including IP addressing, and basic Juniper CLI experience.

Key Takeaway: Establishes baseline knowledge of Corero – Juniper TDD core fundamentals along with basic configuration and operational understanding of the system.

Successful completion of this 2-day course will provide students insight into threat hunting and discovery processes.

Course Deliverables

Section 1 – TDD introduction
System Components
Configuration Methods

Section 2 – TDD Intra Connectivity
Detection Engine (vNTD)
Central Management (vCMS)
Defense Director (vSWA)
Network Router (vMX)

Section 3 – vMX Configuration
Ephemeral Configuration
Traffic Telemetry
Firewall Filters
Sampled Traffic Mirror
CLI Basics for TDD

Section 4 – vSWA
TDD Application Functions
System Configuration
System Health Check
Attack Mitigations

Section 5 – vCMS Configuration
System Configuration
Setting Smart Rule Thresholds

Labs:

1. Connectivity Tests
2. CMS Setup
3. SWA Setup
4. Smart Rule Lab
5. CIDR Rule Policy Lab
6. Actions Lab
7. Portal Lab
8. Multiple “unknown attack” labs