Data Security Fabric - Data Gateway Course

Course Overview

In this 4 day hands-on course, students will learn:
• How to initially configure SecureSphere for a Database Security
deployment
• How to run DB Data Classification Scans to find sensitive data
• How to implement Database Security Policies and Database Auditing.
• How to configure DB Profiling
• How to analyze Database Violations and Alerts
• How to perform best practice tuning tasks
• How to configure Active Blocking
• How to configure Assessment Scans and manage risk scores
• How to configure Database User Rights Management Scan and analyze
the results

Prerequisites

Before taking this course, you should have the following skills:

  • General understanding of application layer security concepts, application layer Web, and/or database protocols.
  • Experience implementing or managing data center security or database applications.
  • Imperva Security Administration is recommended

Audience Profile

This course is intended for database administrators, security administrators, security engineers responsible for configuring, securing and monitoring their database applications with Imperva Database Security and Compliance.

Learning Objectives

  • Explore how Cloudflare supports application deployment
  • Understand domain registration and SSL certificates
  • Employ different kinds of SSL Certificates to secure web applications
  • Configure caching to speed the delivery of resources

Content Outline

  • Review the Imperva Data Protection Architecture
  •  Become familiar with the presentation of the training materials.
  •  Learn to use the Imperva training portal.
  •  Become familiar with the lab environment, topology, and user accounts.
  •  Become familiar with the Imperva Data Protection Web UI’s major components and navigating the Web UI.
  • Set password strength requirements. 
  • Enable users to enter comments when making changes to security policies.
  •  Create Imperva Data Security user accounts and roles.
  •  Configure Active Directory authentication.
  •  Update ADC content.
  • Create a Site.
  •  Create a Server Group.
  •  Create a Service and default Application.
  •  Discover and secure previously unknown servers on the network.
  •  Add discovered servers to a Site.
  •  Verify existing Site objects, making any necessary corrections.
  •  Install Database Agent.
  •  Configure additional Agent settings.
  •  Configure Database Connections on the Database Service.
  •  Create Stored Procedure Groups and apply them to their database applications.
  •  Add the protected DB server’s SSL key to the Database Service.
  •  Apply Data Masking to the Database Service.
  •  Enable and configure Personal Information Masking.
  •  Create Imperva Data Security Users and Roles.
  • Define sensitive data.
  •  Identify Imperva Data Security’s predefined data types.
  •  Create Custom DB Data Types.
  •  Create Scan Profiles.
  •  Create and run DB Data Discovery Scans.
  •  Analyze DB Data Discovery Scan Results. 
  • Accept and Reject DB Discovery Scan Results.
  •  Review the effect of Accepting DB Discovery Scan Results.
  • Define, compare, and contrast Action Interfaces, Action Sets, and Followed Actions.
  •  Explain placeholders, and where to find complete details regarding them.
  • Create Email, FTP, Syslog, etc., Action Interfaces as needed.
  •  Create Email, FTP, Syslog, etc., Action Sets as needed.
  •  Use Followed Actions to implement Action Sets on system administration jobs.
  • Describe the features of Imperva Data Security’s Report Settings.
  •  Describe how to work with report Keywords.
  •  Create reports of various types, including System Events, Configuration, and Alerts reports.
  •  Schedule Reports and the Reports Archive job.
  •  Create security-focused reports, such as Daily or Weekly Top 10 Alert reports.
  • Explain Predefined Policies and Default Policies.
  •  Summarize each of the Default DB Security Policies applied to the SuperVeda Site.
  •  Explain performance differences between Signatures and Dictionaries.
  •  Add Followed Actions to SuperVeda’s Default DB Security Policies.
  •  Create Custom DB Security Policies.
  •  Create a DB Security Policy Configuration Report.
  •  Explain how Imperva Data Security’s Dynamic Profiling works.
  •  Explain the structure of Database Profiles and their place in the Sites Tree.
  •  Explain Profile Modes and Thresholds.
  •  Explain the components of DB Profiles.
  •  Explain the benefit of creating User Groups for profiles.
  •  Configure the SQL Profile Policy.
  •  Disable profiling for a specific database.
  •  Configure DB Profile Reports.
  • Define Violations, Alerts, and Alert Aggregation.
  •  Explain the components of Violations and Alerts.
  •  Use Imperva Data Security’s Alert Flags to manage alerts.
  •  Use the Dashboard to quickly monitor Imperva Data Security’s current overall state.
  •  Configure and run Alert Reports to help analyze the Top Ten attacks against a protected 

application.

  •  Explain Imperva Data Security’s Database Auditing process.
  •  Explain the Fast Viewing process.
  •  Explain Imperva Data Security’s Audit Archiving and Purging process.
  •  Identify the data collected by the Default Rule – All Events Audit policy.
  •  Create Audit Policies.
  •  Explain how to share DB Audit Data information with SIEM systems.
  •  Explain how DB Audit Data Views help administrators analyze audit data.
  •  Create Reports directly from the DB Audit Data Views.
  •  Resolve Connected User and Hashed User when observed in the DB Audit Data.
  •  Configure SSL and Kerberos Keys.
  •  Tune Security Policies and Profiles.
  •  Tune Audit Policies.
  •  Configure Agent Exclude from Monitoring Rules.
  •  Become familiar with Imperva Data Security’s Audit Management Statistics.
  •  Review Imperva Data Security’s traffic blocking capabilities.
  •  Explain the Server Group Operation Modes.
  •  List and explain Imperva Data Security’s Blocking Followed Actions for Database Traffic.
  •  Explain the DB Agent’s Modes and how they relate to blocking DB traffic.
  •  Describe Imperva’s recommended practices to enable DB traffic blocking.
  •  Describe the structure of DB Assessment Policies.
  •  Configure DB Assessment Scans that implement DB Assessment Policies.
  •  Review DB Assessment Scan results.
  •  Explain how SecureSphere evaluates Risk.
  •  Create DB Assessment Scan Result Reports.
  •  Configure and run DB User Rights Scans.
  •  Analyze the Effective Permissions found by the DB User Rights Scan.
  •  Manage Role and Permission Grants.
  •  Create a DB User Rights Report that informs the DBA team which permissions should be corrected.

FAQs

A: Imperva's Web Protection is based on a network of secure reverse proxies deployed on our globally distributed CDN. Web traffic that is routed through the Imperva network is terminated by those proxies, allowing Imperva to inspect each and every request to the website and identify and block any malicious activity.

A: Imperva protects cloud applications, websites and applications, files, SharePoint systems, databases and big data repositories from both theft and ever-evolving extortion attacks like DDoS and ransomware.

A: Imperva Cloud WAF offers the industry's leading web application security firewall, providing enterprise-class protection against the most sophisticated security threats. As a cloud-based WAF, it ensures that your website is always protected against any type of application layer hacking attempt.

A: Imperva Data Security provides continuous monitoring with separation of duties. It captures and analyzes all database activity from both application and privileged user accounts, providing detailed audit trails that show who accesses what data, when, and what was done to the data.

A: To attend the training session, you should have operational Desktops or Laptops with the required specifications, along with a good internet connection to access the labs.

A: We would always recommend you attend the live session to practice & clarify the doubts instantly and get more value from your investment. However, if, due to some contingency if you have to skip the class, Radiant Tech learning will help you with the recorded session of that particular day. However, those recorded sessions are not meant only for personal consumption and NOT for distribution or any commercial use.

A: Radiant Tech learning has a data center containing the Virtual Training environment for the purpose of participant hand-on-practice. Participants can easily access these labs over Cloud with the help of a remote desktop connection. Radiant virtual labs provide you the flexibility to learn from anywhere in the world and in any time zone.

A: The learners will be enthralled as we engage them in real-world and Oriented industry projects during the training program. These projects will improve your skills and knowledge, and you will gain a better experience. These real-time projects will help you a lot in your future tasks and assignments.

A: You can request a return if you do not desire to enroll in the course.

A: Yes you can.

A: We use the ideal standards in Internet security. Any data retained is not communicated with third parties.

A:It is recommended but not mandatory. Being acquainted with the primary course material will enable students and the trainer to move at the desired pace during classes. You can access courseware for most vendors.

A: You can buy online from the page by clicking on "Buy Now". You can view alternate payment methods on the payment options page.

A:Yes, students can pay from the course page.

A: The course completion certification will be awarded to all the professionals who have completed the training program & the project assignment given by your instructor. You can use the certificate in your future job interviews which will surely help you to acquire your dream job.

A: Radiant believes in a practical & creative approach to training & development, which distinguishes it from other training & development platforms. Moreover, training courses are undertaken by some experts with range of experience in their domain.

A: Radiant team of experts will be available at e-mail support@radianttechlearning.com to answer your technical queries even after the training program.

A: Yes, Radiant will provide you with the most updated high, value & relevant real-time projects & case studies in each training program.

A: Technical issues are unpredictable & might occur with us as well. Participants have to ensure they have access to the required configuration with good internet speed.

A: Radiant Techlearning offers training programs on weekdays, weekends & combination of weekdays & weekends. We provide you with complete liberty to choose the schedule that suits your needs.

A: Radiant has highly intensive selection criteria for Technology Trainers & Consultants, who deliver you training programs. Our trainers & consultants undergo rigorous technical and behavioral interview and assessment processes before they are on board in the company.

Our Technology experts/trainers & consultants carry deep-dive knowledge in the technical subject & are certified from the OEM.

Our training programs are practically oriented with 70% – 80% hands on the training technology tool.  Our training program focuses on one-on-one interaction with each participant, latest content in curriculum, real-time projects and case studies during the training program.

Our faculty will provide you with the knowledge of each course from the fundamental level in an easy way and you are free to ask your doubts any time from your respective faculty.

Our trainers have patience and ability to explain difficult concepts in a simplistic way with depth and width of knowledge.

To ensure quality learning, we provide a support session even after the training program.

Send a Message.


  • Enroll