| Tivoli Risk Manager |
| Course
Description |
IBM Tivoli Risk Manager correlates
and prioritizes the vast number of security events generated
across applications, operating systems, and network devices
to provide an overall view of the security architecture.
Tivoli Risk Manager helps eliminate clutter, such as false-positives,
while quickly identifying and managing security incidents
and vulnerabilities to help administrators respond with
adaptive security measures. With Tivoli Risk Managers
reporting capabilities, administrators can pinpoint business
security risks and take corrective action.
In this course,
you will learn about the solution that IBM Tivoli Risk
Manager provides, how to operate Risk Manager,
how to customize the reports that the application produces,
how to perform administration and troubleshooting tasks
for the application, and how to install the application.
|
| Class Length |
2
days |
| Objectives |
After completing the Risk Manager Workshop,
students should be able to accomplish the following:
Install
Risk Manager
Configure
the Tivoli Enterprise Console to view Risk Manager events
Configure
the Risk Manager Agent
View
and close events generated by Risk Manager through the
Tivoli Enterprise
Console
View
reports analyzing events detected by Risk Manager
It is beyond the scope of the
Risk Manager course, to cover objectives
in the enabling technology.
Specifically :
Students wll NOT learn to define new TEC events
Students
will NOT learn to write TEC rules.
Students
will NOT learn how to develop custom sensors. Integrators
will need
pre-requisite
knowledge in the use of the enabling technology (Framework
and
TEC)
which security administrators do not need. This course
is focused on
product
capabilities. It does not cover security in general nor
does it cover the
numerous
event sensor sources in detail.
|
| Who will benefit from the course? |
This teaches basic product function, installation,
use, configuration, and troubleshooting. It is useful for
customers, internal audiences and Business Partners. |
| Required
Skills/Knowledge |
IBM Tivoli Risk Manager integrates with several Tivoli
performance and availability applications. If you use
one or more of these applications, you should participate
in training for the application(s) prior to participating
in this course.
Participation in training covering the following applications
is recommended, but not required, before participating
in this course:IBM Tivoli Enterprise Console
|
| Recommended
Pre-requisites |
Tivoli Management Framework and Tivoli Enterprise
Console are helpful but not essential for success in the Risk
Manager. |
| Course
Outline |
Unit 1: Introduction
Unit 2: Risk Manager Architecture
Unit 3: Events and Event Flow
Unit 4: Installing the Risk Manager Event
Server
Unit 5: Installing Risk Manager Clients,
Gateways, and Distributed Correlation Servers
Unit 6: Configuration and Customization
of the Risk Manager
Unit 7: Using Tivoli Risk Manager |